re0-squash

Warn

Audited by Socket on Nov 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/squash.mjs

This is a readable GitHub repository maintenance CLI, not apparent malware. Its republish command deliberately deletes and recreates the specified GitHub repository, then pushes local history and restores only selected settings; secrets, variables, webhooks, rulesets, deploy keys, and collaborators are not restored. Deletion requires an exact `--confirm` value and detected blockers require `--accept-loss`, but data loss remains a high-impact operational risk. No suspicious domains, hardcoded credentials, or covert data flows are evident.

Confidence: 98%Severity: 68%
Audit Metadata
Analyzed At
Nov 9, 2026, 04:52 AM
Package URL
pkg:socket/skills-sh/lilmgenius%2Fpaperthin%2Fre0-squash%2F@e4da5ae539c55e2cdc292369f7fce42259f58c73aacf2e97ae098569db2fac1d