PkgRadar

npm · registry.npmjs.org

@mc2100/pi-web

Suspicious Publish Context: {"package_age_days":0,"publisher":"mc2100","burst_same_day":1,"burst_week":1,"lure":null,"version_anomaly":false,"new_account":true}

Why PkgRadar flagged 0.6.17

SeveritySignalEvidence
mediumSuspicious Publish Context{"package_age_days":0,"publisher":"mc2100","burst_same_day":1,"burst_week":1,"lure":null,"version_anomaly":false,"new_account":true}

Scanned versions

VersionVerdictScoreScanned (UTC)
0.6.17Review102026-06-13
0.6.18Review102026-06-13

Block this in CI

PkgRadar gates @mc2100/pi-web (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mc2100/[email protected]