PkgRadar

npm · registry.npmjs.org

@opengsd/gsd-pi

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 1.2.0-dev.84c56d87

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/resources/extensions/gsd/key-manager.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/resources/extensions/remote-questions/notify.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/onboarding.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/resources/extensions/gsd/key-manager.ts
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/resources/extensions/remote-questions/notify.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.0-dev.84c56d87Review312026-06-11
1.2.0-dev.5457a158Review312026-06-11
1.2.0-dev.955e4da0Review312026-06-10
1.2.0-dev.4c756166Review312026-06-09
1.2.0-dev.4813ead6Review312026-06-09
1.2.0-dev.b1abb545Review312026-06-09
1.2.0-dev.844675c9Review312026-06-07
1.2.0Review312026-06-06
1.1.1-dev.016f3ee9Review312026-06-06
1.1.1-dev.1854a79aReview312026-06-06
1.1.1-dev.b2556262Review312026-06-06
1.1.1-dev.154fd443Review312026-06-05
1.1.1-dev.9f86580Review312026-06-05
1.1.1-dev.75048e7Review312026-06-04
1.1.1-dev.a5a2de8Review312026-06-04
1.1.1-dev.9bb7453Review312026-06-03
1.1.1-dev.2de7ea0Review312026-06-03
1.1.1-dev.595401eReview312026-06-03
1.1.1-dev.2034b16Review312026-06-03
1.1.1-dev.74e8dd1Review312026-06-02
1.1.1-dev.3ea310eReview312026-06-02
1.1.1Review312026-06-01
1.1.1-dev.616a1a1Review312026-06-01
1.1.0Review312026-05-31
1.0.2-dev.fb7ddf1Review312026-05-31
1.0.2-dev.a271e2dReview312026-05-31
1.0.2-dev.88c4dc5Review312026-05-31
1.0.2-dev.aed3486Review312026-05-31
1.0.2-dev.cce3612Review312026-05-31
1.0.2-dev.5f7864cReview312026-05-30
1.0.2-dev.29398d2Review312026-05-30
1.0.2-dev.2c204d3Review312026-05-30
1.0.2-dev.867e002Review312026-05-30
1.0.2-dev.dbfb371Review312026-05-30
1.0.2-dev.5961fbfReview312026-05-30
1.0.2-dev.d55d5c9Review312026-05-29
1.0.2-dev.e70300cReview312026-05-29
1.0.2-dev.e9a1b49Review312026-05-29
1.0.2-dev.235ebf3Review312026-05-29
1.0.2-dev.d456457Review312026-05-29
1.0.2-dev.50223bcReview312026-05-29

Block this in CI

PkgRadar gates @opengsd/gsd-pi (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @opengsd/[email protected]