registry / reactjs-risk / 99.14.0

reactjs-risk@99.14.0

⚠ Under review

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 2 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

Trivial

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 203 B of source

1 flagged

package.jsonView file

•scripts.preinstall = node poc.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

1 flagged · loading source

package.jsonView file

•scripts.preinstall = node poc.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

1 High1 Low

HighInstall Time Lifecycle Scriptspackage.json

LowScripts Present

This report applies to reactjs-risk@99.14.0.

See version security history for other recorded verdicts.

Review the evidence and your use of reactjs-risk@99.14.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-30 07:08:03.793Z (UTC).