PkgRadar

npm · registry.npmjs.org

@webhooksite/cli

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged 0.2.6

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "webhook.site" · package/commands/lib/api.js
highWebhook Exfil Endpointmatched "Webhook.site" · package/commands/help.js
highWebhook Exfil Endpointmatched "webhook.site" · package/commands/lib/listen.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.2.6High risk452026-06-15
0.2.7High risk452026-06-15
0.3.0High risk452026-06-15
0.3.1High risk452026-06-15

Block this in CI

PkgRadar gates @webhooksite/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @webhooksite/[email protected]
@webhooksite/cli — npm security scan | PkgRadar