PkgRadar

npm · registry.npmjs.org

agenthub-multiagent-mcp

Remote Payload: matched "curl "

Why PkgRadar flagged 1.25.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/worker.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.38.2Low risk02026-06-15
1.38.1Low risk02026-06-15
1.37.2Low risk02026-06-13
1.38.0Low risk02026-06-13
1.37.1Low risk02026-06-13
1.37.0Low risk02026-06-13
1.36.0Low risk02026-06-12
1.35.0Low risk02026-06-12
1.34.0Low risk02026-06-11
1.33.3Low risk02026-06-10
1.33.2Low risk02026-06-10
1.33.1Low risk02026-06-10
1.33.0Low risk02026-06-10
1.32.0Low risk02026-06-06
1.31.0Low risk02026-06-03
1.30.0Low risk02026-06-02
1.29.0Low risk02026-06-01
1.28.0Low risk02026-06-01
1.27.0Low risk02026-05-31
1.26.2Low risk02026-05-25
1.26.1Low risk02026-05-25
1.25.0Review122026-05-24
1.26.0Review122026-05-24

Block this in CI

PkgRadar gates agenthub-multiagent-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]