PkgRadar

npm · registry.npmjs.org

@willbooster/wb

Remote Payload: matched "curl "

Why PkgRadar flagged 13.22.13

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/docker/bash/cleanup.sh
mediumRemote Payloadmatched "curl " · package/docker/bash/install-litestream.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
13.22.13Review72026-06-12
13.22.12Review72026-06-11
13.22.11Review72026-06-08
13.22.10Review72026-06-07
13.22.9Review72026-06-07
13.22.8Review72026-06-07
13.22.7Review72026-06-04
13.22.6Review72026-06-04
13.22.5Review72026-06-04
13.22.4Review72026-06-03
13.22.3Review72026-06-03
13.22.2Review72026-06-03
13.22.1Review72026-06-03
13.22.0Review72026-06-03
13.21.4Review72026-06-03
13.21.3Review72026-06-03
13.21.2Review72026-06-02
13.21.1Review72026-06-02
13.21.0Review72026-06-01
13.20.2Review72026-06-01
13.20.3Review72026-06-01
13.20.0Review72026-05-28
13.19.8Review72026-05-28
13.19.6Review72026-05-27
13.19.7Review72026-05-27
13.19.5Review72026-05-27
13.19.4Review242026-05-24
13.19.3Review242026-05-24

Block this in CI

PkgRadar gates @willbooster/wb (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @willbooster/[email protected]
Start free — 25 scans / moView full evidence