npm · registry.npmjs.org
@kuadrant/kuadrant-backstage-plugin-backend-dynamic
Webhook Exfil Endpoint: matched "ngrok.app"
Why PkgRadar flagged 0.2.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "ngrok.app" · package/node_modules/psl/dist/psl.cjs |
| high | Webhook Exfil Endpoint | matched "ngrok.app" · package/node_modules/psl/dist/psl.umd.cjs |
| high | Webhook Exfil Endpoint | matched "ngrok.app" · package/node_modules/psl/data/rules.js |
| high | Webhook Exfil Endpoint | matched "ngrok.app" · package/node_modules/psl/dist/psl.mjs |
| high | Credential file access | matched "KUBECONFIG" · package/node_modules/@kubernetes/client-node/dist/config.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.2.0 | High risk | 25 | 2026-06-12 |
0.2.0-2517b82 | High risk | 25 | 2026-06-12 |
0.2.1 | High risk | 25 | 2026-06-12 |
0.3.0-aaa46b4 | High risk | 25 | 2026-06-12 |
Block this in CI
pkgradar gate --ecosystem npm @kuadrant/[email protected]