PkgRadar

npm · registry.npmjs.org

@sequence0/blockclaw

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 3.12.1

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/interface/commands/telegram.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.12.1Review172026-06-14
3.12.2Review172026-06-14
3.13.0Review172026-06-14
3.19.3Review172026-06-14

Block this in CI

PkgRadar gates @sequence0/blockclaw (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @sequence0/[email protected]
Start free — 25 scans / moView full evidence