PkgRadar

npm · registry.npmjs.org

@plutonhq/core-frontend

Messenger Bot Endpoint: matched "hooks.slack.com/services/" — messenger-bot URL without exfil context (likely a notification handler)

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.37Review102026-06-04
0.1.36Review102026-05-29
0.1.34Review72026-05-27
0.1.35Review72026-05-27

Block this in CI

PkgRadar gates @plutonhq/core-frontend (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @plutonhq/[email protected]