Loading npm security reports…
RD-X-96 is a standalone terminal coding assistant. Connect your own API-key or subscription provider and work with your chosen model.
Installing the package automatically removes an existing differently named coding-agent binary. Running its command then fetches and executes an unverified remote executable.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource sends credentials or rich application records to a package-controlled external receiver enabled by default.
index.jsView on unpkg · L2The automatic postinstall hook deletes the separately named codebuff binary from the user configuration directory.
postinstall.jsView on unpkg · L11This report applies to codebuff-mod@1.5.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L12Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L12Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
index.jsView on unpkg · L2The automatic postinstall hook deletes the separately named codebuff binary from the user configuration directory.
postinstall.jsView on unpkg · L11