PkgRadar

npm · registry.npmjs.org

@chaty-app/proto

Remote Payload: matched "cUrl "

Why PkgRadar flagged 0.1.94

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/node-plain/service/v1/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/node/service/v1/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/web-plain/service/v1/config.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.98Low risk02026-06-03
0.1.97Low risk02026-06-01
0.1.96Low risk02026-05-30
0.1.95Low risk02026-05-30
0.1.94Review362026-05-24
0.1.93Review362026-05-24
0.1.91Review362026-05-24
0.1.92Review362026-05-24

Related campaigns

Block this in CI

PkgRadar gates @chaty-app/proto (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @chaty-app/[email protected]