PkgRadar

npm · registry.npmjs.org

@blockrun/llm

Remote Payload: matched "cUrl "

Why PkgRadar flagged 2.7.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/index.cjs
mediumRemote Payloadmatched "cUrl " · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.4.0Low risk02026-06-11
1.3.1Low risk02026-06-11
3.3.0Low risk02026-06-11
1.4.2Low risk02026-06-11
3.2.3Low risk02026-06-09
3.2.2Low risk02026-06-09
3.2.1Low risk02026-06-09
3.2.0Low risk02026-06-08
3.1.0Low risk02026-06-07
3.0.0Low risk02026-06-07
2.13.0Low risk02026-06-07
2.12.0Low risk02026-06-06
2.11.1Low risk02026-06-01
2.11.0Low risk02026-05-31
2.10.0Low risk02026-05-29
2.9.1Low risk02026-05-26
2.7.0Review242026-05-25
2.8.0Review242026-05-25

Block this in CI

PkgRadar gates @blockrun/llm (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @blockrun/[email protected]