PkgRadar

npm · registry.npmjs.org

@remnic/plugin-claude-code

Remote Payload: matched "curl "

Why PkgRadar flagged 9.3.637

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/hooks/bin/post-tool-observe.sh
mediumRemote Payloadmatched "curl " · package/hooks/bin/session-start.sh
mediumRemote Payloadmatched "curl " · package/hooks/bin/user-prompt-recall.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
9.3.637Review102026-06-15
9.3.636Review102026-06-15
9.3.635Review102026-06-14
9.3.634Review102026-06-13
9.3.633Review102026-06-12
9.3.632Review102026-06-12
9.3.631Review102026-06-12
9.3.630Review102026-06-12
9.3.629Review102026-06-12
9.3.628Review102026-06-12
9.3.627Review102026-06-12
9.3.626Review102026-06-12
9.3.625Review102026-06-12
9.3.624Review102026-06-09
9.3.623Review102026-06-09
9.3.622Review102026-06-08
9.3.621Review102026-06-08
9.3.620Review102026-06-08
9.3.619Review102026-06-08
9.3.618Review102026-06-08
9.3.617Review102026-06-08
9.3.616Review102026-06-08
9.3.615Review102026-06-08
9.3.614Review102026-06-07
9.3.613Review102026-06-07
9.3.612Review102026-06-05
9.3.611Review102026-06-04
9.3.609Review102026-06-04
9.3.610Review102026-06-04
9.3.606Review102026-06-04
9.3.607Review102026-06-04
9.3.603Review102026-06-04
9.3.602Review102026-06-04
9.3.596Review102026-06-04
9.3.595Review102026-06-04
9.3.594Review102026-06-04
9.3.593Review102026-06-04
9.3.592Review102026-06-04
9.3.591Review102026-06-04
9.3.590Review102026-06-04
9.3.589Review102026-06-04
9.3.588Review102026-06-04
9.3.587Review102026-06-04
9.3.586Review102026-06-04
9.3.585Review102026-06-04
9.3.584Review102026-06-04
9.3.583Review102026-06-04
9.3.582Review102026-06-04
9.3.581Review102026-06-04
9.3.580Review102026-06-04
9.3.579Review102026-06-04
9.3.578Review102026-06-03
9.3.577Review102026-06-03
9.3.576Review102026-06-03
9.3.575Review102026-06-03
9.3.573Review102026-06-03
9.3.571Review102026-06-03
9.3.572Review102026-06-03
9.3.570Review102026-06-03
9.3.568Review102026-06-03
9.3.569Review102026-06-03
9.3.567Review102026-06-03
9.3.566Review102026-06-03
9.3.565Review102026-06-03
9.3.564Review102026-06-03
9.3.563Review102026-06-03
9.3.562Review102026-06-03
9.3.561Review102026-06-03
9.3.560Review102026-06-03
9.3.559Review102026-06-03
9.3.558Review102026-06-03
9.3.557Review102026-06-03
9.3.556Review102026-06-03
9.3.555Review102026-06-03
9.3.554Review102026-06-03
9.3.553Review102026-06-03
9.3.552Review102026-06-03
9.3.551Review102026-06-03
9.3.550Review102026-06-03
9.3.549Review102026-06-02
9.3.548Review102026-06-02
9.3.547Review102026-06-02
9.3.546Review102026-06-02
9.3.544Review102026-06-02
9.3.545Review102026-06-02
9.3.543Review102026-06-02
9.3.541Review102026-06-02
9.3.542Review102026-06-02
9.3.529Review102026-06-02
9.3.527Review102026-06-02
9.3.528Review102026-06-02
9.3.524Review102026-06-02
9.3.523Review102026-06-02
9.3.522Review102026-06-02
9.3.521Review102026-06-02
9.3.520Review102026-06-01
9.3.519Review102026-06-01
9.3.518Review102026-06-01
9.3.515Review102026-06-01
1.0.1Review102026-06-01

Block this in CI

PkgRadar gates @remnic/plugin-claude-code (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @remnic/[email protected]
Start free — 25 scans / moView full evidence