PkgRadar

npm · registry.npmjs.org

instar

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 1.3.615

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/commands/setup-wizard/codex-driver.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/commands/setup-wizard/gemini-driver.js
mediumRemote Payloadmatched "curl " · package/dist/core/Prerequisites.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/commands/setup.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/messaging/TelegramAdapter.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/lifeline/TelegramLifeline.js
mediumRemote Payloadmatched "curl " · package/src/templates/hooks/compaction-recovery.sh
mediumRemote Payloadmatched "curl " · package/src/templates/hooks/session-start.sh
mediumRemote Payloadmatched "curl " · package/src/templates/hooks/slack-channel-context.sh
mediumRemote Payloadmatched "curl " · package/src/templates/hooks/telegram-topic-context.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.615High risk1552026-06-17
1.3.614High risk1552026-06-17
1.3.613High risk1552026-06-17
1.3.612High risk1552026-06-17
1.3.611High risk772026-06-17
1.3.610High risk1552026-06-17
1.3.609High risk772026-06-17
1.3.608High risk1552026-06-17
1.3.607High risk772026-06-17
1.3.606High risk1552026-06-17
1.3.604High risk772026-06-17
1.3.605High risk772026-06-17
1.3.603High risk772026-06-16
1.3.602High risk1552026-06-16
1.3.601High risk1552026-06-16
1.3.600High risk772026-06-16
1.3.599High risk772026-06-16
1.3.598High risk772026-06-16
1.3.597High risk772026-06-16
1.3.596High risk772026-06-16
1.3.595High risk772026-06-16
1.3.594High risk1552026-06-16
1.3.593High risk1552026-06-16
1.3.591High risk772026-06-16
1.3.592High risk772026-06-16
1.3.590High risk1552026-06-16
1.3.589High risk1552026-06-16
1.3.588High risk772026-06-16
1.3.587High risk772026-06-16
1.3.586High risk1552026-06-16
1.3.585High risk772026-06-16
1.3.584High risk772026-06-15
1.3.583High risk772026-06-15
1.3.582High risk772026-06-15
1.3.581High risk772026-06-15
1.3.580High risk1552026-06-15
1.3.579High risk772026-06-15
1.3.578High risk1552026-06-15
1.3.577High risk772026-06-15
1.3.576High risk1552026-06-15
1.3.575High risk772026-06-15
1.3.574High risk772026-06-15
1.3.572High risk1552026-06-15
1.3.573High risk1552026-06-15
1.3.571High risk772026-06-15
1.3.570High risk1552026-06-15
1.3.569High risk772026-06-15
1.3.568High risk772026-06-15
1.3.567High risk772026-06-15
1.3.566High risk772026-06-14
1.3.565High risk1552026-06-14
1.3.564High risk772026-06-14
1.3.563High risk772026-06-14
1.3.562High risk772026-06-14
1.3.561High risk772026-06-14
1.3.560High risk772026-06-14
1.3.559High risk772026-06-14
1.3.558High risk772026-06-14
1.3.557High risk772026-06-14
1.3.556High risk772026-06-14
1.3.555High risk772026-06-14
1.3.554High risk1552026-06-14
1.3.553High risk772026-06-14
1.3.552High risk772026-06-14
1.3.551High risk772026-06-14
1.3.550High risk772026-06-14
1.3.549High risk772026-06-14
1.3.548High risk772026-06-13
1.3.547High risk772026-06-13
1.3.546High risk772026-06-13
1.3.545High risk772026-06-13
1.3.544High risk772026-06-13
1.3.543High risk772026-06-13
1.3.542High risk772026-06-13
1.3.541High risk772026-06-13
1.3.540High risk772026-06-13
1.3.539High risk772026-06-13
1.3.537High risk772026-06-13
1.3.538High risk772026-06-13
1.3.536High risk772026-06-13
1.3.535High risk772026-06-13
1.3.534High risk772026-06-13
1.3.533High risk1552026-06-13
1.3.532High risk772026-06-13
1.3.531High risk772026-06-13
1.3.530High risk772026-06-13
1.3.529High risk772026-06-13
1.3.528High risk772026-06-13
1.3.527High risk772026-06-13
1.3.526High risk772026-06-13
1.3.524High risk772026-06-13
1.3.525High risk772026-06-13
1.3.523High risk772026-06-13
1.3.216High risk772026-06-13
1.3.80High risk692026-06-13
1.3.79High risk692026-06-13
1.3.78High risk692026-06-13
1.3.77High risk692026-06-13
1.3.76High risk692026-06-13
1.3.75High risk692026-06-13
1.3.522High risk772026-06-13
1.3.521High risk772026-06-13
1.3.520High risk772026-06-13
1.3.519High risk772026-06-13
1.3.518High risk772026-06-13
1.3.517High risk772026-06-13
1.3.515High risk772026-06-13
1.3.516High risk772026-06-13
1.3.513High risk772026-06-13
1.3.514High risk772026-06-13
1.3.512High risk772026-06-13
1.3.511High risk772026-06-13
1.3.510High risk772026-06-13
1.3.509High risk772026-06-13
1.3.508High risk772026-06-13
1.3.507High risk772026-06-13
1.3.506High risk772026-06-13
1.3.505High risk772026-06-13
1.3.504High risk1552026-06-13
1.3.503High risk1552026-06-13
1.3.501High risk772026-06-12
1.3.502High risk772026-06-12
1.3.500High risk772026-06-12
1.3.498High risk772026-06-12
1.3.499High risk772026-06-12
1.3.497High risk772026-06-12
1.3.496High risk1552026-06-12
1.3.495High risk772026-06-12
1.3.494High risk772026-06-12
1.3.492High risk1552026-06-12
1.3.493High risk772026-06-12
1.3.490High risk772026-06-12
1.3.491High risk772026-06-12
1.3.489High risk772026-06-12
1.3.488High risk772026-06-12
1.3.487High risk1552026-06-11
1.3.486High risk772026-06-11
1.3.485High risk772026-06-11
1.3.484High risk772026-06-11
1.3.483High risk772026-06-10
1.3.481High risk1552026-06-10
1.3.482High risk1552026-06-10
1.3.479High risk1552026-06-10
1.3.478High risk1552026-06-10
1.3.477High risk772026-06-10
1.3.476High risk1552026-06-10
1.3.475High risk772026-06-10
1.3.474High risk1552026-06-10
1.3.472High risk772026-06-10
1.3.473High risk772026-06-10
1.3.471High risk772026-06-10
1.3.470High risk772026-06-10
1.3.73High risk692026-06-10
1.3.74High risk692026-06-10
1.3.57High risk692026-06-10
1.3.56High risk692026-06-10
1.3.469High risk1552026-06-10
1.3.21High risk662026-06-10
1.3.22High risk1332026-06-10
1.3.467High risk772026-06-10
1.3.468High risk772026-06-10
1.3.462High risk772026-06-10
1.2.82High risk662026-06-10
1.2.81High risk662026-06-10
1.2.79High risk662026-06-10
1.2.80High risk662026-06-10
1.3.461High risk772026-06-10
1.3.460High risk772026-06-10
1.3.458High risk772026-06-10
1.3.459High risk772026-06-10
1.3.456High risk772026-06-10
1.3.457High risk772026-06-10
1.3.455High risk772026-06-10
1.3.453High risk772026-06-10
1.3.454High risk772026-06-10
1.3.452High risk772026-06-10
1.3.451High risk772026-06-10
1.3.450High risk772026-06-10
1.3.448High risk772026-06-10
1.3.449High risk772026-06-10
1.3.446High risk772026-06-10
1.3.447High risk772026-06-10
1.3.445High risk772026-06-10
1.3.444High risk772026-06-10
1.3.443High risk772026-06-10
1.3.442High risk772026-06-10
1.3.441High risk772026-06-10
1.3.440High risk772026-06-10
1.3.439High risk772026-06-10
1.3.437High risk772026-06-10
1.3.438High risk772026-06-10
1.3.436High risk772026-06-10
1.3.435High risk772026-06-10
1.3.433High risk772026-06-10
1.3.434High risk772026-06-10
1.3.432High risk772026-06-10
1.3.466High risk1552026-06-10
1.3.431High risk772026-06-10
1.3.430High risk772026-06-10
1.3.429High risk772026-06-10

Block this in CI

PkgRadar gates instar (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]