Loading npm security reports…
Halyard — an agent harness wired to Token Harbor. Built on DeepSeek Harness.
The install hook performs disclosed local UI/product-name rebranding of its direct harness dependency. Runtime network use is for the Token Harbor authentication/model service; no confirmed malicious attack surface was found.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/auth.mjsView on unpkg · L10Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/auth.mjsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L31Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L31A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/auth.mjsView on unpkg · L10Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/auth.mjsView on unpkg