PkgRadar

npm · registry.npmjs.org

make-fetch-happen

DNS / OAST exfiltration: matched "dns.lookup"

Why PkgRadar flagged 15.0.6

SeveritySignalEvidence
highDNS / OAST exfiltrationmatched "dns.lookup" · package/lib/options.js

Scanned versions

VersionVerdictScoreScanned (UTC)
15.0.5Low risk02026-06-16
16.0.0Low risk02026-06-16
15.0.6Review92026-05-26
16.0.1Review92026-05-26

Block this in CI

PkgRadar gates make-fetch-happen (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence