npm @mirageshield/mirage @0.2.5
score
0.5446
med
flagged
2026-06-18 16:17
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| cadence | ||
| rapid_release | 0.8 | 8 versions in last 24h: ['0.2.1', '0.2.2', '0.2.3', '0.2.4', '0.2.5'] |
| enrichment | ||
| repo_too_new_for_version_history | 0.7 | claimed repo created 1d ago but package has 8 versions (expect >= 54d for that history) |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"thinkofsomething",
"magicmisty"
],
"versions": 6
}
Evidence (package doc at flag time)
{
"dependencies_count": 3,
"dist": {
"integrity": "sha512-hLgHvyvLIeVuuesmkX9+tI5qp1Arbf/I+xzJG4jSOhtmeU225fW7kcZVUk79wbuw/ICNExNtXDHfUv1Er4WiaA==",
"tarball": "https://registry.npmjs.org/@mirageshield/mirage/-/mirage-0.2.5.tgz",
"unpackedSize": 236075
},
"dist-tags": {
"latest": "0.2.5"
},
"latest_version": "0.2.5",
"maintainers": [
{
"email": "justin.m.dam99@gmail.com",
"name": "thinkofsomething"
},
{
"email": "ajtabs@proton.me",
"name": "magicmisty"
}
],
"num_versions": 8,
"repository": {
"type": "git",
"url": "git+https://github.com/NotPotot/cipherhacks.git"
},
"scripts": {
"attack": "npx tsx scripts/attack-sim.ts",
"attack:protected": "npx tsx scripts/attack-sim.ts --target protected",
"attack:vulnerable": "npx tsx scripts/attack-sim.ts --target vulnerable",
"build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsup",
"build:all": "npx turbo run build",
"dev": "tsup --watch",
"dev:all": "npx turbo run dev",
"lint": "npx turbo run lint",
"postinstall": "node -e \"try{require('fs').existsSync(require('path').join(process.cwd(),'package.json'))&&console.log('\\n [@mirageshield/mirage] Run \\x1b[1mnpx mirage\\x1b[0m to configure Mirage Shield\\n')}catch(e){}\"",
"prepack": "npm run build && npm run verify:dist",
"prepublishOnly": "npm run build && npm run verify:dist",
"setup": "node ./bin/init.mjs",
"setup:demo": "pwsh scripts/install-shield.ps1 -TargetDir apps/v0demo-protected -Yes",
"test": "echo \"no tests yet\"",
"verify:dist": "node -e \"const fs=require('fs');const req=['dist/index.js','dist/index.mjs','dist/index.d.ts','dist/nextjs.js','dist/express.js','dist/react.mjs','dist/browser.mjs','dist/client.global.js'];const missing=req.filter(f=>!fs.existsSync(f));if(missing.length){console.error('[verify:dist] Missing required build artifacts:\\n '+missing.join('\\n '));process.exit(1)}console.log('[verify:dist] OK ('+req.length+' artifacts)')\""
},
"signal_details": {
"install_script_payload": "install/lifecycle script matches payload regex",
"rapid_release": "8 versions in last 24h: ['0.2.1', '0.2.2', '0.2.3', '0.2.4', '0.2.5']",
"repo_too_new_for_version_history": "claimed repo created 1d ago but package has 8 versions (expect >= 54d for that history)"
},
"time": {
"created": "2026-06-18T02:40:08.465Z",
"modified": "2026-06-18T21:16:54.824Z"
}
}