PkgRadar

npm · registry.npmjs.org

@sly-rentals/core

Remote Payload: matched "cUrl "

Why PkgRadar flagged 1.2.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/cjs/audit/audit.js
mediumRemote Payloadmatched "cUrl " · package/dist/esm/audit/audit.js
mediumRemote Payloadmatched "cUrl " · package/dist/cjs/accounts/borrower.js
mediumRemote Payloadmatched "cUrl " · package/dist/esm/accounts/borrower.js
mediumRemote Payloadmatched "cUrl " · package/dist/cjs/accounts/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/cjs/utils/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/esm/accounts/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/esm/utils/config.js
mediumRemote Payloadmatched "cUrl " · package/dist/cjs/accounts/contract.js
mediumRemote Payloadmatched "cUrl " · package/dist/esm/accounts/contract.js
mediumRemote Payloadmatched "cUrl " · package/dist/cjs/utils/contractSnapshot.js
mediumRemote Payloadmatched "cUrl " · package/dist/esm/utils/contractSnapshot.js

Scanned versions

VersionVerdictScoreScanned (UTC)
5.0.0Low risk02026-06-04
3.0.0Low risk02026-05-28
4.0.0Low risk02026-05-28
1.2.0Review502026-05-24
2.0.0Review502026-05-24

Block this in CI

PkgRadar gates @sly-rentals/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @sly-rentals/[email protected]