Loading npm security reports…
Bridge between IM platforms and AI coding CLIs — one topic, one CLI session with live streaming
A global installation runs a bundled platform executable, creates ~/.botmux/bin/botmux, and persists that directory in shell startup configuration. No exfiltration or remote payload retrieval was found in the inspected sources.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe postinstall hook runs automatically during npm installation.
package.jsonView on unpkg · L60A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
scripts/postinstall-bin.mjsView on unpkgOn global installs it executes a resolved platform binary during installation.
scripts/postinstall-bin.mjsView on unpkg · L265This report applies to botmux@3.18.11.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L61The postinstall hook runs automatically during npm installation.
package.jsonView on unpkg · L60A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgOn global installs it executes a resolved platform binary during installation.
scripts/postinstall-bin.mjsView on unpkg · L265This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
scripts/postinstall-bin.mjsView on unpkg