PkgRadar

npm · registry.npmjs.org

@uipath/du-validation-station-wc

Remote Payload: matched "Curl "

Why PkgRadar flagged 1.0.0-beta.1

SeveritySignalEvidence
mediumRemote Payloadmatched "Curl " · package/chunk-7HG3KS7V.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-7LF7TUYR.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-AV2XMJZK.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-DP4VB7EI.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-JA4SO6QN.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-LE344D6P.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-OCJB2TQU.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-Q3TZ5E3J.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-QSPXPEUM.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-RQKBBL3R.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/chunk-X3MDAFQV.js
mediumLarge Javascript Payload2628024 bytes · package/chunk-TYL6NO3L.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0-beta.1Review722026-05-25
1.0.0-beta.2Review722026-05-25

Block this in CI

PkgRadar gates @uipath/du-validation-station-wc (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @uipath/[email protected]