PkgRadar

npm · registry.npmjs.org

@atlassian-dc-mcp/confluence

Remote Payload: matched "curl "

Why PkgRadar flagged 0.19.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/build/confluence-client/services/AttachmentsService.js
mediumRemote Payloadmatched "curl " · package/build/confluence-client/services/BackupAndRestoreService.js
mediumRemote Payloadmatched "curl " · package/src/confluence-client/services/AttachmentsService.ts
mediumRemote Payloadmatched "curl " · package/src/confluence-client/services/BackupAndRestoreService.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
0.18.0Low risk02026-06-08
0.20.0Low risk02026-06-08
0.17.1Low risk02026-06-08
0.19.0Review482026-05-24
0.19.1Review482026-05-24

Related campaigns

Block this in CI

PkgRadar gates @atlassian-dc-mcp/confluence (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @atlassian-dc-mcp/[email protected]