All @clearpool/streaming versions
@clearpool/streaming @99.99.99
rejected
This version was rejected.
It did not pass GreenFlagged's security review and is not served by the registry.
The findings and risk dispositions below explain why.
100
Risk Score
ISC
License
Yes
Install Scripts
0
Dependencies
0
Dev Dependencies
.5 KB
Package Size
Published
Internal automation library.
Maintainers
aidanmochan
Risk Dispositions (0 applicable to this version, 3 other)
Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.
Show 3 disposition(s) that do not match any finding on this version
| Rule | Source | Disposition | Author | Reason | |
|---|---|---|---|---|---|
install-script:preinstall |
install-scripts | reject | AI | AI (install-scripts): Exfiltrates system info to attacker-controlled domain; malicious by design, generalizes to all versions. | |
install-script:install |
install-scripts | reject | AI | AI (install-scripts): Identical data-exfiltration payload; malicious by design, generalizes to all versions. | |
bogus-package |
bogus-package | reject | AI | AI (bogus-package): Empty shell package with no legitimate content; all bogus signals confirmed. |
Review Summary
Risk score: 100 (capped from 163). Findings: 4 critical (+160), 1 low (+3).
Published to npm: