Loading npm security reports…
Installation automatically runs a shell deletion command. It can remove nested React dependencies from the installed package layout; no broader project or network attack was confirmed.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe automatic postinstall hook invokes a recursive forced deletion command against React package directories.
package.jsonView on unpkg · L54The hook targets packages declared as runtime peer dependencies, risking removal of dependencies needed by the package or its installation layout.
package.jsonView on unpkg · L32The hook targets packages declared as runtime peer dependencies, risking removal of dependencies needed by the package or its installation layout.
package.jsonView on unpkg · L32Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L59Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L59The automatic postinstall hook invokes a recursive forced deletion command against React package directories.
package.jsonView on unpkg · L54