Loading npm security reports…
Shared build configuration for TypeScript projects — ESLint, Prettier, tsconfig, and Playwright presets
The install hook mutates a consumer repository by seeding GitHub Actions release and token-check workflows. Those workflows can write repository contents and publish when later triggered with configured credentials; no exfiltration is shown.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
src/pipeline/auto-changeset.shView on unpkgPackage ships high-entropy non-source blobs.
assets/image/jews-support-a-free-palestine-poster.pdfView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
src/playwright.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L28Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L28Package ships non-JavaScript build or shell helper files.
src/pipeline/auto-changeset.shView on unpkgPackage ships high-entropy non-source blobs.
assets/image/jews-support-a-free-palestine-poster.pdfView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
src/playwright.jsView on unpkg