@onescience/onecode@1.14.50-202608171449

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

npm postinstall; downloaded binary runs when the user invokes onecode.

A network or endpoint attacker can substitute the native payload later executed by the CLI and supply linked agent assets.

unverified remote native payload bootstrap with package-root agent asset symlinks

This is a concrete unverified remote executable delivery chain and a package-root agent asset setup, but inspected source does not establish malicious payload behavior, exfiltration, or broad foreign agent-control mutation. It should be warned as a staged payload carrier rather than blocked on static source alone.