PkgRadar

npm · registry.npmjs.org

@cachly-dev/mcp-server

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 0.10.114

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/packages/telegram-notify/client.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.10.114Review152026-06-15
0.10.113Review152026-06-13
0.10.111Review112026-06-10
0.10.108Review112026-06-10
0.10.107Review112026-06-08
0.10.104Review112026-06-06
0.10.103Review112026-06-05
0.10.102Review112026-06-03
0.10.101Review112026-06-01
0.10.100Review112026-06-01
0.10.99Review112026-06-01
0.10.98Review152026-05-31
0.10.97Review152026-05-31
0.10.96Review152026-05-31
0.10.95Review152026-05-31
0.10.94Review152026-05-31
0.10.93Review152026-05-31
0.10.92Review152026-05-31
0.10.91Review152026-05-31
0.10.89Review222026-05-31
0.10.90Review222026-05-31
0.10.88Review152026-05-31
0.10.87Review152026-05-31
0.10.86Review152026-05-31
0.10.85Review152026-05-30
0.10.84Review152026-05-30
0.10.83Review152026-05-30
0.10.82Review152026-05-30
0.10.81Review222026-05-30
0.10.80Review152026-05-30
0.10.79Review152026-05-30
0.10.78Review152026-05-30
0.10.76Review152026-05-30
0.10.77Review152026-05-30
0.10.55Review32026-05-30
0.10.56Review32026-05-30
0.10.47Review52026-05-30
0.10.48Review52026-05-30
0.10.46Review52026-05-30
0.10.45Review32026-05-30
0.10.44Review32026-05-30
0.10.42Review52026-05-30
0.10.43Review32026-05-30
0.10.27Review52026-05-30
0.10.40Review32026-05-30
0.10.75Review152026-05-30
0.10.74Review222026-05-30
0.10.72Review222026-05-29
0.10.73Review222026-05-29
0.10.52Review302026-05-29
0.10.57Review302026-05-29
0.10.49Review302026-05-29

Block this in CI

PkgRadar gates @cachly-dev/mcp-server (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @cachly-dev/[email protected]
Start free — 25 scans / moView full evidence