PkgRadar

npm · registry.npmjs.org

@anydocs/ask

Remote Payload: matched "curl "

Why PkgRadar flagged 0.3.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/server/app.js
mediumRemote Payloadmatched "curl " · package/dist/server/cors.js
mediumRemote Payloadmatched "curl " · package/dist/widget/server-gate.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.4.0-alpha.6Low risk02026-06-13
0.4.0-alpha.5Low risk02026-06-12
0.4.0-alpha.4Low risk02026-06-08
0.3.0Review362026-05-24
0.3.1Review362026-05-24

Related campaigns

Block this in CI

PkgRadar gates @anydocs/ask (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @anydocs/[email protected]