npm sagent-ai-linux @2.2.16

score

0.7751 high

flagged 2026-06-18 12:52

signals by category

content 2 topology 2

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)
typosquat + install_script_payload: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['postinstall'] present
install_script_payload	1.0	install/lifecycle script matches payload regex
topology
no_repo	0.3	package.json has no repository field
typosquat	1.0	combosquat of 'sagent-ai'

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "ivan24ivan"
  ],
  "versions": 5
}

Evidence (package doc at flag time)

{
  "dependencies_count": 0,
  "dist": {
    "integrity": "sha512-Q5isDGQwEPFUA8VeQ0smBqb0bBXRyxGykbyI14VSc2HCfX5Q49X7sr0LbnfDPelzK/flEuE6uspFK8d1hjmV7Q==",
    "tarball": "https://registry.npmjs.org/sagent-ai-linux/-/sagent-ai-linux-2.2.16.tgz",
    "unpackedSize": 229224335
  },
  "dist-tags": {
    "latest": "2.2.16"
  },
  "latest_version": "2.2.16",
  "maintainers": [
    {
      "email": "efr-ivan@yandex.ru",
      "name": "ivan24ivan"
    }
  ],
  "num_versions": 7,
  "repository": null,
  "scripts": {
    "postinstall": "node -e \"const fs=require('fs'),path=require('path'); for (const f of ['bin/sagent','bin/apply_patch','bin/rg']) { try { fs.chmodSync(path.join(__dirname,f),0o755); } catch (_) {} }\""
  },
  "signal_details": {
    "_amplifiers": [
      "install_script_payload + new_install_script: first-ever install script also matches payload regex (+0.15)",
      "typosquat + install_script_payload: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "install_script_payload": "install/lifecycle script matches payload regex",
    "new_install_script": "first time ['postinstall'] present",
    "no_repo": "package.json has no repository field",
    "typosquat": "combosquat of 'sagent-ai'"
  },
  "time": {
    "created": "2026-06-14T07:22:02.176Z",
    "modified": "2026-06-18T17:52:15.901Z"
  }
}