npm · registry.npmjs.org

@nexowatt/iobroker.admin

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 7.9.20

Severity	Signal	Evidence
medium	Remote Payload	matched "raw.githubusercontent.com" · package/adminWww/assets/Hosts-Bg8QzW5i.js
medium	Suspicious Publish Context	{"package_age_days":1,"publisher":"nexowatt","burst_same_day":2,"burst_week":3,"lure":null,"version_anomaly":true,"new_account":false}

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`7.9.20`	Review	22	2026-06-19
`7.9.17`	Review	22	2026-06-18
`7.9.2`	Review	22	2026-06-18

Block this in CI

PkgRadar gates @nexowatt/iobroker.admin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @nexowatt/[email protected]