PkgRadar

npm · registry.npmjs.org

@fragment-dev/cli

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 2026.6.17

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/chunk-CW4UI44G.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.17Review82026-06-17
2026.6.16-3Review82026-06-16
2026.6.16-2Review82026-06-16
2026.6.16-1Review82026-06-16
2026.6.16Review82026-06-16
2026.6.12-7Review82026-06-12
2026.6.12-5Review82026-06-12
2026.6.12-4Review82026-06-12
2026.6.12-1Review82026-06-12
2026.6.12Review82026-06-12
2026.6.11-9Review82026-06-12
2026.6.11-5Review82026-06-11
2026.6.11-8Review82026-06-11
2026.6.11-4Review82026-06-11
2026.6.11-1Review82026-06-11
2026.6.10-9Review82026-06-10
2026.6.10-6Review82026-06-10
2026.6.10-4Review82026-06-10
2026.6.10-2Review82026-06-10
2026.6.10-1Review82026-06-10
2026.6.9-4Review82026-06-10
2026.6.9-3Review82026-06-09
2026.6.9-2Review82026-06-09
2026.6.9-1Review82026-06-09
2026.6.8-7Review82026-06-08
2026.6.8-5Review82026-06-08
2026.6.8-3Review82026-06-08
2026.6.8-2Review82026-06-08
2026.6.8Review82026-06-08
2026.6.5-8Review82026-06-05
2026.6.5-6Review82026-06-05
2026.6.5-4Review82026-06-05
2026.6.5-2Review82026-06-05
2026.6.5-1Review82026-06-05
2026.6.5Review82026-06-05
2026.6.4-10Review82026-06-05
2026.6.4-9Review82026-06-04
2026.6.4-8Review82026-06-04
2026.6.4-5Review82026-06-04
2026.6.4-6Review82026-06-04
2026.6.4-3Review82026-06-04
2026.6.4Review82026-06-04
2026.6.3-2Review82026-06-03
2026.6.3Review82026-06-03
2026.6.2-4Review82026-06-02
2026.6.2-3Review82026-06-02
2026.6.2Review82026-06-02
2026.6.1-6Review82026-06-01
2026.6.1-3Review82026-06-01
2026.6.1-4Review82026-06-01
2026.5.29-2Review82026-05-29
2026.5.29Review82026-05-29
2026.5.28-3Review82026-05-28
2026.5.28-4Review82026-05-28
2026.5.27-2Review232026-05-28
2026.5.28Review232026-05-28
2026.5.26-4Review232026-05-27
2026.5.26-2Review232026-05-26
2026.5.23Review232026-05-26
2026.5.26Review232026-05-26

Block this in CI

PkgRadar gates @fragment-dev/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @fragment-dev/[email protected]
Start free — 25 scans / moView full evidence