PkgRadar

npm · registry.npmjs.org

@panctl/cli

Webhook Exfil Endpoint: matched "smee.io"

Why PkgRadar flagged 0.21.0

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "smee.io" · package/dist/cli/index.js
mediumRemote Payloadmatched "curl " · package/dist/cliproxy-BEGxRMxb.js
mediumRemote Payloadmatched "curl " · package/dist/cli/index.js
mediumRemote Payloadmatched "curl " · package/dist/sync-Cfgmsfls.js
mediumRemote Payloadmatched "curl " · package/sync-sources/hooks/pan-hook-lib.sh
mediumRemote Payloadmatched "curl " · package/sync-sources/hooks/statusline.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.21.0Review312026-06-04
0.20.1Review312026-06-03
0.20.0Review312026-06-03
0.19.0Review312026-06-02
0.18.0Review312026-06-02
0.17.3Review312026-06-01
0.17.1Review312026-06-01
0.17.2Review312026-06-01
0.17.0Review312026-06-01
0.16.2Review422026-05-29
0.16.1Review422026-05-29
0.15.0Review422026-05-28
0.16.0Review422026-05-28
0.14.0Review422026-05-28
0.13.0Review612026-05-28
0.11.2Review612026-05-27
0.11.1Review1842026-05-25
0.10.2Review1602026-05-25
0.11.0Review1602026-05-25

Block this in CI

PkgRadar gates @panctl/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @panctl/[email protected]