Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@ghost_debugger/nanocache@0.1.0: Suspicious npm security report | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 3 finding(s) warrant review before installing.

View on npm All versions

registry / @ghost_debugger/nanocache / 0.1.0

@ghost_debugger/nanocache@0.1.0

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.44 KB of source

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.postinstall = node lib/cache.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.json

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Findings

1 High2 Low

HighInstall Time Lifecycle Scriptspackage.json

LowNon Install Lifecycle Scripts

LowScripts Present

72%Warn

Verdict confidence

Firewall policyMatched warn-list

Behavioral surface

ChildProcessShellSupply chain: cleanManifest: clean

LPM CLI

Source & flagged code

1 flagged

package.jsonView file

•scripts.postinstall = node lib/cache.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg