PkgRadar

npm · registry.npmjs.org

container-superposition

Remote Payload: matched "github.com/argoproj/argo-cd/releases/download"

Why PkgRadar flagged 0.1.12

SeveritySignalEvidence
mediumRemote Payloadmatched "github.com/argoproj/argo-cd/releases/download" · package/overlays/argocd/setup.sh
mediumRemote Payloadmatched "github.com/oven-sh/bun/releases/download" · package/overlays/bun/setup.sh
mediumRemote Payloadmatched "github.com/cloudflare/cloudflared/releases/download" · package/overlays/cloudflared/setup.sh
mediumRemote Payloadmatched "wget " · package/overlays/duckdb/setup.sh
mediumRemote Payloadmatched "curl\n " · package/overlays/gcloud/setup.sh
mediumRemote Payloadmatched "curl " · package/overlays/go/setup.sh
mediumRemote Payloadmatched "curl " · package/overlays/just/setup.sh
mediumRemote Payloadmatched "github.com/k3d-io/k3d/releases/download" · package/overlays/k3d/setup.sh
mediumRemote Payloadmatched "curl " · package/overlays/minio/setup.sh
mediumRemote Payloadmatched "curl " · package/overlays/modern-cli-tools/setup.sh
mediumRemote Payloadmatched "curl " · package/overlays/ngrok/setup.sh
mediumRemote Payloadmatched "curl " · package/overlays/ollama-cli/setup.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.12Review322026-06-09
0.2.0-pr.166.27185943859Review322026-06-09
0.1.12-pr.165.27121304187Review322026-06-08
0.1.12-pr.162.27005019571Review322026-06-05
0.1.12-pr.162.27000426652Review322026-06-05
0.1.12-pr.162.26975808453Review322026-06-04
0.1.12-pr.162.26908173401Review322026-06-03
0.1.12-pr.162.26890130875Review322026-06-03
0.1.12-pr.162.26893192553Review322026-06-03
0.1.12-pr.164.26878533701Review322026-06-03
0.1.12-pr.164.26880174113Review322026-06-03
0.1.12-pr.162.26869382110Review322026-06-03
0.1.3-pr.159.17Review342026-05-28
0.1.12-pr.159.26557396910Review342026-05-28
0.1.10Review352026-05-27
0.1.11Review352026-05-27

Block this in CI

PkgRadar gates container-superposition (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]