PkgRadar

npm · registry.npmjs.org

ccjk

Remote Payload: matched "curl "

Why PkgRadar flagged 16.0.6

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/chunks/simple-config.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
16.0.6Review122026-06-09
16.0.7Review122026-06-09
16.0.5Review82026-06-07
16.0.4Review82026-06-07
16.0.3Review82026-06-07
16.0.2Review122026-06-06
16.0.1Review122026-06-06
16.0.0-alpha.3Review82026-06-06
15.31.1Low risk02026-06-06
15.30.0Low risk02026-06-01
15.29.0Low risk02026-06-01
15.28.3Low risk02026-05-29
15.28.2Low risk02026-05-28
15.28.0Low risk02026-05-28
15.28.1Low risk02026-05-28
15.27.6Review702026-05-26
15.27.5Review702026-05-25
15.27.3Review1002026-05-25
15.27.4Review1002026-05-25
15.27.2Review1222026-05-25
15.27.1Review1222026-05-25
15.27.0Review722026-05-25
15.26.0Review1242026-05-25
15.25.0Review1242026-05-25
15.24.0Review1122026-05-25
15.21.0Review362026-05-25
15.23.0Review1122026-05-25

Block this in CI

PkgRadar gates ccjk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence