PkgRadar

npm · registry.npmjs.org

@dereekb/dbx-web

Remote Payload: matched "cUrl "

Why PkgRadar flagged 13.12.2

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/fesm2022/dereekb-dbx-web.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
13.16.0Low risk02026-06-06
13.15.0Low risk02026-06-05
13.14.0Low risk02026-06-03
13.13.0Low risk02026-06-02
13.12.9Low risk02026-05-31
13.12.8Low risk02026-05-30
13.12.7Low risk02026-05-29
13.12.6Low risk02026-05-29
13.12.5Low risk02026-05-29
13.12.4Low risk02026-05-28
13.12.2Review62026-05-27
13.12.3Review62026-05-27
13.12.0Review62026-05-27
13.12.1Review62026-05-27

Block this in CI

PkgRadar gates @dereekb/dbx-web (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @dereekb/[email protected]