Check before you install

Thinking of installing an AI tool? Paste its name or link. We'll tell you if it has been reported as malware or looks risky. Free, no sign-up.

package @addai/node

Block

Reported malicious in threat research: every version of this package should be treated as harmful. Do not install.

Latest version: 0.30.14
First published: 3 months ago
Maintainers: 1
Runs code at install: postinstall
Catalog grade: D — High risk signals
Est. context load: ~900 tokens / turn (~5 tool schemas, 0.45% of 200k context)

Threat reports

MaliciousMalicious code in @addai/node (npm) Affected versions: 0.9.0, 0.8.2, 0.5.0, 0.7.0, 0.11.0, 0.8.1, 0.11.2, 0.8.0, 0.11.1, 0.4.0
MaliciousMalicious code in @addai/node (npm) Affected versions: 0.9.0, 0.8.2, 0.5.0, 0.7.0, 0.11.0, 0.8.1, 0.11.2, 0.8.0, 0.11.1, 0.4.0

If it is already installed, remove it:

# DO NOT INSTALL @addai/node — remove immediately if present:
npm uninstall @addai/node

Based on public adoption and transparency signals as of Oct 19, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.

Was this check for @addai/node helpful?

Free first look / $19 full report

Go deeper

The answer above comes from threat reports and registry facts. A free first look also analyzes this version’s published files and shows the grade and how many serious issues we found. The full report adds the evidence, what it can access and what it does at install: $19 once, or 3 a month on Pro.

See a sample full report

Want to look around first? Browse the MCP & Skills directory or read the guides.