PkgRadar

npm · registry.npmjs.org

@ruttl/bug-tracking

Webhook Exfil Endpoint: matched "ngrok-free.app"

Why PkgRadar flagged 1.1.16

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/lib/commonjs/BugTracking.js
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/lib/module/BugTracking.js
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/src/BugTracking.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.16High risk352026-06-09
1.2.0High risk352026-06-09
2.0.0Low risk02026-06-09
2.1.0Low risk02026-06-09

Block this in CI

PkgRadar gates @ruttl/bug-tracking (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ruttl/[email protected]
Start free — 25 scans / moView full evidence
@ruttl/bug-tracking — npm security scan | PkgRadar