PkgRadar

npm · registry.npmjs.org

autotel-mcp

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.1.15

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/index.cjs
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/server.cjs
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/index.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/server.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/src/modules/collector-catalog.ts
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/src/modules/semantic-conventions.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.15Review352026-06-06
28.0.3Low risk02026-06-04
29.0.1Low risk02026-06-04
0.1.13Review152026-06-02
0.1.12Review152026-06-02
0.1.10Review152026-05-29
0.1.11Review152026-05-29

Block this in CI

PkgRadar gates autotel-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]