PkgRadar

npm · registry.npmjs.org

@rubytech/create-realagent-code

Webhook Exfil Endpoint: matched "api.telegram.org/bot"

Why PkgRadar flagged 0.1.327

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "api.telegram.org/bot" · package/payload/server/server.js
mediumRemote Payloadmatched "curl " · package/dist/index.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/payload/server/server.js
mediumRemote Payloadmatched "curl " · package/payload/platform/plugins/workflows/mcp/test-workflows.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.327High risk762026-06-17
0.1.326High risk762026-06-17
0.1.325High risk532026-06-17
0.1.324High risk532026-06-17
0.1.323High risk762026-06-15
0.1.322High risk762026-06-15
0.1.321High risk762026-06-15
0.1.320High risk532026-06-15
0.1.319High risk532026-06-14
0.1.315High risk532026-06-14
0.1.316High risk532026-06-14
0.1.314High risk762026-06-14
0.1.313High risk532026-06-13
0.1.312High risk532026-06-13
0.1.311High risk532026-06-13
0.1.310High risk532026-06-13
0.1.309High risk762026-06-13
0.1.308High risk532026-06-13
0.1.307High risk762026-06-13
0.1.306High risk532026-06-13
0.1.305High risk532026-06-12
0.1.304High risk762026-06-12
0.1.303High risk532026-06-12
0.1.302High risk532026-06-12
0.1.301High risk762026-06-12
0.1.300High risk762026-06-12
0.1.299High risk532026-06-12
0.1.298High risk762026-06-11
0.1.296High risk762026-06-11
0.1.295High risk532026-06-11
0.1.294High risk762026-06-11
0.1.293High risk762026-06-11
0.1.292High risk762026-06-11
0.1.291High risk532026-06-11
0.1.290High risk532026-06-10
0.1.289High risk532026-06-10
0.1.288High risk762026-06-10
0.1.287High risk532026-06-10
0.1.286High risk532026-06-10
0.1.285High risk532026-06-10
0.1.284High risk532026-06-10
0.1.283High risk532026-06-10
0.1.282Review242026-06-09
0.1.281Review242026-06-08
0.1.280Review162026-06-08
0.1.279Review162026-06-08
0.1.278Review162026-06-08
0.1.277Review162026-06-07
0.1.276Review162026-06-07
0.1.275Review252026-06-07
0.1.274Review362026-06-07
0.1.273Review252026-06-07
0.1.272Review252026-06-07
0.1.271Review252026-06-07
0.1.270Review252026-06-07
0.1.269Review252026-06-07
0.1.268Review252026-06-07
0.1.267Review362026-06-07
0.1.266Review252026-06-07
0.1.265Review252026-06-06
0.1.264Review252026-06-06
0.1.263Review252026-06-06
0.1.259Review252026-06-06
0.1.258Review252026-06-06
0.1.257Review252026-06-06
0.1.256Review252026-06-06
0.1.255Review332026-06-05
0.1.254Review332026-06-04
0.1.253Review332026-06-04
0.1.251Review332026-06-04
0.1.252Review332026-06-04
0.1.249Review352026-06-04
0.1.248Review352026-06-04
0.1.247Review352026-06-04
0.1.246Review332026-06-04
0.1.244Review332026-06-04
0.1.243Review242026-06-02
0.1.241Review242026-06-02
0.1.242Review242026-06-02
0.1.240Review242026-06-02
0.1.238Review242026-06-02
0.1.239Review242026-06-02
0.1.237Review242026-06-02
0.1.235Review242026-06-02
0.1.234Review242026-06-02
0.1.233Review242026-06-02
0.1.232Review242026-06-01
0.1.229Review242026-06-01
0.1.230Review242026-06-01
0.1.227Review242026-06-01
0.1.226Review242026-06-01
0.1.225Review242026-06-01
0.1.224Review242026-06-01
0.1.223Review242026-05-31
0.1.222Review242026-05-31
0.1.221Review242026-05-31
0.1.219Review242026-05-31
0.1.216Review242026-05-31
0.1.214Review242026-05-31
0.1.212Review242026-05-31
0.1.210Review242026-05-31
0.1.208Review242026-05-30
0.1.206Review242026-05-30
0.1.204Review242026-05-30
0.1.203Review482026-05-30
0.1.200Review242026-05-30
0.1.198Review242026-05-30
0.1.196Review242026-05-30
0.1.195Review242026-05-30
0.1.194Review242026-05-30
0.1.193Review242026-05-30
0.1.192Review242026-05-30
0.1.190Review242026-05-29
0.1.191Review242026-05-29
0.1.189Review242026-05-29
0.1.188Review242026-05-29
0.1.187Review492026-05-28
0.1.185Review982026-05-28
0.1.186Review492026-05-28
0.1.183Review492026-05-28
0.1.184Review492026-05-28
0.1.181Review502026-05-27
0.1.182Review502026-05-27
0.1.177Review502026-05-27
0.1.179Review502026-05-27
0.1.171Review502026-05-27
0.1.172Review502026-05-27
0.1.148Review702026-05-26
0.1.146Review702026-05-26
0.1.147Review702026-05-26
0.1.143Review702026-05-25
0.1.144Review702026-05-25
0.1.140Review702026-05-25
0.1.132Review702026-05-25
0.1.138Review702026-05-25
0.1.115Review1122026-05-25
0.1.114Review622026-05-25
0.1.113Review672026-05-25
0.1.112Review922026-05-25
0.1.111Review922026-05-24
0.1.110Review922026-05-24
0.1.109Review1122026-05-24
0.1.108Review1122026-05-24
0.1.107Review1122026-05-24
0.1.105Review1122026-05-24
0.1.106Review1122026-05-24
0.1.104Review1122026-05-24
0.1.102Review1122026-05-24
0.1.103Review1122026-05-24

Block this in CI

PkgRadar gates @rubytech/create-realagent-code (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @rubytech/[email protected]
Start free — 25 scans / moView full evidence