PkgRadar

npm · registry.npmjs.org

@synity/bitrix-skills

Remote Payload: matched "curl "

Why PkgRadar flagged 1.15.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/src/features/bx-task/assets/lib/bx-api.sh
mediumRemote Payloadmatched "curl " · package/src/features/bx-task/assets/lib/bx-tasks.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
1.15.1Review242026-06-01
1.15.0Review352026-05-27
1.13.0Review502026-05-27
1.14.0Review352026-05-27
1.12.3Review352026-05-26
1.12.2Review352026-05-26
1.12.1Review352026-05-26
1.11.0Review352026-05-25
1.10.2Review352026-05-25
1.10.0Review502026-05-24
1.10.1Review502026-05-24

Block this in CI

PkgRadar gates @synity/bitrix-skills (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @synity/[email protected]