PkgRadar

npm · registry.npmjs.org

api-switch-cc

Remote Payload: matched "curl "

Why PkgRadar flagged 0.3.1

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/api-switch.js
mediumRemote Payloadmatched "curl " · package/install.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.1Review242026-06-06
0.3.0Review242026-06-06
0.2.8Review172026-06-06
0.2.7Review172026-06-06
0.2.6Review172026-06-06
0.2.5Review172026-06-06
0.2.4Review172026-06-06
0.2.3Review172026-06-06
0.2.2Review172026-06-06

Block this in CI

PkgRadar gates api-switch-cc (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]