PkgRadar

Composer · packagist.org

visavi/rotor

Remote Payload: matched "github.com/visavi/rotor-modules/releases/download"

Why PkgRadar flagged v14.0.0

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/visavi/rotor-modules/releases/download" · visavi-rotor-8db9312/config/modules.php
mediumRemote Payloadmatched "github.com/visavi/rotor-modules/releases/download" · visavi-rotor-8db9312/database/upgrades/2026_05_19_000002_insert_default_module_registry.php
mediumRemote Payloadmatched "Curl " · visavi-rotor-8db9312/resources/views/install/index.blade.php

Scanned versions

VersionVerdictScoreScanned (UTC)
v14.0.0High risk302026-06-14
v14.0.0-betaHigh risk302026-06-14

Block this in CI

PkgRadar gates visavi/rotor (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer visavi/[email protected]