PkgRadar

npm · registry.npmjs.org

@wordpress/env

DNS / OAST exfiltration: matched "dns.resolve"

Why PkgRadar flagged 11.6.0

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "dns.resolve" · package/lib/wordpress.js

Scanned versions

VersionVerdictScoreScanned (UTC)
11.8.1Low risk02026-06-16
11.8.0Low risk02026-06-04
11.6.0Review92026-05-27
11.7.0Review92026-05-27

Block this in CI

PkgRadar gates @wordpress/env (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @wordpress/[email protected]
Start free — 25 scans / moView full evidence