PkgRadar

npm · registry.npmjs.org

@mailwoman/core

Remote Payload: matched "curl "

Why PkgRadar flagged 4.5.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/data/chromium-i18n/ssl-address-download.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
4.5.0Review32026-06-12
4.4.0Review32026-06-11
4.3.0Review32026-06-10
4.2.0Review32026-06-10
4.1.0Review32026-06-08
4.0.0Review122026-06-06
3.0.0Review32026-05-27
2.1.0Review32026-05-25
2.2.0Review32026-05-25

Block this in CI

PkgRadar gates @mailwoman/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mailwoman/[email protected]