PkgRadar

npm · registry.npmjs.org

@atlassian-dc-mcp/jira

Remote Payload: matched "curl "

Why PkgRadar flagged 0.19.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/build/jira-client/services/IssueService.js
mediumRemote Payloadmatched "curl " · package/build/jira-client/services/IssuetypeService.js
mediumRemote Payloadmatched "curl " · package/build/jira-client/services/UserService.js
mediumRemote Payloadmatched "curl " · package/src/jira-client/services/IssueService.ts
mediumRemote Payloadmatched "curl " · package/src/jira-client/services/IssuetypeService.ts
mediumRemote Payloadmatched "curl " · package/src/jira-client/services/UserService.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
0.18.0Low risk02026-06-08
0.20.0Low risk02026-06-08
0.19.0Review502026-05-24
0.19.1Review502026-05-24

Related campaigns

Block this in CI

PkgRadar gates @atlassian-dc-mcp/jira (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @atlassian-dc-mcp/[email protected]