PkgRadar

npm · registry.npmjs.org

@hasna/attachments

Large Javascript Payload: 2302384 bytes

Why PkgRadar flagged 1.0.26

SeveritySignalEvidence
mediumLarge Javascript Payload2302384 bytes · package/dist/mcp/server.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.27Low risk02026-06-07
1.0.26Review102026-05-28
1.0.25Review102026-05-28
1.0.23Review102026-05-25
1.0.24Review102026-05-25

Block this in CI

PkgRadar gates @hasna/attachments (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @hasna/[email protected]