PkgRadar

npm · registry.npmjs.org

@aonunited/angular

DNS / OAST exfiltration: matched "oast.fun"

Why PkgRadar flagged 99.0.0

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "oast.fun" · package/preinstall.js
highInstall Lifecycle Suppresses Failurepreinstall="node preinstall.js || true" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
99.0.0High risk552026-06-03
99.0.1High risk1072026-06-03

Related campaigns

Block this in CI

PkgRadar gates @aonunited/angular (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @aonunited/[email protected]