PkgRadar

npm · registry.npmjs.org

@domu-ai/kiban-sdk

Remote Payload: matched "wGet "

Why PkgRadar flagged 1.197.1

SeveritySignalEvidence
mediumRemote Payloadmatched "wGet " · package/dashboard/client.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/internal/schemas.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.208.1Low risk02026-06-11
1.208.0Low risk02026-06-11
1.207.2Low risk02026-06-11
1.207.1Low risk02026-06-11
1.207.0Low risk02026-06-10
1.206.1Low risk02026-06-10
1.206.0Low risk02026-06-10
1.205.1Low risk02026-06-09
1.205.0Low risk02026-06-06
1.204.0Low risk02026-06-05
1.203.1Low risk02026-06-05
1.203.0Low risk02026-06-05
1.202.6Low risk02026-06-04
1.202.5Low risk02026-06-04
1.202.4Low risk02026-06-04
1.202.3Low risk02026-06-04
1.202.2Low risk02026-06-03
1.202.1Low risk02026-06-03
1.202.0Low risk02026-06-03
1.201.0Low risk02026-06-02
1.200.3Low risk02026-06-02
1.200.1Low risk02026-05-30
1.200.2Low risk02026-05-30
1.198.1Low risk02026-05-28
1.199.0Low risk02026-05-28
1.198.0Low risk02026-05-26
1.197.1Review122026-05-24
1.197.2Review122026-05-24

Block this in CI

PkgRadar gates @domu-ai/kiban-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @domu-ai/[email protected]
Start free — 25 scans / moView full evidence