PkgRadar

npm · registry.npmjs.org

@magclaw/daemon

Remote Payload: matched "curl "

Why PkgRadar flagged 0.1.18

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/src/cli.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.41Low risk02026-06-13
0.1.40Low risk02026-06-02
0.1.39Low risk02026-06-02
0.1.38Low risk02026-06-02
0.1.36Low risk02026-05-28
0.1.37Low risk02026-05-28
0.1.34Low risk02026-05-27
0.1.32Low risk02026-05-26
0.1.33Low risk02026-05-26
0.1.24Low risk02026-05-26
0.1.22Low risk02026-05-25
0.1.23Low risk02026-05-25
0.1.18Review172026-05-25
0.1.19Review172026-05-25

Block this in CI

PkgRadar gates @magclaw/daemon (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @magclaw/[email protected]
Start free — 25 scans / moView full evidence