npm vegas-chat @2.15.0
score
0.7465
high
flagged
2026-07-24 23:43
amplifiers
co-occurring signal pairs that lift the final score
- size_spike + install_script_payload: payload growth alongside install surface (+0.10)
Signals fired
| signal | weight | rationale |
|---|---|---|
| content | ||
| install_script_payload | 1.0 | install/lifecycle script matches payload regex |
| size_spike | 0.5 | unpackedSize 2941708 -> 17645329 (6.0×) |
| topology | ||
| dependency_added_unknown | 0.6 | 3 new non-watchlisted dep(s): ['@types/ssh2', 'esbuild', 'ssh2'] |
| enrichment | ||
| repo_doesnt_exist | 1.0 | claimed repo web-kamikaze/vegas-chat returns 404 on github.com |
Prior profile (what it deviated from)
{
"had_install_script": true,
"maintainers": [
"kangden"
],
"versions": 27
}
Evidence (package doc at flag time)
{
"dependencies_count": 21,
"dist": {
"integrity": "sha512-50ena+WRbky6p+pDXjg/ENmkGZqVmCE8eBgOZQdzukHIN1dq5sHYJpyNvWRwa0wIDn99Knz+iESqG73ZmnYtmw==",
"tarball": "https://registry.npmjs.org/vegas-chat/-/vegas-chat-2.15.0.tgz",
"unpackedSize": 17645329
},
"dist-tags": {
"latest": "2.15.0",
"openwrt": "2.14.6-openwrt.1"
},
"latest_version": "2.15.0",
"maintainers": [
{
"email": "officialkamikaze01@gmail.com",
"name": "kangden"
}
],
"num_versions": 29,
"repository": {
"type": "git",
"url": "git+https://github.com/web-kamikaze/vegas-chat.git"
},
"scripts": {
"build": "npm run build:dashboard && npm run build:bundle",
"build:bundle": "node scripts/build-bundle.mjs",
"build:dashboard": "cd src/router/dashboard && npm install --silent && npx vite build --config ../../../vite.config.ts 2>&1 | tail -5",
"build:ts": "tsc",
"dev": "tsx src/index.ts",
"lint": "eslint src/ --max-warnings 100",
"postinstall": "node -e \"try{require('fs').chmodSync('dist/index.js',0o755)}catch(e){}\"",
"preinstall": "node -e \"process.exit(process.version.slice(1).split('.')[0] < 18 ? 1 : 0)\" || echo \"vegas requires Node.js >= 18\"",
"prepublishOnly": "npm run build",
"router": "node -e \"require('./dist/router/use9router.js').start9Router(20128).then(() => console.log('9Router started on port 20128')).catch(e => console.error(e))\"",
"start": "node dist/index.js"
},
"signal_details": {
"_amplifiers": [
"size_spike + install_script_payload: payload growth alongside install surface (+0.10)"
],
"dependency_added_unknown": "3 new non-watchlisted dep(s): ['@types/ssh2', 'esbuild', 'ssh2']",
"install_script_payload": "install/lifecycle script matches payload regex",
"repo_doesnt_exist": "claimed repo web-kamikaze/vegas-chat returns 404 on github.com",
"size_spike": "unpackedSize 2941708 -> 17645329 (6.0\u00d7)"
},
"time": {
"created": "2026-06-30T17:32:14.353Z",
"modified": "2026-07-25T04:43:00.364Z"
}
}