Loading npm security reports…
An elegant, completely silent auto-syncing Git client. Works as a desktop app and npm CLI tool.
A Git failure causes repository metadata to be sent to remote AI services, and the returned command list is executed automatically. Installation also terminates matching processes and, for global installs, launches the application without an explicit command.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source invokes a package manager install command at runtime.
bin/postinstall.jsView on unpkg · L13Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/postinstall.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/cli.jsView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L29Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L29Package source references child process execution.
bin/postinstall.jsSource file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/cli.jsView on unpkgPackage source invokes a package manager install command at runtime.
bin/postinstall.jsView on unpkg · L13Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/postinstall.jsView on unpkg