PkgRadar

npm · registry.npmjs.org

@bojanrajkovic/mcp-paprika

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.2.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/auth/build.js
mediumRemote Payloadmatched "cUrl " · package/dist/auth/client-registration.js
mediumRemote Payloadmatched "cUrl " · package/dist/utils/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/transport/http.js
mediumRemote Payloadmatched "cUrl " · package/dist/auth/provider.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.6.1-rc.0Low risk02026-06-08
2.0.0-beta.6Low risk02026-06-06
2.0.0-beta.5Low risk02026-06-06
2.0.0-beta.4Low risk02026-06-06
2.0.0-beta.2Low risk02026-06-03
2.0.0-beta.3Low risk02026-06-03
1.6.0-beta.2Low risk02026-05-31
1.6.0-beta.1Low risk02026-05-31
1.6.0-beta.0Low risk02026-05-31
1.5.0Low risk02026-05-31
1.5.0-beta.2Low risk02026-05-30
1.5.0-beta.1Low risk02026-05-30
1.5.0-beta.0Low risk02026-05-30
1.4.0Low risk02026-05-26
1.4.0-beta.0Low risk02026-05-26
1.2.0Review502026-05-24
1.3.0Review502026-05-24

Block this in CI

PkgRadar gates @bojanrajkovic/mcp-paprika (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @bojanrajkovic/[email protected]