PkgRadar

npm · registry.npmjs.org

@adminforth/two-factors-auth

Remote Payload: matched "curl "

Why PkgRadar flagged 4.1.2

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/.woodpecker/buildSlackNotify.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
4.1.2Review62026-06-17
4.1.1Review62026-06-17
4.1.0Review62026-06-17
4.0.2Review62026-06-16
4.0.1Review62026-06-15
4.0.0Review62026-06-15
3.3.10Review62026-06-11
3.3.9Review62026-06-10
3.3.8Review62026-06-09
3.3.7Review62026-06-05
3.3.5Review242026-05-25
3.3.6Review242026-05-25

Block this in CI

PkgRadar gates @adminforth/two-factors-auth (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @adminforth/[email protected]
Start free — 25 scans / moView full evidence