Loading npm security reports…
Automated social posting pipeline for Reddit, X/Twitter, LinkedIn, and Moltbook. Install as a Claude Code agent skill.
Static analysis completed at 97.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/cookie-helper.jsView on unpkgPackage source references dynamic require/import behavior.
bin/cookie-helper.jsView on unpkg · L13A manifest entrypoint or package-local install chain reaches persistence behavior.
bin/scheduler/launchd.jsView on unpkg · L4Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/scheduler/launchd.jsView on unpkgSource writes installer persistence such as shell profile or service configuration.
bin/scheduler/launchd.jsView on unpkg · L4Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/cli.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/cli.jsView on unpkgPackage ships non-JavaScript build or shell helper files.
skill/dm-outreach-reddit.shView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
mcp/dist/runtime.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
mcp/dist/screencast.jsView on unpkgPackage source references dynamic require/import behavior.
bin/cookie-helper.jsView on unpkg · L13Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/cookie-helper.jsView on unpkgA manifest entrypoint or package-local install chain reaches persistence behavior.
bin/scheduler/launchd.jsView on unpkg · L4Source writes installer persistence such as shell profile or service configuration.
bin/scheduler/launchd.jsView on unpkg · L4Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/scheduler/launchd.jsView on unpkgManifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/cli.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/cli.jsView on unpkgPackage ships non-JavaScript build or shell helper files.
skill/dm-outreach-reddit.shView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
mcp/dist/runtime.jsView on unpkgSource file is highly similar to a previously finalized malicious package; route for source-aware review.
mcp/dist/screencast.jsView on unpkg