Loading npm security reports…
Bring Grok into your terminal
No confirmed attack surface was identified in the inspected package scripts. The lifecycle behavior installs and launches the package's CLI binary from its dedicated Grok directory.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe package lifecycle invokes its local installer script.
package.jsonView on unpkg · L21Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/postinstall.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
bin/postinstall.jsView on unpkgThe installer decompresses or copies a bundled platform binary to a temporary local file.
bin/postinstall.jsView on unpkg · L68Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/grok-bootstrap.jsView on unpkgThe launcher starts the resolved local binary with the user's command-line arguments and inherited standard I/O.
bin/grok-bootstrap.jsView on unpkg · L133This report applies to @kingingwang/grok@1.0.45-beff0aee.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L22Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L22The package lifecycle invokes its local installer script.
package.jsonView on unpkg · L21The installer decompresses or copies a bundled platform binary to a temporary local file.
bin/postinstall.jsView on unpkg · L68Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/postinstall.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
bin/postinstall.jsView on unpkgThe launcher starts the resolved local binary with the user's command-line arguments and inherited standard I/O.
bin/grok-bootstrap.jsView on unpkg · L133Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/grok-bootstrap.jsView on unpkg