PkgRadar

Composer · packagist.org

sinri/ark-curl

Remote Payload: matched "Curl\n"

Why PkgRadar flagged 3.0.1

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl\n" · sinri-Ark-Curl-f6afc0b/src/ArkCurl.php
mediumRemote Payloadmatched "Curl\n" · sinri-Ark-Curl-f6afc0b/src/ArkMultiCurl.php
mediumRemote Payloadmatched "curl " · sinri-Ark-Curl-f6afc0b/test/LlmSseTest.php
mediumRemote Payloadmatched "Curl " · sinri-Ark-Curl-f6afc0b/test/Test-Multi-Curl.php
mediumRemote Payloadmatched "Curl " · sinri-Ark-Curl-f6afc0b/test/implement/GuzzleCurl.php

Scanned versions

VersionVerdictScoreScanned (UTC)
3.0.1High risk422026-06-01

Block this in CI

PkgRadar gates sinri/ark-curl (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer sinri/[email protected]