Loading npm security reports…
Update to the latest: npx @golproductions/check@latest --install
Less hallucinations. A command firewall for Claude Code: validates every shell command before execution, so fabricated commands are denied before they run.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L2Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L2Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L2The published executable is heavily obfuscated and combines filesystem writes, process spawning, environment access, and network requests.
package.jsonView on unpkg · L5This report applies to @golproductions/check@4.1.7.
See version security history for other recorded verdicts.
Evidence last updated: .
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L2Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L2Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L2The published executable is heavily obfuscated and combines filesystem writes, process spawning, environment access, and network requests.
package.jsonView on unpkg · L5