PkgRadar

npm · registry.npmjs.org

@ilies-bel/fleet

Remote Payload: matched "curl "

Why PkgRadar flagged 2.1.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/cli/stacks/Dockerfile.go
mediumRemote Payloadmatched "curl " · package/cli/cmd-add.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-init.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-ls.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-restart.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-rm.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-start.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-stop.sh
mediumRemote Payloadmatched "curl " · package/cli/cmd-sync.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
2.1.0Review502026-06-04
2.0.0Review502026-05-25
2.0.1Review502026-05-25
1.0.0Review502026-05-25

Block this in CI

PkgRadar gates @ilies-bel/fleet (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ilies-bel/[email protected]