PkgRadar

npm · registry.npmjs.org

@ozaiya/openclaw-channel

Remote Payload: matched "curl "

Why PkgRadar flagged 0.10.32

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/src/desktopContainer.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.10.32Review82026-06-12
0.10.31Review82026-06-12
0.10.30Review82026-06-12
0.10.29Review122026-06-12
0.10.28Review122026-06-12
0.10.26Review122026-06-08
0.10.25Review122026-06-08
0.10.24Review122026-06-08
0.10.23Review122026-06-07
0.10.22Review122026-06-07
0.10.21Review122026-06-06
0.10.20Review122026-06-06
0.10.19Review122026-06-06
0.10.18Review122026-06-06
0.10.16Review122026-06-02
0.10.17Review122026-06-02
0.10.13Review122026-06-02
0.10.12Review122026-06-01
0.10.9Review122026-06-01
0.10.11Review122026-06-01

Block this in CI

PkgRadar gates @ozaiya/openclaw-channel (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ozaiya/[email protected]