PkgRadar

npm · registry.npmjs.org

@aleph-alpha/pharia-ai-cli

Remote Payload: matched "curl "

Why PkgRadar flagged 0.30.8

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/scripts/test-integration.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.30.8Review92026-05-28
0.30.9Review92026-05-28

Block this in CI

PkgRadar gates @aleph-alpha/pharia-ai-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @aleph-alpha/[email protected]