npm · registry.npmjs.org
@neikyun/ciel
Remote Payload: matched "curl "
Why PkgRadar flagged 6.16.3
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · package/assets/.claude/hooks/session-start.sh |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
6.16.3 | Review | 5 | 2026-05-26 |
6.17.0 | Review | 5 | 2026-05-26 |
6.15.5 | Review | 8 | 2026-05-25 |
6.15.4 | Review | 8 | 2026-05-25 |
6.15.1 | Review | 8 | 2026-05-25 |
6.15.2 | Review | 8 | 2026-05-25 |
6.14.6 | Review | 41 | 2026-05-25 |
6.14.5 | Review | 53 | 2026-05-25 |
6.14.4 | Review | 53 | 2026-05-25 |
6.14.3 | Review | 53 | 2026-05-24 |
6.14.2 | Review | 53 | 2026-05-24 |
6.14.0 | Review | 53 | 2026-05-24 |
6.14.1 | Review | 53 | 2026-05-24 |
6.13.0 | Review | 41 | 2026-05-24 |
6.13.1 | Review | 41 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @neikyun/[email protected]