sales-operations-setup
Warn
Audited by Socket on Feb 16, 2026
1 alert found:
SecuritySecuritypackage.json
MEDIUMSecurityMEDIUM
package.json
The package executes a bundled install.js (twice, via install and postinstall). This is a common pattern for legitimate setup tasks, but executing arbitrary code at install time is a risky operation and could be used for malicious purposes (data exfiltration, telemetry, running untrusted code, modifying the system, adding hooks, etc.). Without inspecting the contents of install.js (and any scripts it calls, such as install.sh), it is not possible to rule out malicious behavior. Review the install.js and related files before installing in sensitive environments.
Confidence: 75%Severity: 70%
Audit Metadata