PkgRadar

npm · registry.npmjs.org

@skybridge/devtools

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.0.0-dev.70cc5c5

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/assets/index-CGlTN_o7.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/assets/index-CGlTN_o7.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-dev.04e39dfLow risk02026-06-17
0.0.0-dev.3e6e085Low risk02026-06-16
0.0.0-dev.df4090cLow risk02026-06-16
0.0.0-dev.138fd4bLow risk02026-06-16
0.0.0-dev.b0d461bLow risk02026-06-16
0.0.0-dev.4c658fbLow risk02026-06-16
0.0.0-dev.0d8be11Low risk02026-06-16
0.0.0-dev.c0f821fLow risk02026-06-16
0.0.0-dev.d653b15Low risk02026-06-15
0.0.0-dev.86616b1Low risk02026-06-15
0.0.0-dev.4643934Low risk02026-06-15
0.0.0-dev.93eb6c0Low risk02026-06-15
0.0.0-dev.7d4c70eLow risk02026-06-15
0.0.0-dev.efaf459Low risk02026-06-15
0.0.0-dev.197d211Low risk02026-06-15
0.0.0-dev.646cef6Low risk02026-06-15
0.0.0-dev.35df40dLow risk02026-06-15
0.0.0-dev.f55e0ceLow risk02026-06-15
0.0.0-dev.18e0fccLow risk02026-06-12
0.0.0-dev.a89974fLow risk02026-06-12
0.0.0-dev.e87d808Low risk02026-06-12
0.0.0-dev.686dfefLow risk02026-06-11
0.0.0-dev.dd32507Low risk02026-06-11
0.0.0-dev.0480bd7Low risk02026-06-11
0.0.0-dev.c663b1cLow risk02026-06-11
0.0.0-dev.fd767e9Low risk02026-06-11
0.0.0-dev.090ec3bLow risk02026-06-11
0.0.0-dev.5eb763bLow risk02026-06-11
0.0.0-dev.bb911d0Low risk02026-06-11
0.0.0-dev.c6c2bebLow risk02026-06-11
0.0.0-dev.328446eLow risk02026-06-11
0.0.0-dev.d1019b2Low risk02026-06-11
0.0.0-dev.63042acLow risk02026-06-11
0.0.0-dev.8d95504Low risk02026-06-11
0.0.0-dev.18bbe77Low risk02026-06-11
0.0.0-dev.610bab6Low risk02026-06-11
0.0.0-dev.60adc7fLow risk02026-06-11
0.0.0-dev.2b440b5Low risk02026-06-11
0.0.0-dev.b724adeLow risk02026-06-11
0.0.0-dev.c091470Low risk02026-06-10
0.0.0-dev.08a8971Low risk02026-06-10
0.0.0-dev.e9ef82aLow risk02026-06-10
0.0.0-dev.06712e7Low risk02026-06-10
0.0.0-dev.5f4d19cLow risk02026-06-09
1.1.0Low risk02026-06-09
0.0.0-dev.0169cdbLow risk02026-06-09
0.0.0-dev.854f977Low risk02026-06-09
0.0.0-dev.767d926Low risk02026-06-09
0.0.0-dev.f2d6084Low risk02026-06-09
0.0.0-dev.2c93e1eLow risk02026-06-09
0.0.0-dev.d015d77Low risk02026-06-09
0.0.0-dev.9b039a8Low risk02026-06-09
0.0.0-dev.5838c6cLow risk02026-06-09
0.0.0-dev.e871d34Low risk02026-06-09
0.0.0-dev.84e1cceLow risk02026-06-08
0.0.0-dev.d7ec16bLow risk02026-06-08
0.0.0-dev.8279115Low risk02026-06-08
0.0.0-dev.59661a7Low risk02026-06-08
0.0.0-dev.0fe51b7Low risk02026-06-08
0.0.0-dev.becf06bLow risk02026-06-02
1.0.4Low risk02026-06-02
0.0.0-dev.3151cd9Low risk02026-06-02
0.0.0-dev.7dee734Low risk02026-06-01
0.0.0-dev.67e47cbLow risk02026-06-01
0.0.0-dev.60820d0Low risk02026-06-01
0.0.0-dev.acb34beLow risk02026-06-01
0.0.0-dev.59f7c4cLow risk02026-05-29
0.0.0-dev.76bd199Low risk02026-05-29
0.0.0-dev.f552a52Low risk02026-05-29
0.0.0-dev.021254aLow risk02026-05-28
0.0.0-dev.e12ca4aLow risk02026-05-28
0.0.0-dev.9f58376Low risk02026-05-28
0.0.0-dev.e52a26eLow risk02026-05-28
0.0.0-dev.140f306Low risk02026-05-28
0.0.0-dev.4980af3Low risk02026-05-28
0.0.0-dev.6df3f34Low risk02026-05-27
0.0.0-dev.7112e95Low risk02026-05-26
0.0.0-dev.cb51733Low risk02026-05-26
0.0.0-dev.66bb3beLow risk02026-05-25
0.0.0-dev.82e607fLow risk02026-05-25
0.0.0-dev.b35a083Low risk02026-05-25
0.0.0-dev.fef24cfLow risk02026-05-25
0.0.0-dev.69541ecLow risk02026-05-25
0.0.0-dev.f40327bLow risk02026-05-25
0.0.0-dev.11d4ec4Low risk02026-05-25
0.0.0-dev.7b15e36Low risk02026-05-25
0.0.0-dev.569278aLow risk02026-05-25
0.0.0-dev.4e6f569Low risk02026-05-25
0.0.0-dev.17fa8fdLow risk02026-05-25
0.0.0-dev.b348f85Low risk02026-05-25
0.0.0-dev.dc1bd07Low risk02026-05-25
0.0.0-dev.70cc5c5Review122026-05-24
0.0.0-dev.94e2024Review122026-05-24
0.0.0-dev.972e79bReview122026-05-24

Block this in CI

PkgRadar gates @skybridge/devtools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @skybridge/[email protected]