npm · registry.npmjs.org

@segment/action-destinations

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged 3.387.0-staging-30522ea7d

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "webhook.site" · package/dist/destinations/vernst-test/pingWebhook/index.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`3.387.0-staging-30522ea7d`	High risk	30	2026-06-11
`3.492.2-async`	Review	5	2026-06-08
`3.493.0`	Review	5	2026-06-08
`3.494.0`	Review	10	2026-05-28
`3.490.1-staging-550687e79.0`	Review	10	2026-05-28

Block this in CI

PkgRadar gates @segment/action-destinations (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @segment/[email protected]