Loading npm security reports…
Agent-board dashboard for Pi: dispatch, monitor, peek/reply, and attach to background Pi sessions.
Installation automatically alters nested dependencies of the Pi coding-agent package. No source evidence establishes credential theft, payload staging, or takeover of broad agent configuration.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe install hook executes a local patch script automatically.
package.jsonView on unpkg · L52Package source references child process execution.
runner/state-runner.mjsView on unpkg · L8Package source references weak cryptographic algorithms.
src/core/auto-state.mjsView on unpkg · L25Package source invokes a package manager install command at runtime.
scripts/patch-vulns.mjsView on unpkg · L46This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
runner/job-runner.mjsView on unpkgThis report applies to @zhuxixi/pi-agent-board@0.4.3.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L53The install hook executes a local patch script automatically.
package.jsonView on unpkg · L52This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
runner/job-runner.mjsView on unpkgPackage source references child process execution.
runner/state-runner.mjsView on unpkg · L8Package source references weak cryptographic algorithms.
src/core/auto-state.mjsView on unpkg · L25Package source invokes a package manager install command at runtime.
scripts/patch-vulns.mjsView on unpkg · L46