PkgRadar

npm · registry.npmjs.org

@urateam/cli

Remote Payload: matched "curl "

Why PkgRadar flagged 0.1.66

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/__tests__/bootstrap.unit.test.js
mediumRemote Payloadmatched "cUrl " · package/dist/commands/start.js
mediumRemote Payloadmatched "cUrl " · package/dist/lib/tunnel.js
mediumRemote Payloadmatched "cUrl " · package/dist/__tests__/tunnel.test.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.79Low risk02026-05-29
0.1.77Low risk02026-05-29
0.1.78Low risk02026-05-29
0.1.75Low risk02026-05-29
0.1.76Low risk02026-05-29
0.1.73Low risk02026-05-28
0.1.74Low risk02026-05-28
0.1.72Low risk02026-05-27
0.1.71Low risk02026-05-26
0.1.70Low risk02026-05-26
0.1.69Low risk02026-05-26
0.1.68Low risk02026-05-25
0.1.67Low risk02026-05-25
0.1.66Review242026-05-25
0.1.65Review242026-05-25
0.1.64Review242026-05-25
0.1.61Review242026-05-24
0.1.62Review242026-05-24

Block this in CI

PkgRadar gates @urateam/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @urateam/[email protected]