PkgRadar

Composer · packagist.org

lucasacoutinho/ext-clickhouse

Remote Payload: matched "wget "

Why PkgRadar flagged v1.0.1

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · lucasacoutinho-ext-clickhouse-099b17f/build/gen_stub.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.0.1Review122026-05-27

Block this in CI

PkgRadar gates lucasacoutinho/ext-clickhouse (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer lucasacoutinho/[email protected]