PkgRadar

Composer · packagist.org

checkoutcom/magento2

Remote Payload: matched "Curl "

Why PkgRadar flagged 7.3.1

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · checkout-checkout-magento2-plugin-b62dc85/Controller/ApplePay/Validation.php
mediumRemote Payloadmatched "Curl " · checkout-checkout-magento2-plugin-b62dc85/Model/Methods/AlternativePaymentMethod.php
mediumRemote Payloadmatched "Curl " · checkout-checkout-magento2-plugin-b62dc85/Model/Service/VersionHandlerService.php

Scanned versions

VersionVerdictScoreScanned (UTC)
7.3.1Review102026-06-09

Block this in CI

PkgRadar gates checkoutcom/magento2 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer checkoutcom/[email protected]