npm · registry.npmjs.org
@mimusic/musicsdk
Remote Payload: matched "cUrl "
Why PkgRadar flagged 1.0.9
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "cUrl " · package/dist/mg_lyric.js |
| medium | Remote Payload | matched "cUrl " · package/dist/mg_songlist.js |
| medium | Remote Payload | matched "cUrl " · package/dist/wy_search.js |
| medium | Remote Payload | matched "cUrl " · package/dist/wy_songlist.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.1.0 | Low risk | 0 | 2026-05-26 |
1.0.9 | Review | 48 | 2026-05-24 |
1.0.10 | Review | 48 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @mimusic/[email protected]