npm · registry.npmjs.org

@companycam/saasquatch-custom-components

Remote Payload: matched "wget "

Why PkgRadar flagged 0.0.12

Severity	Signal	Evidence
medium	Remote Payload	matched "wget " · package/dist/esm-es5/cc-referral-level_4.entry.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.10`	Low risk	0	2026-06-09
`0.0.9`	Low risk	0	2026-06-09
`0.0.11`	Low risk	0	2026-05-26
`0.0.12`	Review	8	2026-05-26

Block this in CI

PkgRadar gates @companycam/saasquatch-custom-components (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @companycam/[email protected]