Is @nextsparkjs/plugin-social-media-publisher safe to install?

@nextsparkjs/plugin-social-media-publisher was flagged as HIGH RISK (risk score 38) with 5 findings detected across 49 files. Review the findings before installing.

What security issues were found in @nextsparkjs/plugin-social-media-publisher?

Sigil detected 5 findings in @nextsparkjs/plugin-social-media-publisher, including patterns related to provenance, network_exfil. See the full scan report for details.

Scans/npm/@nextsparkjs/plugin-social-media-publisher

@nextsparkjs/plugin-social-media-publisher

npm

Summary

@nextsparkjs/plugin-social-media-publisher v0.1.0-beta.127 was classified as HIGH RISK with a risk score of 38. Sigil detected 5 findings across 49 files, covering phases including provenance, network exfiltration. Review the findings below before installing this package.

HIGH RISK(38)

v0.1.0-beta.127

20 March 2026, 16:13 UTC

by Sigil Bot

Risk Score

Findings

Files Scanned

Provenance

Registry

https://www.npmjs.com/package/@nextsparkjs/plugin-social-media-publisher/v/0.1.0-beta.127

Scanned From

https://registry.npmjs.org/@nextsparkjs/plugin-social-media-publisher/-/plugin-social-media-publisher-0.1.0-beta.127.tgz

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/npm/@nextsparkjs/plugin-social-media-publisher)](https://sigilsec.ai/scans/263FF6F2-CBBC-4C8F-AAB4-3BE482B53BBB)

HTML

<a href="https://sigilsec.ai/scans/263FF6F2-CBBC-4C8F-AAB4-3BE482B53BBB"><img src="https://sigilsec.ai/badge/npm/@nextsparkjs/plugin-social-media-publisher" alt="Sigil Scan"></a>

Run This Scan Yourself