npm · registry.npmjs.org

bingocode

Js Hidden Powershell, Shell Credential File Read, Remote Payload +3 more

Why PkgRadar flagged 1.1.201

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.1.201`	High risk	119	2026-07-23
`1.1.200-beta.21`	High risk	119	2026-07-23
`1.1.200-beta.20`	High risk	119	2026-07-23
`1.1.200-beta.19`	High risk	83	2026-07-10
`1.1.200`	High risk	83	2026-07-10
`1.1.200-beta.18`	High risk	83	2026-07-10
`1.1.200-beta.17`	High risk	83	2026-07-09
`1.1.200-beta.16`	High risk	83	2026-07-08
`1.1.200-beta.15`	High risk	119	2026-07-08
`1.1.200-beta.14`	High risk	83	2026-07-08
`1.1.200-beta.13`	High risk	83	2026-07-08
`1.1.200-beta.12`	High risk	83	2026-07-07
`1.1.200-beta.10`	High risk	83	2026-07-07
`1.1.200-beta.11`	High risk	83	2026-07-07

Block this in CI

PkgRadar gates bingocode (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]