PkgRadar

npm · registry.npmjs.org

jamdesk

Remote Payload: matched "curl "

Why PkgRadar flagged 1.1.148

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist/commands/deploy/cloudflare.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.148Review112026-06-16
1.1.147Review112026-06-16
1.1.146Review112026-06-16
1.1.145Review112026-06-16
1.1.144Review112026-06-15
1.1.143Review172026-06-15
1.1.141Review112026-06-13
1.1.142Review112026-06-13
1.1.140Review112026-06-11
1.1.139Review112026-06-10
1.1.138Review112026-06-10
1.1.137Review112026-06-10
1.1.136Review112026-06-10
1.1.135Review112026-06-08
1.1.134Review112026-06-08
1.1.133Review172026-06-08
1.1.132Review172026-06-04
1.1.131Review172026-06-04
1.1.130Review172026-06-04
1.1.129Review172026-06-03
1.1.128Review112026-06-03
1.1.127Review172026-06-01
1.1.126Review172026-05-30
1.1.125Review172026-05-30
1.1.124Review172026-05-30
1.1.120Review172026-05-30
1.1.119Review172026-05-30

Block this in CI

PkgRadar gates jamdesk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence