npm · registry.npmjs.org
@stakekit/widget
Webhook Exfil Endpoint: matched "ngrok-free.app"
Why PkgRadar flagged 0.0.278
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "ngrok-free.app" · package/dist/bundle/tron-connector-C5KUqegL.js |
| high | Webhook Exfil Endpoint | matched "ngrok-free.app" · package/dist/website/assets/tron-connector-DEk19bH5.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.0.278 | High risk | 15 | 2026-06-16 |
0.0.277 | High risk | 15 | 2026-06-11 |
0.0.276 | High risk | 15 | 2026-06-10 |
0.0.274 | Review | 15 | 2026-06-09 |
0.0.275 | Review | 15 | 2026-06-09 |
0.0.273 | Review | 15 | 2026-06-08 |
0.0.272 | Review | 15 | 2026-06-04 |
0.0.270 | Low risk | 0 | 2026-06-03 |
0.0.271 | Review | 15 | 2026-06-03 |
Block this in CI
pkgradar gate --ecosystem npm @stakekit/[email protected]