PkgRadar

npm · registry.npmjs.org

@microsoft/teamsfx-core

Remote Payload: matched "curl "

Why PkgRadar flagged 3.0.14-alpha.cf95bb03a8.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/resource/deps-checker/dotnet-install.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
3.0.14-alpha.cf95bb03a8.0Review52026-06-12
3.0.14-alpha.b932927c99.0Review52026-06-11
3.0.14-alpha.98f30c64cd.0Review52026-06-11
3.0.13Review52026-06-10
3.0.14-alpha.1673f8d0ac.0Review52026-06-09
3.0.14-alpha.36cd4ecbcb.0Review52026-06-08
3.0.14-alpha.928ccb1294.0Review52026-06-06
3.0.14-alpha.e253f6af8e.0Review52026-06-05
3.0.14-alpha.1ba1d62e58.0Review52026-06-04
3.0.14-alpha.b70dfa5c06.0Review52026-06-03
3.0.14-alpha.e7283713b5.0Review52026-06-02
3.0.14-alpha.eb0bad7c98.0Review52026-06-01
3.0.14-alpha.be8df62efa.0Review172026-05-30
3.0.14-alpha.8bc371c690.0Review172026-05-29
3.0.14-alpha.39b9226977.0Review172026-05-28
3.0.14-alpha.a7b5a6db3d.0Review222026-05-27
3.0.14-beta.2026052613.0Review222026-05-26
3.0.14-alpha.25a62e6335.0Review222026-05-25
3.0.14-alpha.45d3a95504.0Review1842026-05-24
3.0.14-alpha.e01dbc1423.0Review1842026-05-24

Block this in CI

PkgRadar gates @microsoft/teamsfx-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @microsoft/[email protected]