This package matches a known-malicious advisory and is blocked by ShadowCanopy by default across every project. 1 flagged version.
Chalk 6.0.0 is the well-known legitimate terminal-coloring package; zero static findings, standard file list, and clean sandbox install with no evidence of malice.
AI breakdown
Plain-English summary of what this package does and how it behaves.
Chalk is an npm package for terminal string styling. It provides functions to apply colors and formatting to console output via included vendor modules for ANSI styles and color support detection.
Capabilities
- Exports terminal styling functions
- Includes ANSI styles and color support detection
- Runs test and benchmark scripts
Data access
- None observed
Network
- No network access observed
Standard utility library with empty dependencies and no postinstall or network scripts; no risky behaviors evidenced in manifest or files.
Files in package (24)
How ShadowCanopy checks npm packages
ShadowCanopy blocks every dependency by default and only lets through what it can verify — against live malicious-package advisories, an AI behavior scan, and a byte-for-byte hash check. It protects installs across npm, PyPI, crates.io, pkg.go.dev, RubyGems, Maven Central, NuGet, Packagist, Hex, pub.dev, Swift Package Manager.
This report reflects ShadowCanopy's threat intelligence at page load and is informational, not a warranty. Canonical URL: https://shadowcanopy.dev/packages/npm/chalk