PkgRadar

npm · registry.npmjs.org

@trusty-squire/mcp

Remote Payload: matched "cUrl "

Why PkgRadar flagged 0.6.15-rc.2

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/bot/google-login.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.13Low risk02026-06-11
0.9.13-rc.1Low risk02026-06-10
0.9.12Low risk02026-06-09
0.9.11Low risk02026-06-09
0.9.10Low risk02026-06-09
0.9.9Low risk02026-06-09
0.9.8Low risk02026-06-08
0.9.7Low risk02026-06-08
0.9.6Low risk02026-06-08
0.9.5Low risk02026-06-07
0.9.4Low risk02026-06-07
0.9.3Low risk02026-06-07
0.9.3-rc.2Low risk02026-06-07
0.9.3-rc.3Low risk02026-06-07
0.9.3-rc.1Low risk02026-06-06
0.9.2Low risk02026-06-06
0.9.1Low risk02026-06-05
0.9.0Low risk02026-06-05
0.8.17Low risk02026-06-05
0.8.16Low risk02026-06-03
0.8.15Low risk02026-06-03
0.8.14Low risk02026-06-02
0.8.14-rc.4Low risk02026-06-02
0.8.14-rc.5Low risk02026-06-02
0.8.14-rc.3Low risk02026-06-02
0.8.14-rc.2Low risk02026-06-02
0.8.14-rc.1Low risk02026-06-01
0.8.13Low risk02026-05-31
0.8.12Low risk02026-05-31
0.8.11Low risk02026-05-31
0.8.10Low risk02026-05-31
0.8.9Low risk02026-05-31
0.8.8Low risk02026-05-31
0.8.7Low risk02026-05-31
0.8.6Low risk02026-05-31
0.8.5Low risk02026-05-30
0.8.4Low risk02026-05-30
0.8.3Low risk02026-05-30
0.8.3-rc.7Low risk02026-05-30
0.8.3-rc.6Low risk02026-05-30
0.8.3-rc.5Low risk02026-05-30
0.8.3-rc.4Low risk02026-05-30
0.8.3-rc.3Low risk02026-05-30
0.8.3-rc.1Low risk02026-05-29
0.8.3-rc.2Low risk02026-05-29
0.8.2Low risk02026-05-28
0.8.3-rc.0Low risk02026-05-28
0.8.2-rc.1Low risk02026-05-28
0.8.2-rc.4Low risk02026-05-28
0.8.0Low risk02026-05-28
0.8.1-rc.1Low risk02026-05-28
0.7.19Low risk02026-05-28
0.7.20Low risk02026-05-28
0.6.15-rc.11Low risk02026-05-26
0.6.15-rc.10Low risk02026-05-25
0.6.15-rc.8Low risk02026-05-25
0.6.15-rc.9Low risk02026-05-25
0.6.15-rc.7Low risk02026-05-25
0.6.15-rc.5Low risk02026-05-25
0.6.15-rc.6Low risk02026-05-25
0.6.15-rc.4Low risk02026-05-25
0.6.15-rc.3Low risk02026-05-25
0.6.15-rc.2Review122026-05-25
0.6.15-rc.1Review122026-05-25
0.6.14Review122026-05-25
0.6.14-rc.35Review122026-05-25
0.6.14-rc.34Review122026-05-25
0.6.14-rc.33Review122026-05-24
0.6.14-rc.32Review122026-05-24
0.6.14-rc.31Review122026-05-24
0.6.14-rc.30Review122026-05-24
0.6.14-rc.29Review122026-05-24

Block this in CI

PkgRadar gates @trusty-squire/mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @trusty-squire/[email protected]