PkgRadar

Composer · packagist.org

storeportal/magento2-adminembed

Webhook Exfil Endpoint: matched "ngrok-free.app"

Why PkgRadar flagged v1.1.1

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok-free.app" · etechflow-magento2-adminembed-1511856/StorePortal/AdminEmbed/Model/LicenseValidator.php
mediumRemote Payloadmatched "Curl " · etechflow-magento2-adminembed-1511856/StorePortal/AdminEmbed/Controller/Adminhtml/License/CreateSession.php
mediumRemote Payloadmatched "Curl " · etechflow-magento2-adminembed-1511856/StorePortal/AdminEmbed/Controller/License/Callback.php
mediumRemote Payloadmatched "Curl " · etechflow-magento2-adminembed-1511856/StorePortal/AdminEmbed/Helper/Token.php
mediumRemote Payloadmatched "Curl " · etechflow-magento2-adminembed-1511856/StorePortal/AdminEmbed/Model/LicenseValidator.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v1.1.1High risk882026-06-06

Block this in CI

PkgRadar gates storeportal/magento2-adminembed (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer storeportal/[email protected]