Loading npm security reports…
The Civitai CLI — author and ship Civitai App Blocks. Installs the prebuilt Go binary.
The postinstall hook fetches and stores a remote executable payload. The CLI wrapper executes that payload when the user invokes `civitai`; no source-confirmed exfiltration or AI-agent control mutation exists.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L15Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L15