PkgRadar

npm · registry.npmjs.org

@vigil-guard/vge-cc-guard

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged 0.9.0-beta.11

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "webhook.site" · package/dist/daemon/url-access-baseline.js
highDNS / OAST exfiltrationmatched "oast.pro" · package/dist/daemon/url-access-baseline.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.0-beta.11Review222026-06-08
0.9.0-beta.10Review222026-06-07
0.9.0-beta.9Review222026-06-03
0.9.0-beta.8Review222026-06-03
0.9.0-beta.6Review222026-05-29
0.9.0-beta.7Review222026-05-29

Block this in CI

PkgRadar gates @vigil-guard/vge-cc-guard (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @vigil-guard/[email protected]