PkgRadar

npm · registry.npmjs.org

@testomatio/reporter

Remote Payload: matched "cUrl "

Why PkgRadar flagged 2.8.4

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/lib/pipe/testomatio.js
mediumRemote Payloadmatched "cUrl " · package/src/pipe/testomatio.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.9.1-beta.3-allure-stepsLow risk02026-06-12
2.9.1-beta.2-allure-tms-linkLow risk02026-06-12
2.1.3-beta.3-multi-linksLow risk02026-06-12
0.7.0-beta.5Low risk02026-06-12
2.1.3-beta.2-multi-linksLow risk02026-06-12
2.9.1-beta.1-allure-chunkingLow risk02026-06-12
2.9.0Low risk02026-06-09
2.8.6-beta-fix-xml-batchLow risk02026-06-09
2.8.5Low risk02026-06-08
2.8.5-beta.2-yarnLow risk02026-06-04
2.8.5-beta.1-remoteLow risk02026-05-29
2.8.4Review242026-05-24
2.8.2Review242026-05-24
2.8.3Review242026-05-24

Block this in CI

PkgRadar gates @testomatio/reporter (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @testomatio/[email protected]
Start free — 25 scans / moView full evidence