PkgRadar

npm · registry.npmjs.org

@salesforce/vite-plugin-lwc-ui-bundle

Remote Payload: matched "curl "

Why PkgRadar flagged 10.12.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/skills/test-mcp-server/default-test-server-config.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
10.12.1Review122026-06-13
10.12.0Review122026-06-12
10.11.1Review82026-06-12
10.11.0Review82026-06-11
10.10.3Review122026-06-11
10.10.2Review82026-06-11
10.10.1Review82026-06-10
10.10.0Review122026-06-10
10.9.2Review122026-06-10
10.9.1Review82026-06-10
10.9.0Review122026-06-10
10.8.0Review82026-06-10
10.7.0Review82026-06-10
10.6.5Review82026-06-09
10.6.3Review122026-06-09
10.6.4Review122026-06-09
10.6.2Review122026-06-08
10.6.1Review122026-06-08
10.6.0Review82026-06-05
10.5.1Review82026-06-04
10.5.0Review122026-06-03
10.4.1Review82026-06-03
10.4.0Review122026-06-02
10.3.0Review82026-06-02
10.2.2Review122026-06-01
10.2.1Review122026-06-01
9.21.0Review82026-05-29
10.0.0Review82026-05-29
9.20.0Review122026-05-29
9.19.0Review122026-05-29
9.17.1Review82026-05-29
9.18.0Review122026-05-29
9.17.0Review82026-05-29
9.16.1Review122026-05-29
9.15.0Review122026-05-28
9.16.0Review122026-05-28
9.12.1Review82026-05-28
9.12.0Review122026-05-28
9.11.0Review122026-05-28
9.10.2Review82026-05-27
9.10.1Review82026-05-27
9.10.0Review82026-05-27
9.9.4Review122026-05-26
9.9.2Review82026-05-25
9.9.3Review82026-05-25
9.9.0Review122026-05-25
9.9.1Review122026-05-25

Block this in CI

PkgRadar gates @salesforce/vite-plugin-lwc-ui-bundle (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @salesforce/[email protected]