PkgRadar

npm · registry.npmjs.org

@heetmehta18/autodev

Remote Payload: matched "curl "

Why PkgRadar flagged 0.1.6

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/bin/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.2Low risk02026-06-02
0.3.1Low risk02026-06-01
0.3.0Low risk02026-06-01
0.2.0Low risk02026-05-31
0.1.6Review122026-05-30
0.1.5Review122026-05-30
0.1.3Review122026-05-30
0.1.2Review122026-05-30
0.1.1Review122026-05-30

Block this in CI

PkgRadar gates @heetmehta18/autodev (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @heetmehta18/[email protected]