PkgRadar

npm · registry.npmjs.org

@tunnelhub/cli

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 2.3.0

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/auth/browser-auth.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/lib/inquirer.js
mediumLarge Javascript Payload2146318 bytes · package/dist/index.js
mediumLarge Javascript Payload2095849 bytes · package/dist/commands/listAutomations.js
mediumLarge Javascript Payload2095681 bytes · package/dist/commands/listEnvironments.js
mediumLarge Javascript Payload2095788 bytes · package/dist/commands/listPackages.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.4.0Low risk02026-05-29
2.3.0Review192026-05-27
2.3.1Review192026-05-27

Block this in CI

PkgRadar gates @tunnelhub/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @tunnelhub/[email protected]
Start free — 25 scans / moView full evidence