PkgRadar

Composer · packagist.org

coinify/magento2-payment

Remote Payload: matched "Curl "

Why PkgRadar flagged v1.1.3

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · sasanikoli-coinify-magento-plugin-885516e/Model/Api/Client.php
mediumRemote Payloadmatched "Curl " · sasanikoli-coinify-magento-plugin-885516e/Test/Unit/Model/Api/ClientTest.php
mediumRemote Payloadmatched "Curl\n " · sasanikoli-coinify-magento-plugin-885516e/Test/Unit/Stub/Stubs.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.1.3High risk362026-06-05
v1.1.2Review122026-06-04
v1.1.0Review122026-06-04
v1.1.1Review122026-06-04
v1.0.9Review122026-06-03
v1.0.10Review122026-06-03
v1.0.11Review122026-06-03
v1.0.12Review122026-06-03
v1.0.13Review122026-06-03
v1.0.6Review122026-06-03
v1.0.7Review122026-06-03
v1.0.4Review122026-06-03
v1.0.1Review122026-06-03
v1.0.2Review122026-06-03

Block this in CI

PkgRadar gates coinify/magento2-payment (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer coinify/[email protected]
Start free — 25 scans / moView full evidence