🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP →

aone-cloud-cli

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

This package has been flagged as malicious. It is considered unsafe regardless of version.

The postinstall script will synchronously execute the package's main module during installation. This is a high-risk pattern because it grants the maintainers' code the ability to run arbitrary actions on every machine that installs the package. The wildcard dependency (*) further increases supply-chain risk. Recommend auditing the package's index.js and all dependencies (especially @ali/aone-cloud-cli and smart-config-manager), avoid wildcard version ranges, and block/inspect packages that execute code at install time before using them in production.

aone-cloud-cli

security holding package

latest

npm

Version: 0.0.1-security

Version published: 6 days ago

Weekly downloads: 225

Maintainers: 0

Weekly downloads

Created: 3 months ago

Source

Security holding package

This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.

Please refer to www.npmjs.com/advisories?search=aone-cloud-cli for more information.

FAQs

What is aone-cloud-cli?

Is aone-cloud-cli popular?

Is aone-cloud-cli well maintained?

Package last updated on 29 Jul 2026

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install