PkgRadar

npm · registry.npmjs.org

@wundr.io/environment

Remote Payload: matched "curl "

Why PkgRadar flagged 1.0.39

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/src/installers/cache-manager.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.39Review82026-06-12
1.0.38Review82026-06-04
1.0.37Review82026-06-04
1.0.36Review82026-06-03
1.0.35Review82026-06-03
1.0.33Review82026-06-03
1.0.34Review82026-06-03
1.0.31Review82026-06-03
1.0.30Review82026-06-03
1.0.29Review82026-06-02
1.0.27Review82026-06-01
1.0.28Review82026-06-01
1.0.25Review82026-06-01
1.0.26Review82026-06-01
1.0.23Review82026-06-01
1.0.21Review82026-06-01
1.0.22Review82026-06-01
1.0.19Review82026-06-01
1.0.18Review82026-05-31
1.0.17Review122026-05-31
1.0.16Review122026-05-31
1.0.15Review122026-05-31
1.0.14Review122026-05-31
1.0.12Review122026-05-31
1.0.2-dev.20260530182802.ae187324Review122026-05-30
1.0.2-dev.20260530180455.e1307186Review122026-05-30
1.0.6Review122026-05-30
1.0.2-dev.20260530174250.ef0ec927Review122026-05-30

Block this in CI

PkgRadar gates @wundr.io/environment (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @wundr.io/[email protected]
Start free — 25 scans / moView full evidence