npm · registry.npmjs.org

@agoric/orchestration

Remote Payload: matched "cUrl "

Why PkgRadar flagged 0.1.1-dev-925b831.0.925b831

Severity	Signal	Evidence
medium	Remote Payload	matched "cUrl " · package/src/vendor/viem/_esm-MGOEZCKB.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.1-dev-4833f45.0.4833f45`	Low risk	0	2026-06-12
`0.1.1-dev-488dec7.0.488dec7`	Low risk	0	2026-06-12
`0.1.1-dev-3294e0c.0.3294e0c`	Low risk	0	2026-06-11
`0.1.1-dev-57c6564.0.57c6564`	Low risk	0	2026-06-10
`0.1.1-dev-79a22bb.0.79a22bb`	Low risk	0	2026-06-10
`0.2.0`	Low risk	0	2026-06-10
`0.1.1-dev-2da8e5c.0.2da8e5c`	Low risk	0	2026-06-10
`0.1.1-dev-9f5ae11.0.9f5ae11`	Low risk	0	2026-06-03
`0.1.1-dev-a1aec5d.0.a1aec5d`	Low risk	0	2026-06-02
`0.1.1-dev-6deecfc.0.6deecfc`	Low risk	0	2026-06-02
`0.1.1-dev-04fc8aa.0.04fc8aa`	Low risk	0	2026-06-01
`0.1.1-dev-998649a.0.998649a`	Low risk	0	2026-06-01
`0.1.1-dev-f91b21f.0.f91b21f`	Low risk	0	2026-05-29
`0.1.1-dev-0e3d0e8.0.0e3d0e8`	Low risk	0	2026-05-27
`0.1.1-dev-159ee8a.0.159ee8a`	Low risk	0	2026-05-25
`0.1.1-dev-df17b1b.0.df17b1b`	Low risk	0	2026-05-25
`0.1.1-dev-925b831.0.925b831`	Review	12	2026-05-25
`0.1.1-dev-b0cb8c0.0.b0cb8c0`	Review	12	2026-05-25

Block this in CI

PkgRadar gates @agoric/orchestration (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @agoric/[email protected]