Loading npm security reports…
CodeVine AI CLI — setup, sync, and manage your Claude Code environment
Static analysis flagged 14 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.cjsView on unpkg · L94Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/cli.cjsView on unpkg · L94Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L13Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg · L20Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L20Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L13A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.cjsView on unpkg · L94Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/cli.cjsView on unpkg · L94