PkgRadar

npm · registry.npmjs.org

create-better-t-stack

Remote Payload: matched "curl "

Why PkgRadar flagged 3.29.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/src-DBbRu-AO.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
3.33.1Low risk02026-06-15
3.33.1-pr1075.e991845Low risk02026-06-15
3.33.0Low risk02026-06-15
3.32.0Low risk02026-06-08
3.31.1Low risk02026-06-03
3.31.0Low risk02026-06-03
3.30.3Low risk02026-05-25
3.29.0Review122026-05-24
3.30.0Review122026-05-24

Block this in CI

PkgRadar gates create-better-t-stack (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence