PkgRadar

npm · registry.npmjs.org

@kenkaiiii/ggcoder-eyes

Remote Payload: matched "curl "

Why PkgRadar flagged 0.1.8

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/probes/capture_email/install.sh
mediumRemote Payloadmatched "curl\n\n" · package/probes/http/install.sh
mediumRemote Payloadmatched "curl " · package/probes/capture_email/impl/mailpit.sh
mediumRemote Payloadmatched "curl " · package/probes/capture_email/test.sh
mediumRemote Payloadmatched "curl " · package/probes/http/test.sh
mediumRemote Payloadmatched "curl " · package/probes/visual/test.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.8Review622026-05-29
0.1.6Review622026-05-28
0.1.7Review622026-05-28

Block this in CI

PkgRadar gates @kenkaiiii/ggcoder-eyes (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @kenkaiiii/[email protected]
Start free — 25 scans / moView full evidence