PkgRadar

npm · registry.npmjs.org

@microsoft/m365agentstoolkit-cli

Remote Payload: matched "curl "

Why PkgRadar flagged 1.1.12-beta.2026061711.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/resource/deps-checker/dotnet-install.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.12-beta.2026061711.0Review62026-06-17
1.1.12-alpha.b320fb7f49.0Review32026-06-16
1.1.12-beta.2026061609.0Review32026-06-16
1.1.12-alpha.7ffcdb8131.0Review32026-06-16
1.1.12-alpha.cf95bb03a8.0Review32026-06-12
1.1.12-alpha.b932927c99.0Review32026-06-11
1.1.12-alpha.98f30c64cd.0Review32026-06-11
1.1.12-alpha.1673f8d0ac.0Review32026-06-10
1.1.11Review32026-06-10
1.1.12-alpha.36cd4ecbcb.0Review32026-06-08
1.1.12-alpha.928ccb1294.0Review32026-06-06
1.1.12-alpha.e253f6af8e.0Review32026-06-05
1.1.12-alpha.1ba1d62e58.0Review32026-06-04
1.1.12-alpha.b70dfa5c06.0Review32026-06-03
1.1.12-alpha.e7283713b5.0Review62026-06-02
1.1.12-alpha.eb0bad7c98.0Review62026-06-01
1.1.12-alpha.be8df62efa.0Review32026-05-30
1.1.12-alpha.8bc371c690.0Review32026-05-29
1.1.12-alpha.39b9226977.0Review62026-05-28
1.1.12-alpha.a7b5a6db3d.0Review212026-05-27
1.1.12-beta.2026052613.0Review212026-05-26
1.1.12-alpha.25a62e6335.0Review212026-05-25
1.1.12-alpha.45d3a95504.0Review722026-05-24
1.1.12-alpha.e01dbc1423.0Review722026-05-24

Block this in CI

PkgRadar gates @microsoft/m365agentstoolkit-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @microsoft/[email protected]