PkgRadar

npm · registry.npmjs.org

@kodelyth/voice-call

Webhook Exfil Endpoint: matched "ngrok-free.app"

Why PkgRadar flagged 2026.6.10

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/dist/guarded-json-api-xAIbFPZh.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.10High risk402026-06-10
2026.6.9High risk402026-06-10
2026.6.8High risk402026-06-10
2026.6.7High risk402026-06-10
2026.6.4High risk402026-06-10
2026.6.3High risk402026-06-10
2026.6.2High risk402026-06-10
2026.6.1High risk402026-06-10
2026.5.42High risk1002026-06-10
2026.5.39Low risk02026-06-01

Block this in CI

PkgRadar gates @kodelyth/voice-call (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @kodelyth/[email protected]
Start free — 25 scans / moView full evidence