Composer · packagist.org

kiboit/phast

Remote Payload: matched "cURL "

Why PkgRadar flagged 1.112

Severity	Signal	Evidence
medium	Remote Payload	matched "cURL " · kiboit-phast-bc8d06b/src/HTTP/CURLClient.php
medium	Remote Payload	matched "cUrl " · kiboit-phast-bc8d06b/src/Services/Images/Service.php
medium	Remote Payload	matched "cURL " · kiboit-phast-bc8d06b/test/php/HTTP/CURLClientTest.php

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.112`	Review	7	2026-06-19

Block this in CI

PkgRadar gates kiboit/phast (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer kiboit/[email protected]