PkgRadar

npm · registry.npmjs.org

@qingchencloud/openclaw-zh

Webhook Exfil Endpoint: matched "ngrok.app"

Why PkgRadar flagged 2026.6.6-nightly.202606131706

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok.app" · package/dist/dist-C-tiotRe.js
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/dist/guarded-json-api-8BGxVe3N.js
highWebhook Exfil Endpointmatched "api.telegram.org/bot" · package/dist/i18n-Brdoi_U_.js
mediumCredential file accessmatched ".npmrc" · package/dist/install-package-dir-CuBuoK7y.js
mediumCredential file accessmatched ".npmrc" · package/dist/npm-install-env-CSqfL5Dl.js
mediumCredential file accessmatched ".npmrc" · package/dist/npm-managed-root-hgT_1slg.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.6.6-nightly.202606131706High risk1042026-06-13
2026.6.6-nightly.202606131606High risk1042026-06-13
2026.6.6-nightly.202606131517High risk1042026-06-13
2026.6.6-nightly.202606131426High risk2082026-06-13
2026.6.6-nightly.202606131312High risk1042026-06-13
2026.6.6-nightly.202606131213High risk1042026-06-13
2026.6.6-nightly.202606131124High risk1042026-06-13
2026.5.27-nightly.202605300735High risk1012026-06-13
2026.5.27-nightly.202605300555High risk1012026-06-13
2026.5.27-nightly.202605300235High risk1012026-06-13
2026.5.27-nightly.202605300402High risk1012026-06-13
2026.5.27-nightly.202605300123High risk1012026-06-13
2026.5.27-nightly.202605300004High risk1012026-06-13
2026.5.27-nightly.202605292305High risk1012026-06-13
2026.5.27-nightly.202605292214High risk1012026-06-13
2026.5.27-nightly.202605292119High risk1012026-06-13
2026.5.27-nightly.202605291346High risk1012026-06-13
2026.5.27-nightly.202605291147High risk1012026-06-13
2026.5.27-nightly.202605291003High risk1012026-06-13
2026.5.27-nightly.202605290802High risk1012026-06-13
2026.5.27-nightly.202605290605High risk1012026-06-13
2026.6.6-nightly.202606130944High risk1042026-06-13
2026.6.6-nightly.202606130606High risk1042026-06-13
2026.6.6-nightly.202606130756High risk1042026-06-13
2026.6.6-nightly.202606130403High risk1042026-06-13
2026.6.6-nightly.202606130131High risk1042026-06-13
2026.6.6-nightly.202606130235High risk1042026-06-13
2026.6.6-nightly.202606122305High risk1042026-06-13
2026.6.6-nightly.202606130008High risk1042026-06-13
2026.6.6-nightly.202606122116High risk2082026-06-12
2026.6.6-nightly.202606122026High risk1042026-06-12
2026.6.6-nightly.202606121734High risk1042026-06-12
2026.6.6-nightly.202606121547High risk1042026-06-12
2026.6.6-nightly.202606121346High risk1042026-06-12
2026.6.6-nightly.202606121153High risk1042026-06-12
2026.6.5-nightly.202606120615High risk2082026-06-12
2026.6.5-nightly.202606120403High risk1042026-06-12
2026.6.5-nightly.202606112220High risk1042026-06-11
2026.6.5-nightly.202606111934High risk1042026-06-11
2026.6.5-nightly.202606111749High risk2082026-06-11
2026.6.5-nightly.202606111604High risk1042026-06-11
2026.6.5-nightly.202606111403High risk1042026-06-11
2026.6.5-nightly.202606111205High risk2082026-06-11
2026.6.5-nightly.202606111028High risk2082026-06-11
2026.6.5-nightly.202606111005High risk1042026-06-11
2026.6.5-nightly.202606110618High risk1042026-06-11
2026.6.5-nightly.202606110403High risk1042026-06-11
2026.6.5-zh.1High risk1012026-06-11
2026.6.5-nightly.202606110236High risk2082026-06-11
2026.6.5-nightly.202606110132High risk1042026-06-11
2026.6.5-nightly.202606110006High risk1042026-06-11
2026.6.5-nightly.202606102313High risk1042026-06-10
2026.6.5-nightly.202606102221High risk1042026-06-10
2026.6.5-nightly.202606102127High risk1042026-06-10
2026.6.5-nightly.202606102033High risk2082026-06-10
2026.6.5-nightly.202606101933High risk1042026-06-10
2026.6.5-nightly.202606101743High risk1042026-06-10
2026.6.5-nightly.202606101600High risk2082026-06-10
2026.6.5-nightly.202606101351High risk1042026-06-10
2026.6.5-nightly.202606101150High risk2082026-06-10
2026.6.5-nightly.202606101003High risk2082026-06-10
2026.6.5-nightly.202606100804High risk2082026-06-10
2026.5.27-nightly.202605290403High risk1012026-06-10
2026.5.27-nightly.202605290127High risk1012026-06-10
2026.5.27-nightly.202605290235High risk1012026-06-10
2026.5.26-nightly.202605280605High risk1012026-06-10
2026.5.26-nightly.202605280403High risk1012026-06-10
2026.5.27-nightly.202605301504High risk1012026-06-10
2026.5.22-nightly.202605260758High risk992026-06-10
2026.5.22-nightly.202605260604High risk992026-06-10
2026.5.22-nightly.202605260403High risk992026-06-10
2026.5.22-nightly.202605260235High risk992026-06-10
2026.5.22-nightly.202605260123High risk992026-06-10
2026.5.22-nightly.202605260004High risk992026-06-10
2026.5.22-nightly.202605252303High risk992026-06-10
2026.5.22-nightly.202605252204High risk992026-06-10
2026.5.22-nightly.202605252104High risk992026-06-10
2026.5.22-nightly.202605252013High risk992026-06-10
2026.5.27-nightly.202605301305High risk1012026-06-10
2026.6.5-nightly.202606100235High risk1042026-06-10
2026.6.5-nightly.202606100128High risk1042026-06-10
2026.6.5-nightly.202606100005High risk1042026-06-10
2026.6.5-nightly.202606092306High risk1042026-06-10
2026.6.5-nightly.202606092118High risk1042026-06-10
2026.6.5-nightly.202606092022High risk1012026-06-10
2026.6.5-nightly.202606091928High risk1012026-06-10
2026.6.5-nightly.202606091823High risk1012026-06-10
2026.6.1-nightly.202606091728High risk1012026-06-10
2026.6.1-nightly.202606091543High risk1012026-06-10
2026.6.1-nightly.202606091435High risk1012026-06-10
2026.6.1-nightly.202606091336High risk1012026-06-10
2026.6.1-nightly.202606091143High risk1012026-06-10
2026.6.1-nightly.202606091000High risk1012026-06-10
2026.6.1-nightly.202606090759High risk1012026-06-10
2026.6.1-nightly.202606090604High risk1012026-06-10
2026.6.1-nightly.202606090402High risk1012026-06-10
2026.6.1-nightly.202606090235High risk1012026-06-10
2026.6.1-nightly.202606090123High risk1012026-06-10
2026.6.1-nightly.202606090004High risk1012026-06-10
2026.6.1-nightly.202606082305High risk1012026-06-10
2026.6.1-nightly.202606082213High risk1012026-06-10
2026.6.1-nightly.202606082120High risk1012026-06-10
2026.6.1-nightly.202606082029High risk1012026-06-10
2026.6.1-nightly.202606081931High risk1012026-06-10
2026.6.1-nightly.202606081832High risk1012026-06-10
2026.6.1-nightly.202606081738High risk1012026-06-10
2026.6.1-nightly.202606081603High risk1012026-06-10
2026.6.1-nightly.202606081404High risk1012026-06-10
2026.6.1-nightly.202606081215High risk1012026-06-10
2026.6.1-nightly.202606081008High risk1012026-06-10
2026.6.1-nightly.202606080823High risk1012026-06-10
2026.6.1-nightly.202606080618High risk1012026-06-10
2026.6.1-nightly.202606080404High risk1012026-06-10
2026.6.1-nightly.202606080235High risk1012026-06-10
2026.6.1-nightly.202606080132High risk1012026-06-10
2026.6.1-nightly.202606080004High risk1012026-06-10
2026.6.1-nightly.202606072303High risk1012026-06-10
2026.6.1-nightly.202606072203High risk1012026-06-10
2026.6.1-nightly.202606072104High risk1012026-06-10
2026.6.1-nightly.202606071905High risk1012026-06-10
2026.6.1-nightly.202606071803High risk1012026-06-10
2026.6.1-nightly.202606071119High risk1012026-06-10
2026.6.1-nightly.202606070947High risk1012026-06-10
2026.6.1-nightly.202606070759High risk1012026-06-10
2026.6.1-nightly.202606070403High risk1012026-06-10
2026.6.1-nightly.202606070608High risk1012026-06-10
2026.6.1-nightly.202606070235High risk1012026-06-10
2026.6.1-nightly.202606070131High risk1012026-06-10
2026.6.1-nightly.202606070003High risk1012026-06-10
2026.6.1-nightly.202606062303High risk1012026-06-10
2026.6.1-nightly.202606062203High risk1012026-06-10
2026.6.1-nightly.202606062103High risk1012026-06-10
2026.6.1-nightly.202606062005High risk1012026-06-10
2026.6.1-nightly.202606061905High risk1012026-06-10
2026.6.1-nightly.202606061803High risk1012026-06-10
2026.6.1-nightly.202606061704High risk1012026-06-10
2026.6.1-nightly.202606061604High risk1012026-06-10
2026.6.1-nightly.202606061505High risk1012026-06-10
2026.6.1-nightly.202606061417High risk1012026-06-10
2026.6.1-nightly.202606061305High risk1012026-06-10
2026.6.1-nightly.202606061204High risk1012026-06-10
2026.6.1-nightly.202606061110High risk1012026-06-10
2026.6.1-nightly.202606061023High risk1012026-06-10
2026.6.1-nightly.202606060738High risk1012026-06-10
2026.6.1-nightly.202606060600High risk1012026-06-10
2026.6.1-nightly.202606060403High risk1012026-06-10
2026.6.1-nightly.202606060235High risk1012026-06-10
2026.6.1-nightly.202606060124High risk1012026-06-10
2026.6.1-nightly.202606052304High risk1012026-06-10
2026.6.1-nightly.202606052206High risk1012026-06-10
2026.6.1-nightly.202606052111High risk1012026-06-10
2026.6.1-nightly.202606052020High risk1012026-06-10
2026.6.1-nightly.202606051918High risk1012026-06-10
2026.6.1-nightly.202606051724High risk1012026-06-10
2026.6.1-nightly.202606051544High risk1012026-06-10
2026.6.1-nightly.202606051341High risk1012026-06-10
2026.6.1-nightly.202606051144High risk1012026-06-10
2026.6.1-nightly.202606050804High risk1012026-06-10
2026.6.1-nightly.202606050607High risk1012026-06-10
2026.6.1-nightly.202606050403High risk1012026-06-10
2026.6.1-nightly.202606050235High risk1012026-06-10
2026.6.1-nightly.202606050129High risk1012026-06-10
2026.6.1-nightly.202606050004High risk1012026-06-10
2026.6.1-nightly.202606042304High risk1012026-06-10
2026.6.1-nightly.202606042211High risk1012026-06-10
2026.6.1-nightly.202606042025High risk1012026-06-10
2026.6.1-nightly.202606042115High risk1012026-06-10
2026.6.1-nightly.202606041346High risk1012026-06-10
2026.6.1-nightly.202606041239High risk1012026-06-10
2026.6.1-nightly.202606041139High risk1012026-06-10
2026.6.1-nightly.202606041003High risk1012026-06-10
2026.6.1-nightly.202606040618High risk1012026-06-10
2026.6.1-nightly.202606040808High risk1012026-06-10
2026.6.1-nightly.202606040408High risk1012026-06-10
2026.6.5-nightly.202606100607High risk2082026-06-10
2026.6.1-nightly.202606040240High risk1012026-06-10
2026.6.1-nightly.202606040140High risk1012026-06-10
2026.6.1-nightly.202606040015High risk1012026-06-10
2026.6.1-nightly.202606032317High risk1012026-06-10
2026.6.1-nightly.202606032231High risk1012026-06-10
2026.6.1-nightly.202606032138High risk1012026-06-10
2026.5.28-nightly.202606031957High risk1012026-06-10
2026.5.28-nightly.202606031607High risk1012026-06-10
2026.5.28-nightly.202606031414High risk1012026-06-10
2026.5.28-nightly.202606031219High risk1012026-06-10
2026.5.28-nightly.202606031019High risk1012026-06-10
2026.5.28-nightly.202606030826High risk1012026-06-10
2026.5.28-nightly.202606030407High risk1012026-06-10
2026.5.28-nightly.202606030620High risk1012026-06-10
2026.5.28-nightly.202606030239High risk1012026-06-10
2026.5.28-nightly.202606030139High risk1012026-06-10
2026.5.28-nightly.202606030014High risk1012026-06-10
2026.5.28-nightly.202606022317High risk1012026-06-10
2026.5.28-nightly.202606022227High risk1012026-06-10
2026.5.28-nightly.202606022137High risk1012026-06-10
2026.5.28-nightly.202606021953High risk1012026-06-10
2026.5.28-nightly.202606021804High risk1012026-06-10
2026.5.28-nightly.202606021606High risk1012026-06-10
2026.5.28-nightly.202606021404High risk1012026-06-10
2026.5.28-nightly.202606021204High risk1012026-06-10

Block this in CI

PkgRadar gates @qingchencloud/openclaw-zh (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @qingchencloud/[email protected]
Start free — 25 scans / moView full evidence