PkgRadar

npm · registry.npmjs.org

@circuitwall/jarela

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.8.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/.next/standalone/.next/server/chunks/319.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/.next/standalone/node_modules/@whiskeysockets/baileys/lib/Utils/generics.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.8.0Review172026-06-12
1.7.0Review172026-06-12
1.4.1Review132026-06-09
1.4.0Review132026-06-08
1.3.0Review132026-06-08
1.1.0Review132026-06-08
1.2.0Review132026-06-08
1.0.0Review132026-06-06
0.14.0Review132026-06-05
0.13.0Review132026-06-04
0.11.1Review142026-06-03
0.10.0Review132026-06-02
0.9.3Review132026-06-01
0.8.1Review132026-05-31
0.8.0Review132026-05-31
0.7.3Review132026-05-30
0.7.1Review132026-05-30
0.7.2Review132026-05-30
0.7.0Review132026-05-29
0.6.4Review322026-05-29
0.6.1Review322026-05-29
0.6.0Review332026-05-29
0.5.1Review692026-05-27
0.5.0Review222026-05-27
0.3.0Review1122026-05-24
0.2.1Review1122026-05-24
0.1.2Review1002026-05-24

Block this in CI

PkgRadar gates @circuitwall/jarela (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @circuitwall/[email protected]