PkgRadar

Composer · packagist.org

finity-labs/fin-mail

Remote Payload: matched "iwr "

Why PkgRadar flagged v1.8.0

SeveritySignalEvidence
mediumRemote Payloadmatched "iwr " · finity-labs-fin-mail-962febc/resources/lang/cy/fin-mail.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.8.0Review122026-06-11

Block this in CI

PkgRadar gates finity-labs/fin-mail (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer finity-labs/[email protected]