npm · registry.npmjs.org
hackmyagent
Webhook Exfil Endpoint: matched "webhook.site"
Why PkgRadar flagged 0.23.10
| Severity | Signal | Evidence |
|---|---|---|
| high | Webhook Exfil Endpoint | matched "webhook.site" · package/dist/semantic/structural/instruction.js |
| high | Webhook Exfil Endpoint | matched "webhook.site" · package/dist/arp/interceptors/network.js |
| high | Webhook Exfil Endpoint | matched "webhook.site" · package/dist/arp/monitors/network.js |
| high | Webhook Exfil Endpoint | matched "webhook.site" · package/dist/plugins/skillguard.js |
| high | DNS / OAST exfiltration | matched "oastify.com" · package/dist/arp/interceptors/network.js |
| high | DNS / OAST exfiltration | matched "oastify.com" · package/dist/arp/monitors/network.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.23.10 | Review | 40 | 2026-06-08 |
0.23.9 | Review | 40 | 2026-06-07 |
0.23.8 | Review | 40 | 2026-06-05 |
0.23.7 | Review | 40 | 2026-06-05 |
0.23.6 | Review | 40 | 2026-06-02 |
0.23.4 | Review | 64 | 2026-05-28 |
0.23.3 | Review | 55 | 2026-05-27 |
0.23.2 | Review | 55 | 2026-05-25 |
0.23.0 | Review | 280 | 2026-05-24 |
0.23.1 | Review | 280 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]