PkgRadar

npm · registry.npmjs.org

baldart

Remote Payload: matched "curl "

Why PkgRadar flagged 3.25.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/framework/.claude/skills/kie-ai/scripts/kie_api.sh
mediumRemote Payloadmatched "curl " · package/framework/.claude/skills/kie-ai/scripts/setup_api_key.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
4.51.0Low risk02026-06-17
4.50.0Low risk02026-06-17
4.49.1Low risk02026-06-17
4.49.0Low risk02026-06-17
4.46.0Low risk02026-06-17
4.48.0Low risk02026-06-17
4.47.0Low risk02026-06-17
4.45.0Low risk02026-06-15
4.43.1Low risk02026-06-15
4.41.0Low risk02026-06-15
4.43.0Low risk02026-06-15
4.42.0Low risk02026-06-15
4.40.0Low risk02026-06-15
4.39.0Low risk02026-06-15
4.38.0Low risk02026-06-15
4.37.0Low risk02026-06-15
4.36.0Low risk02026-06-13
4.34.2Low risk02026-06-13
4.35.0Low risk02026-06-13
4.34.1Low risk02026-06-12
4.34.0Low risk02026-06-12
4.33.2Low risk02026-06-12
4.33.1Low risk02026-06-12
4.33.0Low risk02026-06-12
4.32.0Low risk02026-06-12
4.31.1Low risk02026-06-11
4.31.0Low risk02026-06-11
4.30.1Low risk02026-06-11
4.30.0Low risk02026-06-11
4.29.1Low risk02026-06-11
4.29.0Low risk02026-06-11
4.28.1Low risk02026-06-11
4.28.0Low risk02026-06-11
4.27.2Low risk02026-06-11
4.27.1Low risk02026-06-11
4.27.0Low risk02026-06-11
4.26.1Low risk02026-06-11
4.26.0Low risk02026-06-11
4.25.0Low risk02026-06-11
4.24.2Low risk02026-06-10
4.24.3Low risk02026-06-10
4.24.1Low risk02026-06-10
4.24.0Low risk02026-06-10
4.23.0Low risk02026-06-09
4.22.1Low risk02026-06-09
4.22.0Low risk02026-06-09
4.21.1Low risk02026-06-09
4.21.0Low risk02026-06-09
4.19.0Low risk02026-06-08
4.18.0Low risk02026-06-08
4.17.2Low risk02026-06-08
4.17.1Low risk02026-06-08
4.17.0Low risk02026-06-07
4.16.2Low risk02026-06-06
4.16.1Low risk02026-06-05
4.16.0Low risk02026-06-05
4.15.0Low risk02026-06-04
4.14.1Low risk02026-06-04
4.13.0Low risk02026-06-04
4.14.0Low risk02026-06-04
4.12.0Low risk02026-06-04
4.11.0Low risk02026-06-04
4.10.0Low risk02026-06-04
4.8.0Low risk02026-06-03
4.9.0Low risk02026-06-03
4.7.0Low risk02026-06-03
4.5.0Low risk02026-06-03
4.6.0Low risk02026-06-03
4.2.2Low risk02026-06-03
4.3.0Low risk02026-06-03
4.2.0Low risk02026-06-03
4.1.1Low risk02026-06-02
4.1.0Low risk02026-06-02
4.0.4Low risk02026-06-02
4.0.3Low risk02026-06-02
4.0.2Low risk02026-06-02
4.0.1Low risk02026-06-02
4.0.0Low risk02026-06-01
3.41.0Low risk02026-06-01
3.39.0Low risk02026-06-01
3.40.0Low risk02026-06-01
3.38.0Low risk02026-06-01
3.37.0Low risk02026-05-30
3.36.0Low risk02026-05-30
3.35.2Low risk02026-05-30
3.35.1Low risk02026-05-30
3.35.0Low risk02026-05-30
3.34.0Low risk02026-05-30
3.33.1Low risk02026-05-30
3.33.0Low risk02026-05-30
3.32.0Low risk02026-05-30
3.31.0Low risk02026-05-30
3.30.0Low risk02026-05-29
3.29.0Low risk02026-05-29
3.28.3Low risk02026-05-28
3.28.2Low risk02026-05-28
3.28.0Low risk02026-05-28
3.28.1Low risk02026-05-28
3.25.0Review242026-05-27
3.26.0Review162026-05-27
3.21.1Review162026-05-26
3.21.2Review162026-05-26
3.18.1Review242026-05-25
3.18.0Review242026-05-25
3.17.1Review242026-05-25

Block this in CI

PkgRadar gates baldart (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence