PkgRadar

npm · registry.npmjs.org

ocean-agent-cli

Webhook Exfil Endpoint: matched "webhook.site"

Why PkgRadar flagged 0.1.12

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "webhook.site" · package/dist/index.js
highWebhook Exfil Endpointmatched "webhook.site" · package/dist/mcp.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.12High risk502026-06-03
0.1.11High risk502026-06-03
0.1.10High risk502026-06-03
0.1.9High risk502026-06-03
0.1.8High risk502026-06-03
0.1.6High risk502026-06-03
0.1.7High risk502026-06-03

Block this in CI

PkgRadar gates ocean-agent-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence