@destyler/dialog
before taking action, please confirm.
This report shows the evidence for @destyler/dialog@0.3.3. 1 of 9 known versions is blocked or flagged. See all versions.
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe package description contains an unrelated imperative consistent with reviewer manipulation, which the review rules treat as evidence of malicious intent. The inspected runtime entry otherwise implements ordinary dialog behavior and shows no network or credential activity.
Decision evidence
public snapshot- The package description contains an unrelated imperative telling the reader to confirm before taking action, consistent with reviewer manipulation.
- There are no install lifecycle scripts; the package scripts are for clearing and building.
- The exported module implements dialog state and DOM accessibility behavior, with no identified network or credential handling.
Source & flagged code
1 flaggedThe package description contains an unrelated imperative telling the reader to confirm before taking action, consistent with reviewer manipulation.
package.jsonView on unpkg · L5Findings
Affected versions and remediation
This report applies to @destyler/dialog@0.3.3.
The versions list below shows the verdict for each recorded version.
- Avoid installing @destyler/dialog@0.3.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.