# morgan@1.10.1 — Threat Briefing High risk — threat briefing for npm package morgan@1.10.1. Capabilities, risk paths, and what to check. - **Ecosystem:** npm - **Latest version:** 1.10.1 - **License:** MIT ## Risk - **Level:** high - **Summary:** Dormant package revived with maintainer or script changes ## Capability Summary | Capability | Level | |---|---| | install scripts | none | | network access | none | | filesystem | none | | shell execution | none | ## Capabilities ### Execution - Dynamic code execution (eval) [unusual] ## Key Signals - **** ## Maintainer ## Recommended Action Review before installing in sensitive environments.