PkgRadar

npm · registry.npmjs.org

@jaimevalasek/aioson

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 1.29.1

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/mcp-connectors/registry.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.29.1Review182026-06-12
1.28.1Review182026-06-11
1.28.0Review182026-06-11
1.23.3Review272026-06-11
1.23.1Review182026-06-11
1.23.0Review272026-06-10
1.22.0Review182026-06-10
1.21.8Review182026-06-09
1.21.7Review182026-06-05
1.21.6Review182026-06-05
1.21.5Review182026-06-04
1.21.4Review272026-06-02
1.21.0Review272026-05-30
1.19.0Review272026-05-30
1.20.0Review272026-05-30
1.21.3Review272026-05-29
1.17.2Review102026-05-25
1.17.3Review102026-05-25

Block this in CI

PkgRadar gates @jaimevalasek/aioson (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @jaimevalasek/[email protected]