npm iskills @0.2.45

score

0.9007 high

flagged 2026-07-30 09:13

signals by category

content 1 topology 2 enrichment 1

maintainers added: —

package profile →

amplifiers co-occurring signal pairs that lift the final score

typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)

Signals fired

signal	weight	rationale
content
new_install_script	1.0	first time ['postinstall'] present
topology
typosquat	1.0	lev=1 to watched 'skills'
dependency_added_unknown	0.6	3 new non-watchlisted dep(s): ['@opentui/core', '@opentui/react', 'react-reconciler']
enrichment
repo_doesnt_exist	1.0	claimed repo eightHundreds/iskills returns 404 on github.com

Prior profile (what it deviated from)

{
  "had_install_script": false,
  "maintainers": [
    "aoligiegie"
  ],
  "versions": 27
}

Evidence (package doc at flag time)

{
  "dependencies_count": 7,
  "dist": {
    "integrity": "sha512-n9ahWxqrj2qlP57i9CrbyJpH2MFrxSD/2QlkJPl1ATX8ADwdS8HEIl79F3T//pJSXOuHBZMllyZN4MSzEOkkyw==",
    "tarball": "https://registry.npmjs.org/iskills/-/iskills-0.2.45.tgz",
    "unpackedSize": 754913
  },
  "dist-tags": {
    "latest": "0.2.45"
  },
  "latest_version": "0.2.45",
  "maintainers": [
    {
      "email": "mingoing@outlook.com",
      "name": "aoligiegie"
    }
  ],
  "num_versions": 28,
  "repository": {
    "type": "git",
    "url": "git+https://github.com/eightHundreds/iskills.git"
  },
  "scripts": {
    "build": "pnpm run -s clean && tsc",
    "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
    "postinstall": "node ./bin/patch-react-reconciler.mjs || true",
    "start": "pnpm run -s build && node ./bin/iskills.js",
    "test": "pnpm run -s build && node scripts/test-dev.mjs",
    "test:dev": "pnpm run -s build && node scripts/test-dev.mjs",
    "test:fast": "pnpm run -s build && bun ./node_modules/vitest/vitest.mjs run --project parallel",
    "test:git": "pnpm run -s build && bun ./node_modules/vitest/vitest.mjs run --project git",
    "test:tty": "pnpm run -s build && bun ./node_modules/vitest/vitest.mjs run --project tty",
    "type-check": "tsc --noEmit"
  },
  "signal_details": {
    "_amplifiers": [
      "typosquat + new_install_script: typosquat shape with active payload or stub-rush surface (+0.15)"
    ],
    "dependency_added_unknown": "3 new non-watchlisted dep(s): ['@opentui/core', '@opentui/react', 'react-reconciler']",
    "new_install_script": "first time ['postinstall'] present",
    "repo_doesnt_exist": "claimed repo eightHundreds/iskills returns 404 on github.com",
    "typosquat": "lev=1 to watched 'skills'"
  },
  "time": {
    "created": "2026-07-04T13:43:56.641Z",
    "modified": "2026-07-30T05:22:38.920Z"
  }
}