PkgRadar

npm · registry.npmjs.org

@remnic/plugin-codex

Remote Payload: matched "curl "

Why PkgRadar flagged 9.3.613

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/hooks/bin/post-tool-observe.sh
mediumRemote Payloadmatched "curl " · package/hooks/bin/session-end.sh
mediumRemote Payloadmatched "curl " · package/hooks/bin/session-start.sh
mediumRemote Payloadmatched "curl " · package/hooks/bin/user-prompt-recall.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
9.3.632Low risk02026-06-12
9.3.631Low risk02026-06-12
9.3.630Low risk02026-06-12
9.3.629Low risk02026-06-12
9.3.628Low risk02026-06-12
9.3.624Low risk02026-06-09
9.3.623Low risk02026-06-09
9.3.622Low risk02026-06-09
9.3.621Low risk02026-06-08
9.3.620Low risk02026-06-08
9.3.619Low risk02026-06-08
9.3.618Low risk02026-06-08
9.3.617Low risk02026-06-08
9.3.616Low risk02026-06-08
9.3.614Low risk02026-06-08
9.3.615Low risk02026-06-08
9.3.613Review142026-06-05
9.3.612Review142026-06-05
9.3.611Review142026-06-04
9.3.609Review142026-06-04
9.3.610Review142026-06-04
9.3.607Review142026-06-04
9.3.606Review142026-06-04
9.3.602Review142026-06-04
9.3.603Review142026-06-04
9.3.595Review142026-06-04
9.3.594Review142026-06-04
9.3.593Review142026-06-04
9.3.592Review142026-06-04
9.3.591Review142026-06-04
9.3.590Review142026-06-04
9.3.589Review142026-06-04
9.3.588Review142026-06-04
9.3.587Review142026-06-04
9.3.586Review142026-06-04
9.3.585Review142026-06-04
9.3.584Review142026-06-04
9.3.583Review142026-06-04
9.3.582Review142026-06-04
9.3.581Review142026-06-04
9.3.580Review142026-06-04
9.3.579Review142026-06-04
9.3.578Review142026-06-03
9.3.577Review142026-06-03
9.3.575Review142026-06-03
9.3.576Review142026-06-03
9.3.573Review142026-06-03
9.3.572Review142026-06-03
9.3.571Review142026-06-03
9.3.570Review142026-06-03
9.3.569Review142026-06-03
9.3.568Review142026-06-03
9.3.567Review142026-06-03
9.3.566Review142026-06-03
9.3.565Review142026-06-03
9.3.564Review142026-06-03
9.3.563Review142026-06-03
9.3.562Review142026-06-03
9.3.561Review142026-06-03
9.3.560Review142026-06-03
9.3.559Review142026-06-03
9.3.558Review142026-06-03
9.3.557Review142026-06-03
9.3.556Review142026-06-03
9.3.555Review142026-06-03
9.3.554Review142026-06-03
9.3.553Review142026-06-03
9.3.552Review142026-06-03
9.3.551Review142026-06-03
9.3.550Review142026-06-03
9.3.549Review142026-06-03
9.3.548Review142026-06-02
9.3.547Review142026-06-02
9.3.546Review142026-06-02
9.3.544Review142026-06-02
9.3.545Review142026-06-02
9.3.543Review142026-06-02
9.3.541Review142026-06-02
9.3.542Review142026-06-02
9.3.528Review142026-06-02
9.3.529Review142026-06-02
9.3.524Review142026-06-02
9.3.523Review142026-06-02
9.3.522Review142026-06-02
9.3.521Review142026-06-02
9.3.520Review142026-06-01
9.3.519Review142026-06-01
9.3.518Review142026-06-01
1.0.1Review142026-06-01
9.3.515Review142026-06-01

Block this in CI

PkgRadar gates @remnic/plugin-codex (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @remnic/[email protected]
Start free — 25 scans / moView full evidence