PkgRadar

Composer · packagist.org

mpc/mpc-vidply

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.2.2

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · MatthiasPeltzer-mpc-vidply-07ffdc6/Classes/Backend/Preview/ListviewPreviewRenderer.php
mediumRemote Payloadmatched "cUrl " · MatthiasPeltzer-mpc-vidply-07ffdc6/Classes/Backend/Preview/VidPlyPreviewRenderer.php
mediumRemote Payloadmatched "cUrl " · MatthiasPeltzer-mpc-vidply-07ffdc6/Classes/DataProcessing/ListviewProcessor.php
mediumRemote Payloadmatched "cUrl " · MatthiasPeltzer-mpc-vidply-07ffdc6/Classes/DataProcessing/VidPlyProcessor.php

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.2High risk332026-06-13
1.2.0High risk332026-06-04
1.1.17Review332026-05-29

Block this in CI

PkgRadar gates mpc/mpc-vidply (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer mpc/[email protected]
Start free — 25 scans / moView full evidence