Loading the latest scan…
npm · registry.npmjs.org
Install-time lifecycle script
Early detection
PkgRadar flagged this 10.4 days before public disclosure
Detected 2026-06-07 · disclosed as MAL-2026-6087 on 2026-06-17
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
4.6.3 | Low risk | 0 | 2026-07-10 |
4.8.1 | Low risk | 0 | 2026-07-01 |
4.8.0 | Low risk | 0 | 2026-07-01 |
4.7.0 | Low risk | 0 | 2026-06-28 |
4.6.4 | Low risk | 0 | 2026-06-12 |
4.6.1 | Low risk | 0 | 2026-06-04 |
4.6.2 | Low risk | 0 | 2026-06-04 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]