npm · registry.npmjs.org

@pipedream/sdk

Webhook Exfil Endpoint: matched "pipedream.net"

Why PkgRadar flagged 3.0.7

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "pipedream.net" · package/dist/cjs/api/resources/workflows/client/Client.js
high	Webhook Exfil Endpoint	matched "pipedream.net" · package/dist/esm/api/resources/workflows/client/Client.mjs

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.0.7`	High risk	25	2026-06-10
`3.1.0`	High risk	25	2026-06-10
`3.0.9`	Review	15	2026-05-30
`3.0.8`	Review	15	2026-05-28
`3.0.6`	Review	15	2026-05-27

Block this in CI

PkgRadar gates @pipedream/sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pipedream/[email protected]