PkgRadar

npm · registry.npmjs.org

chain-insights

Remote Payload: matched "curl\n"

Why PkgRadar flagged 0.2.21

SeveritySignalEvidence
mediumRemote Payloadmatched "curl\n" · package/skills/test-chain-insights-graphrag-mcp/scripts/run-uat.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.19Low risk02026-06-09
0.3.18Low risk02026-06-09
0.3.11Low risk02026-06-02
0.3.9Low risk02026-06-02
0.3.7Low risk02026-05-31
0.3.6Low risk02026-05-31
0.3.5Low risk02026-05-30
0.3.4Low risk02026-05-30
0.3.3Low risk02026-05-30
0.2.32Low risk02026-05-29
0.2.31Low risk02026-05-29
0.2.30Low risk02026-05-29
0.2.29Low risk02026-05-29
0.2.28Low risk02026-05-29
0.2.27Low risk02026-05-29
0.2.26Low risk02026-05-29
0.2.25Low risk02026-05-29
0.2.24Low risk02026-05-29
0.2.21Review122026-05-28
0.2.20Review122026-05-27
0.2.18Review122026-05-26
0.2.16Review122026-05-25
0.2.17Review122026-05-25

Block this in CI

PkgRadar gates chain-insights (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence