PkgRadar

npm · registry.npmjs.org

@apocaliss92/scrypted-advanced-notifier

Remote Payload: matched "wget "

Why PkgRadar flagged 4.8.30

SeveritySignalEvidence
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/tensorrt/build_jetson_ffmpeg.sh
mediumRemote Payloadmatched "wget\n" · package/_refs/frigate/docker/main/build_nginx.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/main/build_sqlite_vec.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/main/install_deps.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/rpi/install_deps.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/main/install_hailort.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/main/install_memryx.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/main/install_s6_overlay.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/main/install_tempio.sh
mediumRemote Payloadmatched "wget\n\n" · package/_refs/frigate/docker/hailo8l/user_installation.sh
mediumRemote Payloadmatched "wget " · package/_refs/frigate/docker/memryx/user_installation.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
5.0.25Low risk02026-06-14
4.8.30Review372026-06-14
4.8.31Review372026-06-14
5.0.28Low risk02026-06-14
4.8.29Review372026-06-14
5.1.1Low risk02026-06-14
5.1.0Low risk02026-06-14

Block this in CI

PkgRadar gates @apocaliss92/scrypted-advanced-notifier (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @apocaliss92/[email protected]