SafeDep
Install GitHub App

Summary

rm -rf commands in package.json's clean script are likely a false positive. No other suspicious indicators are present.

Verification Record

No verification record available.

Details

The YARA rule background_rm_rf matched the package.json file. This rule detects the use of rm -rf commands, which can be destructive but are commonly used in build scripts to clean directories. The matched patterns are within the clean script, which is a standard practice for removing build artifacts. Given the context and the absence of other suspicious indicators, this is likely a false positive.

kysely@0.28.11Clean
Unverified
Analysed at: 1/31/26, 5:19 PM
Source: https://registry.npmjs.org/kysely/-/kysely-0.28.11.tgz
SHA256: e52d595b1fb94e19e9b63576b29d772493b74358fdf111b5d1508020a44c5e25
Confidence: Medium