PkgRadar

npm · registry.npmjs.org

agent-relay-runner

Remote Payload: matched "curl "

Why PkgRadar flagged 0.67.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/plugins/claude/hooks/permission-request.sh
mediumRemote Payloadmatched "curl " · package/plugins/claude/hooks/relay-status.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.67.0Review162026-06-18
0.66.0Review162026-06-17
0.65.2Review162026-06-17
0.65.1Review242026-06-17
0.65.0Review162026-06-17
0.64.1Review162026-06-17
0.64.0Review162026-06-17
0.63.2Review162026-06-17
0.63.1Review162026-06-17
0.63.0Review162026-06-17
0.62.3Review162026-06-16
0.62.2Review162026-06-16
0.62.1Review162026-06-16
0.62.0Review162026-06-16
0.61.1Review162026-06-16
0.61.2Review162026-06-16
0.61.0Review242026-06-16
0.60.1Review162026-06-15
0.60.0Review162026-06-15
0.59.0Review162026-06-15
0.58.0Review242026-06-15
0.57.2Review162026-06-15
0.57.1Review162026-06-15
0.57.0Review162026-06-15
0.56.2Review162026-06-14
0.56.1Review162026-06-14
0.56.0Review162026-06-14
0.55.0Review162026-06-14
0.54.0Review162026-06-14
0.53.0Review162026-06-14
0.52.0Review162026-06-14
0.51.0Review162026-06-14
0.50.0Review162026-06-14
0.49.0Review162026-06-14
0.48.0Review162026-06-14
0.47.0Review162026-06-14
0.46.0Review162026-06-14
0.45.0Review162026-06-14
0.44.0Review162026-06-14
0.43.0Review162026-06-14
0.41.0Review162026-06-14
0.42.0Review162026-06-14
0.40.0Review162026-06-13
0.38.0Review162026-06-13
0.39.0Review162026-06-13
0.37.0Review162026-06-12
0.36.2Review162026-06-12
0.36.1Review162026-06-12
0.35.4Review162026-06-12
0.36.0Review162026-06-12
0.35.3Review242026-06-12
0.35.2Review162026-06-12
0.35.1Review162026-06-12
0.35.0Review242026-06-12
0.34.1Review242026-06-11
0.34.0Review242026-06-11
0.33.1Review162026-06-11
0.33.0Review162026-06-11
0.32.3Review242026-06-11
0.32.4Review242026-06-11
0.32.2Review242026-06-10
0.32.1Review242026-06-10
0.31.1Review162026-06-10
0.31.0Review162026-06-10
0.30.1Review242026-06-10
0.30.0Review242026-06-10
0.29.0Review242026-06-10
0.28.0Review242026-06-10
0.27.2Review162026-06-10
0.27.1Review162026-06-10
0.27.0Review162026-06-09
0.26.0Review162026-06-09
0.25.0Review162026-06-09
0.24.0Review242026-06-09
0.23.0Review162026-06-09
0.22.0Review162026-06-09
0.21.0Review242026-06-08
0.20.0Review242026-06-08
0.19.2Review242026-06-08
0.19.3Review242026-06-08
0.19.1Review162026-06-07
0.19.0Review162026-06-07
0.18.0Review162026-06-06
0.17.0Review162026-06-06
0.16.0Review162026-06-06
0.15.1Review162026-06-05
0.15.0Review242026-06-05
0.14.0Review242026-06-05
0.12.4Review162026-06-05
0.13.0Review162026-06-05
0.12.3Review242026-06-04
0.12.1Review242026-06-04
0.12.2Review162026-06-04
0.11.8Review162026-06-04
0.11.6Review242026-06-03
0.11.5Review242026-06-03
0.11.4Review242026-06-03
0.11.3Review242026-06-02
0.11.2Review242026-06-02
0.11.1Review242026-06-02
0.10.26Review242026-06-01
0.10.25Review242026-06-01
0.10.23Review242026-06-01
0.10.24Review242026-06-01
0.10.21Review242026-05-31
0.10.20Review242026-05-30
0.10.19Review362026-05-30

Block this in CI

PkgRadar gates agent-relay-runner (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence