PkgRadar

npm · registry.npmjs.org

@argonprotocol/testing

Remote Payload: matched "curl "

Why PkgRadar flagged 1.4.3-dev.4544e954

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/lib/dev.docker-compose.yml

Scanned versions

VersionVerdictScoreScanned (UTC)
1.4.7-dev.6c827619Low risk02026-06-12
1.4.7-dev.68e22797Low risk02026-06-08
1.4.7Low risk02026-06-08
1.4.6-dev.41832e0bLow risk02026-06-07
1.4.6-dev.6400125aLow risk02026-06-07
1.4.6-dev.4eef1f62Low risk02026-06-06
1.4.6Low risk02026-06-05
1.4.5-dev.7ee8a484Low risk02026-06-05
1.4.5-dev.b0ac0a8fLow risk02026-06-04
1.4.5-dev.9ca6e414Low risk02026-06-03
1.4.5-dev.6f9f9f9eLow risk02026-05-29
1.4.4-dev.abb08dacLow risk02026-05-29
1.4.5Low risk02026-05-29
1.4.4Low risk02026-05-29
1.4.3-dev.4544e954Review32026-05-28
1.4.3-dev.231f708aReview32026-05-26
1.4.3-dev.25eec055Review862026-05-24
1.4.3-dev.83602b96Review862026-05-24

Block this in CI

PkgRadar gates @argonprotocol/testing (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @argonprotocol/[email protected]