PkgRadar

npm · registry.npmjs.org

4runr-os

Remote Payload: matched "curl "

Why PkgRadar flagged 2.10.83

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/rust-check.js
mediumRemote Payloadmatched "curl " · package/apps/gateway/create-test-script.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/debug-api-responses.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/debug-failing-tests-v2.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/debug-failing-tests.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/debug-responses.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/debug-test-responses.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/debug-tests.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/diagnose-test-failure.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/minimal-test.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/quick-debug.sh
mediumRemote Payloadmatched "curl " · package/apps/gateway/simple-test.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
2.10.83Review352026-06-12
2.10.82Review352026-06-12
2.10.81Review352026-06-12
2.10.80Review352026-06-12
2.10.79Review352026-06-12
2.10.78Review352026-06-11
2.10.77Review352026-06-10
2.10.76Review352026-06-10
2.10.75Review352026-06-09
2.10.74Review352026-06-09
2.10.73Review352026-06-09
2.10.72Review352026-06-06
2.10.71Review352026-06-06
2.10.70Review352026-06-06
2.10.69Review352026-06-06
2.10.68Review352026-06-05
2.10.67Review352026-06-05
2.10.65Review352026-06-02
2.10.66Review352026-06-02
2.10.63Review352026-06-01
2.10.62Review352026-06-01
2.10.60Review352026-06-01
2.10.61Review352026-06-01
2.10.59Review352026-05-31
2.10.58Review352026-05-30
2.10.57Review352026-05-30
2.10.56Review352026-05-30
2.10.55Review502026-05-29
2.10.54Review502026-05-29
2.10.53Review622026-05-27
2.10.52Review432026-05-25
2.10.51Review432026-05-25

Block this in CI

PkgRadar gates 4runr-os (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence