PkgRadar

npm · registry.npmjs.org

@wocker/rproxy-plugin

Webhook Exfil Endpoint: matched "ngrok-free.app"

Why PkgRadar flagged 1.0.15-beta.1

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/lib/providers/NgrokProvider.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.15-beta.1High risk312026-06-10
1.0.15-beta.2High risk312026-06-10

Block this in CI

PkgRadar gates @wocker/rproxy-plugin (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @wocker/[email protected]