Loading npm security reports…
Bridge between IM platforms and AI coding CLIs — one topic, one CLI session with live streaming
A global installation runs a platform binary probe, writes a botmux launcher, and updates the user's shell PATH configuration. This is a bounded same-command installer action, not a confirmed hostile payload.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe automatic postinstall hook runs a package script.
package.jsonView on unpkg · L60A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgOn detected global installs, the script executes the selected platform binary with --version.
scripts/postinstall-bin.mjsView on unpkg · L265The hook creates a global botmux launcher and appends its directory to shell startup files.
scripts/postinstall-bin.mjsView on unpkg · L287This report applies to botmux@3.19.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L61The automatic postinstall hook runs a package script.
package.jsonView on unpkg · L60A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
scripts/install-path-entry.mjs#virtual:normalized:round1View on unpkgOn detected global installs, the script executes the selected platform binary with --version.
scripts/postinstall-bin.mjsView on unpkg · L265The hook creates a global botmux launcher and appends its directory to shell startup files.
scripts/postinstall-bin.mjsView on unpkg · L287