npm stream-chat-react @14.10.0

score

0.9167 high

flagged 2026-07-22 05:26

signals by category

content 1 topology 2

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

typosquat + install_script_payload: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
install_script_payload	1.0	install/lifecycle script matches payload regex
topology
typosquat	1.0	combosquat of 'react'
dependency_added_unknown	0.6	3 new non-watchlisted dep(s): ['mdast-util-to-string', 'remark-parse', 'unified']

Prior profile (what it deviated from)

{
  "had_install_script": true,
  "maintainers": [
    "tbarbugli",
    "tschellenbach",
    "vishtree",
    "stream-release-bot",
    "vangalilea88",
    "zita.szupera",
    "caleb.murphy",
    "martincupela"
  ],
  "versions": 563
}

Evidence (package doc at flag time)

{
  "dependencies_count": 28,
  "dist": {
    "integrity": "sha512-ONcmyxewwVg5nZClbXM5xp8kihYOenGhkwwmp25MzCTr8qWvh09ur27GdwWndfvAl/AlKJfnJokBAWcH8RPRAA==",
    "tarball": "https://registry.npmjs.org/stream-chat-react/-/stream-chat-react-14.10.0.tgz",
    "unpackedSize": 15524759
  },
  "dist-tags": {
    "beta": "14.0.0-beta.8",
    "experimental": "0.0.0-5283b1a4613ed8f1b26322bd34e611bf90c8b356",
    "latest": "14.10.0",
    "nnbb": "10.5.0-alpha.0",
    "rc": "13.0.0-rc.2",
    "release-v10": "10.22.3",
    "release-v11": "11.24.1",
    "release-v12": "12.16.0",
    "release-v13": "13.14.6",
    "release-v9": "9.5.4",
    "theming-v2": "10.0.0-theming-v2.3"
  },
  "latest_version": "14.10.0",
  "maintainers": [
    {
      "email": "tbarbugli@gmail.com",
      "name": "tbarbugli"
    },
    {
      "email": "thierryschellenbach@gmail.com",
      "name": "tschellenbach"
    },
    {
      "email": "vishalnarkhede.iitd@gmail.com",
      "name": "vishtree"
    },
    {
      "email": "npmjs@getstream.io",
      "name": "stream-release-bot"
    },
    {
      "email": "steve.galili@getstream.io",
      "name": "vangalilea88"
    },
    {
      "email": "zita.szupera@getstream.io",
      "name": "zita.szupera"
    },
    {
      "email": "caleb.murphy@getstream.io",
      "name": "caleb.murphy"
    },
    {
      "email": "martin.cupela@gmail.com",
      "name": "martincupela"
    }
  ],
  "num_versions": 571,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/GetStream/stream-chat-react.git"
  },
  "scripts": {
    "build": "yarn clean && concurrently 'yarn build-translations' 'vite build' 'tsc --project tsconfig.lib.json' 'yarn build-styling'",
    "build-styling": "sass src/styling/index.scss:dist/css/index.css src/styling/_emoji-replacement.scss:dist/css/emoji-replacement.css src/plugins/Emojis/styling/index.scss:dist/css/emoji-picker.css src/plugins/ChannelDetail/styling/index.scss:dist/css/channel-detail.css; cp -r src/styling/assets dist/css/assets",
    "build-translations": "i18next-cli extract",
    "build:all": "yarn workspaces foreach -A -tpv run build",
    "clean": "rm -rf dist",
    "coverage": "vitest run --coverage",
    "eslint": "eslint --max-warnings 0",
    "eslint-fix": "eslint --fix",
    "examples:build": "yarn workspaces foreach -A --include '@stream-io/stream-chat-react-*' run build",
    "fix-staged": "lint-staged --config .lintstagedrc.fix.json --concurrent 1",
    "lint": "yarn prettier --list-different && yarn eslint && yarn validate-translations",
    "lint-fix": "yarn prettier-fix && yarn eslint-fix",
    "postinstall": "node -e \"require('fs').existsSync('scripts/install-husky.mjs') && import('./scripts/install-husky.mjs')\"",
    "prepack": "yarn build",
    "prettier": "prettier '**/*.{js,mjs,ts,mts,jsx,tsx,md,json,yml,scss}'",
    "prettier-fix": "yarn prettier --write",
    "semantic-release": "semantic-release",
    "start": "tsc -p tsconfig.lib.json -w",
    "start:css": "node scripts/watch-styling.mjs",
    "start:tutorial": "yarn workspace @stream-io/stream-chat-react-tutorial dev",
    "start:vite": "yarn workspace @stream-io/stream-chat-react-vite dev",
    "test": "vitest run",
    "test:watch": "vitest",
    "types": "tsc --emitDeclarationOnly false --noEmit",
    "types:tests": "tsc --project tsconfig.test.json --noEmit",
    "validate-cjs": "concurrently 'node scripts/validate-cjs-node-bundle.cjs' 'node scripts/validate-cjs-browser-bundle.cjs'",
    "validate-esm": "node scripts/validate-esm-node-bundle.mjs",
    "validate-translations": "node scripts/validate-translations.js"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + install_script_payload: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['mdast-util-to-string', 'remark-parse', 'unified']",
    "install_script_payload": "install/lifecycle script matches payload regex",
    "typosquat": "combosquat of 'react'"
  },
  "time": {
    "created": "2019-01-30T22:31:13.010Z",
    "modified": "2026-07-22T10:25:47.262Z"
  }
}