PkgRadar

Maven · repo1.maven.org

com.aliyun:websitebuild20250429

Remote Payload: matched "cUrl "

Why PkgRadar flagged 2.26.2

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · com/aliyun/websitebuild20250429/models/GetAppSupabaseInstanceResponseBody.java
mediumRemote Payloadmatched "cUrl " · com/aliyun/websitebuild20250429/models/QuerySupabaseInstanceInfoForAdminResponseBody.java
mediumRemote Payloadmatched "cUrl " · com/aliyun/websitebuild20250429/models/AllocateSupabaseForAdminResponseBody.java

Scanned versions

VersionVerdictScoreScanned (UTC)
2.26.2High risk362026-06-10
2.26.1High risk362026-06-10

Block this in CI

PkgRadar gates com.aliyun:websitebuild20250429 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem maven com.aliyun:[email protected]
Start free — 25 scans / moView full evidence