npm · registry.npmjs.org
@openchamber/web
Webhook Exfil Endpoint: matched "ngrok-free.app"
Why PkgRadar flagged 1.12.4
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "ngrok-free.app" · package/server/lib/tunnels/index.test.js |
| high | Webhook Exfil Endpoint | matched "ngrok-free.app" · package/server/lib/ngrok-tunnel.test.js |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/dist/assets/main-BXjogxEm.js |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/server/lib/package-manager.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.12.4 | High risk | 83 | 2026-06-10 |
1.12.3 | High risk | 79 | 2026-06-10 |
1.12.2 | High risk | 79 | 2026-06-10 |
1.12.1 | Review | 44 | 2026-06-03 |
1.12.0 | Review | 44 | 2026-06-02 |
1.11.7 | Review | 60 | 2026-05-27 |
1.11.6 | Review | 60 | 2026-05-25 |
1.11.4 | Review | 196 | 2026-05-24 |
1.11.5 | Review | 196 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @openchamber/[email protected]