PkgRadar

npm · registry.npmjs.org

@vellumai/assistant

Remote Payload: matched "github.com/oven-sh/bun/releases/download"

Why PkgRadar flagged 0.8.12-dev.202606131736.b0e5ff7

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/oven-sh/bun/releases/download" · package/src/util/bun-runtime.ts
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/daemon/handlers/config-telegram.ts
mediumRemote Payloadmatched "api.telegram.org/bot" · package/src/runtime/channel-invite-transports/telegram.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.12-dev.202606131736.b0e5ff7Review232026-06-13
0.8.12-dev.202606131638.b0e5ff7Review462026-06-13
0.8.12-dev.202606131539.b0e5ff7Review462026-06-13
0.8.12-dev.202606131450.c6f2ffdReview232026-06-13
0.8.12-dev.202606131340.9c0531aReview232026-06-13
0.8.12-dev.202606131247.4d64b75Review232026-06-13
0.8.12-dev.202606131142.4d64b75Review232026-06-13
0.8.12-dev.202606131055.4d64b75Review232026-06-13
0.8.12-dev.202606130914.4d64b75Review232026-06-13
0.8.12-dev.202606130730.4d64b75Review232026-06-13
0.8.12-dev.202606130540.3758c47Review232026-06-13
0.8.12-dev.202606130114.203bb30Review232026-06-13
0.8.12-dev.202606130318.6b9805dReview232026-06-13
0.8.12Review232026-06-12
0.8.12-dev.202606122337.5897832Review232026-06-12
0.8.12-dev.202606122239.169d5e4Review232026-06-12
0.8.12-staging.2Review232026-06-12
0.8.11-dev.202606122104.e5b9dd5Review232026-06-12
0.8.11-dev.202606122052.009469eReview462026-06-12
0.8.11-dev.202606122025.f06346fReview462026-06-12
0.8.11-dev.202606121945.5dce801Review462026-06-12
0.8.11-dev.202606121851.26d5122Review232026-06-12
0.8.11-dev.202606121625.5541181Review232026-06-12
0.8.11-dev.202606121512.871577Review462026-06-12
0.8.11-dev.202606121500.871577Review462026-06-12
0.8.11-dev.202606121323.6ac9407Review232026-06-12
0.8.12-staging.1Review462026-06-12
0.8.11-dev.202606121124.ef8e25aReview232026-06-12
0.8.11-dev.202606120935.ef8e25aReview462026-06-12
0.8.11-dev.202606120751.ef8e25aReview462026-06-12
0.8.11-dev.202606120544.842c4c6Review462026-06-12
0.8.11-dev.202606120321.552e02eReview462026-06-12
0.8.11-dev.202606120116.b9ee95bReview462026-06-12
0.8.11-dev.202606120012.5656fc7Review462026-06-12
0.8.11-dev.202606112338.1c15e19Review462026-06-11
0.8.11-dev.202606112241.9ae2fdcReview462026-06-11
0.8.11-dev.202606112057.e4bc22eReview462026-06-11
0.8.11-dev.202606112147.04177acReview462026-06-11
0.8.11Review462026-06-11
0.8.10-dev.202606111910.ead7030Review462026-06-11
0.8.10-dev.202606111724.d4e5462Review462026-06-11
0.8.10-dev.202606111519.39ad418Review462026-06-11
0.8.11-staging.1Review462026-06-11
0.8.10-dev.202606111334.d8a7740Review462026-06-11
0.8.10-dev.202606111255.73ec993Review462026-06-11
0.8.10-dev.202606111245.be4218bReview462026-06-11
0.8.10-dev.202606111140.6a5e88cReview462026-06-11
0.8.10-dev.202606110941.6cb149dReview462026-06-11
0.8.10-dev.202606110755.6cb149dReview462026-06-11
0.8.10-dev.202606110544.2aed335Review462026-06-11
0.8.10-dev.202606110422.8c0e9aaReview462026-06-11
0.8.10-dev.202606110317.792ac3cReview462026-06-11
0.8.10-dev.202606110240.ef9212eReview462026-06-11
0.8.10-dev.202606110112.319a8d3Review462026-06-11
0.8.10-dev.202606110059.319a8d3Review462026-06-11
0.8.10-dev.202606102342.319a8d3Review462026-06-11
0.8.10-dev.202606102253.fbea648Review462026-06-10
0.8.10-dev.202606102225.a3947deReview462026-06-10
0.8.10-dev.202606102242.5285563Review462026-06-10
0.8.10-dev.202606102147.02afd31Review462026-06-10
0.8.10-dev.202606101903.31e26e6Review462026-06-10
0.8.10-dev.202606102100.3beeffcReview462026-06-10
0.8.10-dev.202606101714.d4b22deReview462026-06-10
0.8.10-dev.202606101514.1c52cedReview462026-06-10
0.8.10-dev.202606101436.d73da44Review462026-06-10
0.8.10-dev.202606101122.0de2affReview462026-06-10
0.8.10-dev.202606101324.2fc90b3Review462026-06-10
0.8.10-dev.202606100925.28c1cfbReview462026-06-10
0.8.10-dev.202606100540.99a7fabReview462026-06-10
0.8.10-dev.202606100742.99a7fabReview462026-06-10
0.8.10-dev.202606100317.c8b43c8Review462026-06-10
0.8.10-dev.202606100110.1d2c8c4Review462026-06-10
0.8.10-dev.202606092334.09948c8Review462026-06-09
0.8.10-dev.202606092238.d04fd59Review462026-06-09
0.8.10Review462026-06-09
0.8.9-dev.202606092139.1f3b646Review462026-06-09
0.8.9-dev.202606092047.e63da55Review462026-06-09
0.8.10-staging.1Review462026-06-09
0.8.9-dev.202606091946.122706eReview462026-06-09
0.8.9-dev.202606091926.ebb2d62Review462026-06-09
0.8.9-dev.202606091853.fbaa2aeReview462026-06-09
0.8.9Review462026-06-09
0.8.8-dev.202606091702.2771079Review462026-06-09
0.8.9-staging.5Review462026-06-09
0.8.8-dev.202606091516.3c27bebReview462026-06-09
0.8.8-dev.202606091311.113d87fReview462026-06-09
0.8.9-staging.4Review462026-06-09
0.8.8-dev.202606090339.ad6ec5aReview462026-06-09
0.8.8-dev.202606090318.74794feReview462026-06-09
0.8.8-dev.202606090227.d9f1d29Review462026-06-09
0.8.8-dev.202606090218.6bcb462Review462026-06-09
0.8.8-dev.202606090104.b75d235Review462026-06-09
0.8.8-dev.202606082331.c911d0cReview462026-06-08
0.8.8-dev.202606082236.8dbacc9Review462026-06-08
0.8.9-staging.3Review462026-06-08
0.8.8-dev.202606082140.a5125feReview462026-06-08
0.8.8-dev.202606082058.447e3b6Review462026-06-08
0.8.8-dev.202606081950.5bd40e7Review462026-06-08
0.8.8-dev.202606081859.f7bdc00Review462026-06-08
0.8.8-dev.202606081714.5590368Review462026-06-08
0.8.9-staging.2Review462026-06-08
0.8.8-dev.202606081515.c77a9b6Review462026-06-08
0.8.8-dev.202606081339.938c6ecReview462026-06-08
0.8.9-staging.1Review462026-06-08
0.8.8-dev.202606081143.f600053Review462026-06-08
0.8.8-dev.202606080544.8b7fbffReview462026-06-08
0.8.8-dev.202606080320.8b7fbffReview462026-06-08
0.8.8-dev.202606080112.5f6d567Review462026-06-08
0.8.8-dev.202606080009.0babb76Review462026-06-08
0.8.8-dev.202606072328.6710d73Review462026-06-08
0.8.8-dev.202606072131.4817a81Review462026-06-07
0.8.8-dev.202606072033.0e97ff6Review462026-06-07
0.8.8-dev.202606071935.547b6d2Review462026-06-07
0.8.8-dev.202606071835.08695c1Review462026-06-07
0.8.8-dev.202606071734.db66b83Review462026-06-07
0.8.8-dev.202606071535.f449fc1Review462026-06-07
0.8.8-dev.202606071441.cfe7f13Review462026-06-07
0.8.8-dev.202606071338.2b9914eReview462026-06-07
0.8.8-dev.202606071242.4ca7f3bReview462026-06-07
0.8.8-dev.202606071138.c258385Review462026-06-07
0.8.8-dev.202606071051.c258385Review462026-06-07
0.8.8-dev.202606070049.ca91213Review462026-06-07
0.8.8-dev.202606062031.571ee14Review462026-06-06
0.8.8-dev.202606062128.ca91213Review462026-06-06
0.8.8-dev.202606061935.99a472fReview462026-06-06
0.8.8-dev.202606061835.dc283b1Review462026-06-06
0.8.8-dev.202606061731.f1025b0Review462026-06-06
0.8.8-dev.202606061714.60a1761Review462026-06-06
0.8.8-dev.202606061701.9ee494cReview462026-06-06
0.8.8-dev.202606061631.10cd5feReview462026-06-06
0.8.8-dev.202606061533.1a66375Review462026-06-06
0.8.8-dev.202606061135.a446a08Review462026-06-06
0.8.8-dev.202606061043.373bc8fReview462026-06-06
0.8.8-dev.202606060901.61e1660Review462026-06-06
0.8.8-dev.202606052332.17fc8eaReview462026-06-06
0.8.8-dev.202606060043.60454adReview462026-06-06
0.8.8Review462026-06-05
0.8.7-dev.202606052232.2ddc989Review462026-06-05
0.8.7-dev.202606052220.6efc86dReview462026-06-05
0.8.7-dev.202606052135.3e62c5aReview462026-06-05
0.8.7-dev.202606052118.34cd356Review462026-06-05
0.8.7Review462026-06-03
0.8.6Review462026-05-29
0.8.4Review222026-05-27
0.8.5Review222026-05-27

Block this in CI

PkgRadar gates @vellumai/assistant (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vellumai/[email protected]
Start free — 25 scans / moView full evidence