package codeam-cli
Block
Reported malicious in threat research: every version of this package should be treated as harmful. Do not install.
- Latest version
- 2.76.38
- First published
- 7 months ago
- Maintainers
- 1
- Runs code at install
- postinstall
- Catalog grade
- C — Moderate risk signals
- Est. context load
- ~900 tokens / turn (~5 tool schemas, 0.45% of 200k context)
Threat reports
- MaliciousMalicious code in codeam-cli (npm) Affected versions: 2.61.1, 2.61.3
- MaliciousMalicious code in codeam-cli (npm) Affected versions: 2.61.1, 2.61.3
If it is already installed, remove it:
# DO NOT INSTALL codeam-cli — remove immediately if present:
npm uninstall codeam-cliBased on public adoption and transparency signals as of Oct 19, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.