PkgRadar

npm · registry.npmjs.org

@downcity/plugins

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 1.0.72

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/bin/chat/channels/telegram/ApiClient.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/bin/chat/channels/telegram/BotInfo.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/chat/channels/telegram/ApiClient.ts
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/chat/channels/telegram/BotInfo.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.72Review472026-06-12
1.0.71Review682026-06-12
1.0.66Review682026-06-12
1.0.64Review682026-06-11
1.0.61Review682026-06-10
1.0.60Review682026-06-10
1.0.59Review682026-06-10
1.0.57Review682026-06-10
1.0.56Review682026-06-10
1.0.52Review682026-06-08
1.0.51Review682026-06-08
1.0.50Review682026-06-08
1.0.48Review682026-06-08
1.0.47Review682026-06-08
1.0.44Review682026-06-08
1.0.43Review682026-06-07
1.0.39Review682026-06-06
1.0.38Review682026-06-05
1.0.35Review682026-06-04
1.0.34Review682026-06-03
1.0.30Review682026-06-03
1.0.28Review682026-06-03
1.0.29Review682026-06-03
1.0.27Review682026-06-03
1.0.26Review682026-06-02
1.0.23Review682026-06-02
1.0.21Review682026-06-01
1.0.20Review682026-06-01
1.0.4Review682026-05-30
1.0.12Review682026-05-30
1.0.10Review682026-05-29

Block this in CI

PkgRadar gates @downcity/plugins (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @downcity/[email protected]
Start free — 25 scans / moView full evidence