PkgRadar

npm · registry.npmjs.org

create-solvapay

Remote Payload: matched "cUrl "

Why PkgRadar flagged 0.2.0-preview-292e2c00e870776ac6a4403daffea76f09dd81c7

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/templates/mcp/_base/scripts/deploy.mjs
mediumRemote Payloadmatched "curl " · package/scripts/mcp/describe.mjs
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/scripts/refresh-smoke-fixtures.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.5.0Low risk02026-06-15
0.5.0-preview-c460354467f786aab1cdc61dd2442f26149480cbLow risk02026-06-15
0.5.0-preview-4fc78fc1b86faff0348e15fb04bb3daa798eaf03Low risk02026-06-15
0.5.0-preview-cb95fd6d97691e28a3d1dff8b5ca730c59404291Low risk02026-06-15
0.5.0-preview-e89fa52f99b6d0c7bf9834fcf2d1403141051fa0Low risk02026-06-15
0.4.0-preview-7eafe2a4dd42ee31d9078c831f255f7e15161720Low risk02026-06-12
0.5.0-preview-cb8ad16e16ce8f8f357bd7f2e7068d85159df587Low risk02026-06-12
0.4.0-preview-10f8c204965c33e986599654a94f00106c2acc0aLow risk02026-06-11
0.4.0-preview-ac57987bda4172849f0abbb783cdc90911d57541Low risk02026-06-10
0.4.0-preview-c383d67582a64e9615230e718d2c1f981efa2ec7Low risk02026-06-10
0.4.0-preview-11b3dbaad91ebe943310ab34750f6b20261e2693Low risk02026-06-09
0.4.0Low risk02026-06-09
0.4.0-preview-f6162c4188c57645efcc0e9d8f11b833fba7aef8Low risk02026-06-09
0.3.0-preview-53219e45ff42926e40b456b0b477f433a35d18f6Low risk02026-06-09
0.3.0-preview-77bd0c6e9967ccdfa709a13a4ce7906ad69156b2Low risk02026-06-05
0.3.0-preview-626176e5e5370811093b71c6e9b658cd82af808eLow risk02026-06-05
0.3.0-preview-78224bc23d6ee79ce5f2685a9a42c1b8fe089b79Low risk02026-06-03
0.3.0Low risk02026-06-03
0.3.0-preview-ea94122629cb2b81800c504344430fdc57c8dce1Low risk02026-06-03
0.3.0-preview-4fa7e66f1394d1a14497f9a3e053f2f78af8b3edLow risk02026-06-02
0.3.0-preview-3bc50cfef4ebe83e3050b3addee8789139e2eb77Low risk02026-06-02
0.3.0-preview-e989dec4d51a7077fefcc0ef95a53b589933031aLow risk02026-06-02
0.3.0-preview-b2a7a13676d9b4e8f4e134f75e9e5ecb2eb36cadLow risk02026-06-01
0.3.0-preview-c5e6434cfe6e61b18df3cfb871fd622f28b5a429Low risk02026-05-31
0.2.0Low risk02026-05-27
0.2.0-preview-b7b025877cf010fe1bac4a5cf219b48ca6a9e15bLow risk02026-05-27
0.2.0-preview-fe33074b271741c442dc184c9fc64c29045ff094Low risk02026-05-26
0.2.0-preview-f70a6259270c24190560a4dd2368e9e8ec192107Low risk02026-05-26
0.2.0-preview-8e1a1eabafc761187b51357340c82a0e566fe3c8Low risk02026-05-26
0.2.0-preview-3ed1aa04521e9d103ee6c638036b6554848476b1Low risk02026-05-25
0.2.0-preview-840049b0d3c0dd426320d7e30c9a82da3ffdbafaLow risk02026-05-25
0.2.0-preview-292e2c00e870776ac6a4403daffea76f09dd81c7Review362026-05-24
0.2.0-preview-3bd084178827fd5e2d505fed65571405a1520514Review242026-05-24

Block this in CI

PkgRadar gates create-solvapay (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm create-solvapay@0.2.0-preview-292e2c00e870776ac6a4403daffea76f09dd81c7
Start free — 25 scans / moView full evidence