Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@soyjuanpiece/jpcode@1.0.1: Scan Failed npm security report | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Allowed — no malicious behavior detected

No malicious behavior detected. 4 low-signal pattern(s) reviewed.

View on npm All versions

registry / @soyjuanpiece/jpcode / 1.0.1

@soyjuanpiece/jpcode@1.0.1

⚠ Under review

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis completed at 0.0% confidence. No malicious behavior was detected; 4 low-signal pattern(s) were surfaced and cleared.

Static reason

Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 18.8 KB of source

Source & flagged code

1 flagged · loading source

package.jsonView file

•scripts.postinstall = node bin/install-plugin.mjs

High

Install Time Lifecycle Scripts

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

Package defines install-time lifecycle scripts.

package.json

Findings

1 High1 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumEnvironment Vars

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @soyjuanpiece/jpcode@1.0.1.

See version security history for other recorded verdicts.

Review the evidence and your use of @soyjuanpiece/jpcode@1.0.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-27 20:06:24.372Z (UTC).

0%Scan

Recorded scan confidence

Firewall policyNo policy match

Behavioral surface

ChildProcessEnvironmentVarsFilesystemSupply chain: cleanManifest: clean

LPM.dev Registry

© 2026 LPM

Source & flagged code

1 flagged

package.jsonView file

•scripts.postinstall = node bin/install-plugin.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg