BEACON

← candidates

npm @mirageshield/mirage @0.2.5

score
0.5446 med
flagged 2026-06-18 16:17
signals by category
content 1 cadence 1 enrichment 1

maintainers added:

package profile →

Signals fired

signalweightrationale
content
install_script_payload 1.0 install/lifecycle script matches payload regex
cadence
rapid_release 0.8 8 versions in last 24h: ['0.2.1', '0.2.2', '0.2.3', '0.2.4', '0.2.5']
enrichment
repo_too_new_for_version_history 0.7 claimed repo created 1d ago but package has 8 versions (expect >= 54d for that history)

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "thinkofsomething",
    "magicmisty"
  ],
  "versions": 6
}

Evidence (package doc at flag time)

{
  "dependencies_count": 3,
  "dist": {
    "integrity": "sha512-hLgHvyvLIeVuuesmkX9+tI5qp1Arbf/I+xzJG4jSOhtmeU225fW7kcZVUk79wbuw/ICNExNtXDHfUv1Er4WiaA==",
    "tarball": "https://registry.npmjs.org/@mirageshield/mirage/-/mirage-0.2.5.tgz",
    "unpackedSize": 236075
  },
  "dist-tags": {
    "latest": "0.2.5"
  },
  "latest_version": "0.2.5",
  "maintainers": [
    {
      "email": "justin.m.dam99@gmail.com",
      "name": "thinkofsomething"
    },
    {
      "email": "ajtabs@proton.me",
      "name": "magicmisty"
    }
  ],
  "num_versions": 8,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/NotPotot/cipherhacks.git"
  },
  "scripts": {
    "attack": "npx tsx scripts/attack-sim.ts",
    "attack:protected": "npx tsx scripts/attack-sim.ts --target protected",
    "attack:vulnerable": "npx tsx scripts/attack-sim.ts --target vulnerable",
    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsup",
    "build:all": "npx turbo run build",
    "dev": "tsup --watch",
    "dev:all": "npx turbo run dev",
    "lint": "npx turbo run lint",
    "postinstall": "node -e \"try{require('fs').existsSync(require('path').join(process.cwd(),'package.json'))&&console.log('\\n  [@mirageshield/mirage] Run \\x1b[1mnpx mirage\\x1b[0m to configure Mirage Shield\\n')}catch(e){}\"",
    "prepack": "npm run build && npm run verify:dist",
    "prepublishOnly": "npm run build && npm run verify:dist",
    "setup": "node ./bin/init.mjs",
    "setup:demo": "pwsh scripts/install-shield.ps1 -TargetDir apps/v0demo-protected -Yes",
    "test": "echo \"no tests yet\"",
    "verify:dist": "node -e \"const fs=require('fs');const req=['dist/index.js','dist/index.mjs','dist/index.d.ts','dist/nextjs.js','dist/express.js','dist/react.mjs','dist/browser.mjs','dist/client.global.js'];const missing=req.filter(f=>!fs.existsSync(f));if(missing.length){console.error('[verify:dist] Missing required build artifacts:\\n  '+missing.join('\\n  '));process.exit(1)}console.log('[verify:dist] OK ('+req.length+' artifacts)')\""
  },
  "signal_details": {
    "install_script_payload": "install/lifecycle script matches payload regex",
    "rapid_release": "8 versions in last 24h: ['0.2.1', '0.2.2', '0.2.3', '0.2.4', '0.2.5']",
    "repo_too_new_for_version_history": "claimed repo created 1d ago but package has 8 versions (expect >= 54d for that history)"
  },
  "time": {
    "created": "2026-06-18T02:40:08.465Z",
    "modified": "2026-06-18T21:16:54.824Z"
  }
}