npm · registry.npmjs.org
@neomei/agent-soul-framework
Remote Payload: matched "curl "
Why PkgRadar flagged 4.5.2
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · package/connectors/feishu/background.sh |
| medium | Remote Payload | matched "curl " · package/connectors/feishu/hooks/on-session-created.sh |
| medium | Remote Payload | matched "curl " · package/connectors/feishu/hooks/on-session-idle.sh |
| medium | Remote Payload | matched "curl " · package/connectors/feishu/restart-all.sh |
| medium | Remote Payload | matched "curl " · package/connectors/feishu/restart-feishu.sh |
| medium | Remote Payload | matched "curl " · package/connectors/feishu/restart-serve.sh |
| medium | Remote Payload | matched "curl " · package/start-feishu-daemon.sh |
| medium | Remote Payload | matched "curl " · package/connectors/feishu/start.sh |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
4.5.2 | Review | 50 | 2026-06-14 |
4.5.0 | Review | 50 | 2026-06-14 |
4.5.1 | Review | 50 | 2026-06-14 |
Block this in CI
pkgradar gate --ecosystem npm @neomei/[email protected]