Loading npm security reports…
DAST MCP CLI — fixed single-server client for Flight Master aviation data
LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies existing Cursor, Trae, Claude, and generic agent skill directories. It plants instructions that steer future agent behavior toward this CLI.
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgThe automatic postinstall hook loads the skill installer without a user command.
package.jsonView on unpkg · L20Source fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/client/gateway.jsView on unpkgThis report applies to @flightmaster/dast-cli@1.0.2.
See version security history for other recorded verdicts.
Evidence last updated: .
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg · L21Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L21The automatic postinstall hook loads the skill installer without a user command.
package.jsonView on unpkg · L20A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
package.jsonView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist/client/gateway.jsView on unpkg