PkgRadar

npm · registry.npmjs.org

netget

Remote Payload: matched "curl "

Why PkgRadar flagged 2.7.5

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/src/modules/NetGetX/OpenResty/openRestyInstallationOptions.cli.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
2.7.5Review62026-05-31
2.7.3Review62026-05-31
2.7.4Review62026-05-31
2.7.2Review62026-05-31

Block this in CI

PkgRadar gates netget (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]