Loading npm security reports…
RealTek CORE-THEME — shared React component & admin-screen library (AddFormV1, EditFormV1, ListView, DetailViewV1, ...).
An opt-in postinstall/database CLI reads the consumer .env, connects to MongoDB, and seeds administrative data. It is disabled during normal installation unless a dedicated environment flag is set.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgAn install lifecycle loads the consumer environment, connects to an embedded authenticated database endpoint, mutates authorization state, and seeds a default administrator.
scripts/init-admin-mongodb.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist-lib/Breadcrumb-SzuzmcHH.cjsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L45Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L45An install lifecycle loads the consumer environment, connects to an embedded authenticated database endpoint, mutates authorization state, and seeds a default administrator.
scripts/init-admin-mongodb.jsView on unpkgSource fingerprint signature matches a known malicious package signature; route for source-aware review.
dist-lib/Breadcrumb-SzuzmcHH.cjsView on unpkg