← candidates

npm @mirageshield/mirage @0.2.2

Signals fired

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "thinkofsomething",
    "magicmisty"
  ],
  "versions": 4
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-InWecFI4eDunCVRj4urdTpvkBPjkTBF/9tDq8nMiww01V4+tOVZawuvSyh/mEQeBAuG/HJMQsT9mrRYCUuONKQ==",
    "tarball": "https://registry.npmjs.org/@mirageshield/mirage/-/mirage-0.2.2.tgz",
    "unpackedSize": 227247
  },
  "dist-tags": {
    "latest": "0.2.2"
  },
  "latest_version": "0.2.2",
  "maintainers": [
    {
      "email": "justin.m.dam99@gmail.com",
      "name": "thinkofsomething"
    },
    {
      "email": "ajtabs@proton.me",
      "name": "magicmisty"
    }
  ],
  "num_versions": 5,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/NotPotot/cipherhacks.git"
  },
  "scripts": {
    "attack": "npx tsx scripts/attack-sim.ts",
    "attack:protected": "npx tsx scripts/attack-sim.ts --target protected",
    "attack:vulnerable": "npx tsx scripts/attack-sim.ts --target vulnerable",
    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsup",
    "build:all": "npx turbo run build",
    "dev": "tsup --watch",
    "dev:all": "npx turbo run dev",
    "lint": "npx turbo run lint",
    "postinstall": "node -e \"try{require('fs').existsSync(require('path').join(process.cwd(),'package.json'))&&console.log('\\n  [@mirageshield/mirage] Run \\x1b[1mnpx mirage\\x1b[0m to configure Mirage Shield\\n')}catch(e){}\"",
    "prepack": "npm run build && npm run verify:dist",
    "prepublishOnly": "npm run build && npm run verify:dist",
    "setup": "node ./bin/init.mjs",
    "setup:demo": "pwsh scripts/install-shield.ps1 -TargetDir apps/v0demo-protected -Yes",
    "test": "echo \"no tests yet\"",
    "verify:dist": "node -e \"const fs=require('fs');const req=['dist/index.js','dist/index.mjs','dist/index.d.ts','dist/nextjs.js','dist/express.js','dist/react.mjs','dist/browser.mjs','dist/client.global.js'];const missing=req.filter(f=>!fs.existsSync(f));if(missing.length){console.error('[verify:dist] Missing required build artifacts:\\n  '+missing.join('\\n  '));process.exit(1)}console.log('[verify:dist] OK ('+req.length+' artifacts)')\""
  },
  "signal_details": {
    "_amplifiers": [
      "size_spike + install_script_payload: payload growth alongside install surface (+0.10)"
    ],
    "install_script_payload": "install/lifecycle script matches payload regex",
    "rapid_release": "5 versions in last 24h: ['0.1.1', '0.1.2', '0.2.0', '0.2.1', '0.2.2']",
    "repo_too_new_for_version_history": "claimed repo created 1d ago but package has 5 versions (expect >= 41d for that history)",
    "size_spike": "unpackedSize 23857 -> 227247 (9.5\u00d7)"
  },
  "time": {
    "created": "2026-06-18T02:40:08.465Z",
    "modified": "2026-06-18T17:51:54.290Z"
  }
}