PkgRadar

npm · registry.npmjs.org

@love-sqjm/magic

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 26.6.13

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/script/add-module.ts
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/script/compiler/compile-modules.ts
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/script/module-manager.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
26.6.13Review362026-06-12
26.6.10Review362026-06-10
26.6.3Review362026-06-01

Block this in CI

PkgRadar gates @love-sqjm/magic (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @love-sqjm/[email protected]
Start free — 25 scans / moView full evidence