PkgRadar

npm · registry.npmjs.org

@tamagui/native-ci

Remote Payload: matched "curl "

Why PkgRadar flagged 2.2.0-1781217884154

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/deps.mjs
mediumRemote Payloadmatched "curl " · package/src/deps.ts
mediumRemote Payloadmatched "curl " · package/src/ios.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
2.2.0-1781217884154Review252026-06-11
2.2.0-1781132308330Review252026-06-10
2.2.0-1781079118220Review252026-06-10
2.2.0-1781071309197Review252026-06-10
2.2.0-1781044625560Review252026-06-09
2.2.0Review252026-06-09
2.1.0-1780964419737Review252026-06-09
2.1.0-1780670002714Review252026-06-05
2.1.0-1780645766505Review252026-06-05
2.1.0-1780546777640Review362026-06-04
2.1.0-1780536257458Review362026-06-04
2.1.0-1780520076274Review362026-06-03
2.1.0-1780426041711Review362026-06-02
2.1.0-1780288049558Review362026-06-01
2.1.0-1780182832733Review362026-05-30
2.1.0Review362026-05-30
2.0.0-1780094816896Review362026-05-29
2.0.0-1780092121346Review362026-05-29
2.0.0Review362026-05-29
2.0.0-1780064412517Review362026-05-29

Block this in CI

PkgRadar gates @tamagui/native-ci (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @tamagui/[email protected]
Start free — 25 scans / moView full evidence