Loading npm security reports…
Capix Code — decentralized AI coding agent with GPU marketplace
LPM treats this as warn-only first-party agent extension lifecycle risk. Install-time code retrieves an unsigned native runtime and configures the package's own AI-agent environment. No source-confirmed credential theft or foreign control-surface mutation.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/postinstall.cjsView on unpkg · L1Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/capix-code.cjsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L35Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L35Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/capix-code.cjsView on unpkgSource gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
scripts/postinstall.cjsView on unpkg · L1