npm allagents @1.11.0

score

0.77 high

flagged 2026-05-20 02:17

signals by category

content 2 topology 3

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

typosquat + bin_added: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
bin_added	0.8	new bin entry: ['allagents']
script_count_spike	0.5	scripts count 0 -> 22
topology
typosquat	1.0	combosquat of 'agents'
dist_tag_anomaly	0.5	dist-tags.latest=1.11.0 but max published is 1.11.7-next.1
dependency_added_unknown	0.6	12 new non-watchlisted dep(s): ['@clack/prompts', '@modelcontextprotocol/sdk', 'chalk', 'cmd-ts', 'execa'] ...

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "christso"
  ],
  "versions": 132
}

Evidence (package doc at flag time)

{
  "dependencies_count": 12,
  "dist": {
    "integrity": "sha512-SyIxLj2U908/WLTThZVVe4cbn8YJ4e9dZxI69D7SHsQ22UWWbVqDGM9tQwMfUlB2v4aBsmqt8WvNfQBH2o1VJQ==",
    "tarball": "https://registry.npmjs.org/allagents/-/allagents-1.11.0.tgz",
    "unpackedSize": 2021547
  },
  "dist-tags": {
    "latest": "1.11.0",
    "next": "1.11.7-next.1"
  },
  "latest_version": "1.11.0",
  "maintainers": [
    {
      "email": "christso@gmail.com",
      "name": "christso"
    }
  ],
  "num_versions": 133,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/EntityProcess/allagents.git"
  },
  "scripts": {
    "build": "shx rm -rf dist && bun build ./src/cli/index.ts --outdir ./dist --target node && shx cp -r src/templates dist/",
    "check": "biome check src",
    "check:fix": "biome check --write src",
    "dev": "bun run src/cli/index.ts",
    "docs:build": "bun run docs:install && bun run --cwd docs build",
    "docs:install": "bun install --cwd docs",
    "format": "biome format --write src",
    "lint": "biome lint src",
    "lint:fix": "biome lint --write src",
    "prepare": "bun run build && (test -d .git && bunx prek install -t pre-push || true)",
    "prepublishOnly": "test \"$ALLOW_PUBLISH\" = '1' || (echo 'ERROR: Use bun run publish:next, then bun run promote:latest' && exit 1)",
    "promote:latest": "bun scripts/tag-channel.ts latest",
    "publish:latest": "bun run build && ALLOW_PUBLISH=1 npm publish",
    "publish:next": "bun run build && ALLOW_PUBLISH=1 npm publish --tag next",
    "release": "bun run scripts/release.ts",
    "release:finalize": "bun run scripts/release.ts finalize",
    "release:next": "bun run scripts/release.ts next",
    "test": "bun test",
    "test:coverage": "bun test --coverage",
    "test:integration": "bats tests/integration/*.bats",
    "test:watch": "bun test --watch",
    "typecheck": "tsc --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + bin_added: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "bin_added": "new bin entry: ['allagents']",
    "dependency_added_unknown": "12 new non-watchlisted dep(s): ['@clack/prompts', '@modelcontextprotocol/sdk', 'chalk', 'cmd-ts', 'execa'] ...",
    "dist_tag_anomaly": "dist-tags.latest=1.11.0 but max published is 1.11.7-next.1",
    "script_count_spike": "scripts count 0 -> 22",
    "typosquat": "combosquat of 'agents'"
  },
  "time": {
    "created": "2026-01-24T11:49:50.584Z",
    "modified": "2026-05-20T02:10:23.919Z"
  }
}