PkgRadar

npm · registry.npmjs.org

codexuse-cli

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 5.1.5

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
5.1.5Review122026-06-17
5.1.1Review82026-06-16
5.1.0Review82026-06-15
5.0.9Review122026-06-14
5.0.8Review122026-06-14
5.0.7Review122026-06-14
5.0.6Review122026-06-14
5.0.5Review122026-06-13
5.0.2Review122026-06-13
5.0.1Review122026-06-12
5.0.0Review122026-06-12
4.0.0Review122026-06-02
3.9.9Review222026-05-27
3.9.7Review222026-05-26
3.9.8Review222026-05-26

Block this in CI

PkgRadar gates codexuse-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]