PkgRadar

npm · registry.npmjs.org

gwtemplate-node-ts

Remote Payload: matched "curl "

Why PkgRadar flagged 1.3.11

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/scripts/bootstrap-single-tenant.sh
mediumRemote Payloadmatched "curl\n\n" · package/scripts/portal-web-go-no-go.sh
mediumRemote Payloadmatched "curl " · package/fabric-multicloud/k8s/osnadmin-join-job.yaml
mediumRemote Payloadmatched "curl " · package/fabric-multicloud/k8s/osnadmin-list-job.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.11Review532026-05-28
1.7.0Review702026-05-28

Block this in CI

PkgRadar gates gwtemplate-node-ts (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]