@fleetbo/svro@0.0.5

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

npm install in an interactive terminal

Writes .env and svro.schema.json, changes package.json build, and deletes legacy svro.d.ts.

postinstall OTP setup, credential provisioning, and project-file mutation

This is not concrete malware: the observed behavior is documented and no stealthy payload, harvesting, or foreign control-surface modification exists. Its automatic credential workflow and project mutation warrant a warning.