Loading npm security reports…
Agent-board dashboard for Pi: dispatch, monitor, peek/reply, and attach to background Pi sessions.
Install-time code mutates nested dependencies and retrieves replacement packages through npm. No credential exfiltration, remote payload execution, or AI-agent control-surface modification was confirmed.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgpostinstall executes patch-vulns.mjs automatically.
package.jsonView on unpkg · L52Package source references child process execution.
runner/state-runner.mjsView on unpkg · L8Package source references weak cryptographic algorithms.
src/core/auto-state.mjsView on unpkg · L25Package source invokes a package manager install command at runtime.
scripts/patch-vulns.mjsView on unpkg · L46Hook deletes and replaces nested dependency directories.
scripts/patch-vulns.mjsView on unpkg · L30This report applies to @zhuxixi/pi-agent-board@0.3.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L53postinstall executes patch-vulns.mjs automatically.
package.jsonView on unpkg · L52Package source references child process execution.
runner/state-runner.mjsView on unpkg · L8Package source references weak cryptographic algorithms.
src/core/auto-state.mjsView on unpkg · L25Package source invokes a package manager install command at runtime.
scripts/patch-vulns.mjsView on unpkg · L46Hook deletes and replaces nested dependency directories.
scripts/patch-vulns.mjsView on unpkg · L30