@clearpool/comms @1.0.1
rejected
This version was rejected.
It did not pass GreenFlagged's security review and is not served by the registry.
The findings and risk dispositions below explain why.
88
Risk Score
ISC
License
Yes
Install Scripts
0
Dependencies
0
Dev Dependencies
.5 KB
Package Size
Published
Internal automation library.
Maintainers
aidanmochan
Risk Dispositions (0 applicable to this version, 3 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
Show 3 disposition(s) that do not match any finding on this version
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
install-script:preinstall |
install-scripts | reject | AI | AI (install-scripts): Exfiltrates system info via curl/DNS to attacker-controlled domain; malicious by design. | |
install-script:install |
install-scripts | reject | AI | AI (install-scripts): Identical exfiltration payload in install script; malicious by design. | |
bogus-package |
bogus-package | reject | AI | AI (bogus-package): Empty shell package with no legitimate purpose; all bogus-package signals confirmed. |
Review Summary
Risk score: 88. Findings: 3 high (+75), 1 medium (+10), 1 low (+3).
Published to npm: