PkgRadar

npm · registry.npmjs.org

crewx

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 0.8.9-rc.4

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist-server/domain/market/market.service.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.8.9-rc.4Review82026-06-17
0.8.9-rc.3Review82026-06-17
0.8.9-rc.2Review82026-06-16
0.8.9-rc.1Review82026-06-16
0.8.9-rc.0Review82026-06-16
0.8.8Review82026-06-15
0.8.8-rc.43Review82026-06-15
0.8.8-rc.42Review82026-06-13
0.8.8-rc.41Review82026-06-12
0.8.8-rc.39Review82026-06-12
0.8.8-rc.40Review82026-06-12
0.8.8-rc.38Review82026-06-10
0.8.8-rc.37Review82026-06-10
0.8.8-rc.36Review82026-06-10
0.8.8-rc.35Review82026-06-09
0.8.8-rc.34Review82026-06-09
0.8.8-rc.33Review82026-06-09
0.8.8-rc.32Review82026-06-08
0.8.8-rc.31Review82026-06-08
0.8.8-rc.30Review82026-06-08
0.8.8-rc.29Review82026-06-08
0.8.8-rc.28Review82026-06-08
0.8.8-rc.27Review82026-06-08
0.8.8-rc.26Review82026-06-08
0.8.8-rc.24Review82026-06-07
0.8.8-rc.25Review82026-06-07
0.8.8-rc.23Review82026-06-05
0.8.8-rc.22Review82026-06-05
0.8.8-rc.21Review82026-06-04
0.8.8-rc.20Review82026-06-04
0.8.8-rc.19Review82026-06-04
0.8.8-rc.18Review82026-06-04
0.8.8-rc.17Review82026-06-04
0.8.8-rc.16Review82026-06-04
0.8.8-rc.15Review82026-06-04
0.8.8-rc.14Review82026-06-03
0.8.8-rc.13Review82026-06-03
0.8.8-rc.12Review82026-06-03
0.8.8-rc.11Review82026-06-02
0.8.8-rc.10Review82026-06-02
0.8.8-rc.9Review82026-06-02
0.8.8-rc.8Review82026-06-01
0.8.8-rc.7Review82026-06-01
0.8.8-rc.6Review82026-05-31
0.8.8-rc.5Review82026-05-31
0.8.8-rc.4Review152026-05-29
0.8.8-rc.3Review392026-05-28
0.8.8-rc.1Review392026-05-28
0.8.8-rc.2Review392026-05-28
0.8.7Review392026-05-27
0.8.7-rc.28Review392026-05-27
0.8.7-rc.29Review392026-05-27
0.8.7-rc.22Review272026-05-26
0.8.7-rc.20Review392026-05-26
0.8.7-rc.21Review392026-05-26
0.8.7-rc.18Review392026-05-26
0.8.7-rc.19Review392026-05-26
0.8.7-rc.17Review272026-05-26
0.8.7-rc.16Review842026-05-24
0.8.7-rc.15Review842026-05-24

Block this in CI

PkgRadar gates crewx (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence