Spectra Assure
Community
Docs
failIncident: Malware
Scanned: 12 days ago

napi-postinstall

The `postinstall` script helper for handling native bindings in legacy `npm` versions
License: Permissive (MIT)
Published: 4 months ago




SAFE Assessment

Compliance

Licenses
No license compliance issues
Secrets
No sensitive information found

Security

Vulnerabilities
2 severe vulnerabilities exploited
Hardening
2 low priority mitigations absent

Threats

Tampering
1 malware-like behaviors found
Malware
3 supply chain attack artifacts

INCIDENTS FOR THIS VERSION:

malware
4 months agoReported By: Community (Socket)
malware
4 months agoReported By: Community (Bleeping Computer)
malware
4 months agoReported By: Community (OpenSSF)
malware
4 months agoReported By: ReversingLabs (Researcher)
Learn more about malware detection
removal
Reported By: Community
Historical list of all known contributors that worked on this software package.
Role
Username
maintainer