PkgRadar

npm · registry.npmjs.org

create-byan-agent

Remote Payload: matched "curl "

Why PkgRadar flagged 2.25.0

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/install/lib/stt/engine.js
mediumRemote Payloadmatched "curl " · package/install/lib/stt/parakeet-backend.js
mediumRemote Payloadmatched "curl " · package/install/lib/stt/whisper-backend.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.25.0Review362026-06-09
2.23.0Review252026-06-09
2.22.0Review252026-06-09
2.21.0Review252026-06-08
2.20.1Review362026-06-04
2.20.0Review252026-06-04
2.19.2Review362026-06-02
2.19.1Review362026-06-02
2.19.0Review362026-06-01
2.17.0Review362026-05-30
2.17.1Review362026-05-30
2.18.0Review492026-05-27

Block this in CI

PkgRadar gates create-byan-agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence