PkgRadar

npm · registry.npmjs.org

@wix/patterns-fields-utils

Remote Payload: matched "cURL "

Why PkgRadar flagged 1.16.0

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · package/@wix/patterns-fields-bundled-cm-media-utils/dist/cjs/index.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/@wix/patterns-fields-bundled-cm-media-utils/dist/cjs/index.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/@wix/patterns-fields-bundled-organize-media/dist/esm/html2canvas.esm-26SHFSHQ.mjs
mediumRemote Payloadmatched "cURL " · package/@wix/patterns-fields-bundled-cm-media-utils/dist/esm/index.mjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/@wix/patterns-fields-bundled-cm-media-utils/dist/esm/index.mjs
mediumRemote Payloadmatched "cUrl\n " · package/@wix/patterns-fields-bundled-organize-media/dist/esm/index.mjs
mediumLarge Javascript Payload2933252 bytes · package/@wix/patterns-fields-bundled-organize-media/dist/cjs/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.27.0Low risk02026-06-17
1.26.0Low risk02026-06-17
1.25.0Low risk02026-06-15
1.24.0Low risk02026-06-11
1.23.0Low risk02026-06-10
1.22.0Low risk02026-06-10
1.21.0Low risk02026-06-08
1.20.0Low risk02026-06-04
1.19.0Low risk02026-06-01
1.18.0Low risk02026-05-31
1.16.0Review462026-05-24
1.17.0Review462026-05-24

Block this in CI

PkgRadar gates @wix/patterns-fields-utils (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @wix/[email protected]