PkgRadar

npm · registry.npmjs.org

@downcity/agent

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.1.25

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/bin/service/builtins/contact/runtime/EndpointResolver.js
mediumRemote Payloadmatched "cUrl " · package/src/service/builtins/contact/runtime/EndpointResolver.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.119Low risk02026-06-12
1.1.118Low risk02026-06-12
1.1.113Low risk02026-06-12
1.1.111Low risk02026-06-11
1.1.108Low risk02026-06-10
1.1.107Low risk02026-06-10
1.1.106Low risk02026-06-10
1.1.105Low risk02026-06-10
1.1.104Low risk02026-06-10
1.1.101Low risk02026-06-08
1.1.100Low risk02026-06-08
1.1.99Low risk02026-06-08
1.1.97Low risk02026-06-08
1.1.96Low risk02026-06-08
1.1.92Low risk02026-06-08
1.1.91Low risk02026-06-08
1.1.86Low risk02026-06-06
1.1.85Low risk02026-06-05
1.1.83Low risk02026-06-05
1.1.82Low risk02026-06-04
1.1.81Low risk02026-06-04
1.1.79Low risk02026-06-03
1.1.74Low risk02026-06-03
1.1.72Low risk02026-06-03
1.1.73Low risk02026-06-03
1.1.71Low risk02026-06-03
1.1.70Low risk02026-06-03
1.1.69Low risk02026-06-02
1.1.66Low risk02026-06-02
1.1.64Low risk02026-06-02
1.1.63Low risk02026-06-01
1.1.62Low risk02026-06-01
1.1.51Low risk02026-05-29
1.1.43Low risk02026-05-28
1.1.35Low risk02026-05-27
1.1.32Low risk02026-05-25
1.1.25Review242026-05-24
1.1.22Review242026-05-24
1.1.23Review242026-05-24

Related campaigns

Block this in CI

PkgRadar gates @downcity/agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @downcity/[email protected]
Start free — 25 scans / moView full evidence