PkgRadar

npm · registry.npmjs.org

@mgamil/mapx

Remote Payload: matched "curl "

Why PkgRadar flagged 0.3.5

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/languages/installer.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.5Review122026-06-01
0.3.4Review122026-06-01
0.3.3Review122026-05-31
0.3.2Review122026-05-31
0.3.1Review122026-05-30
0.3.0Review122026-05-29
0.2.7Review222026-05-28
0.2.5Review122026-05-24
0.2.6Review122026-05-24

Block this in CI

PkgRadar gates @mgamil/mapx (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mgamil/[email protected]