PkgRadar

Composer · packagist.org

therealworld/tools-plugin

Remote Payload: matched "cUrl "

Why PkgRadar flagged v3.0.58

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · therealworld-tools-plugin-3e1b3dff1b84/src/Core/ToolsSeo.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v3.0.58Review32026-06-08
v3.0.57Review32026-06-05
v3.0.55Review32026-06-03

Block this in CI

PkgRadar gates therealworld/tools-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer therealworld/[email protected]