npm · registry.npmjs.org
oh-my-claude-pennix
Remote Payload: matched "raw.githubusercontent.com"
Why PkgRadar flagged 5.0.8
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/dist/features/auto-update.js |
| medium | Remote Payload | matched "api.telegram.org/bot" · package/dist/hooks/session-end/callbacks.js |
| medium | Remote Payload | matched "curl " · package/skills/project-session-manager/lib/providers/bitbucket.sh |
| medium | Remote Payload | matched "curl " · package/skills/project-session-manager/lib/providers/gitea.sh |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
5.0.8 | Review | 73 | 2026-06-06 |
5.0.7 | Review | 73 | 2026-06-06 |
5.0.3 | Review | 73 | 2026-06-06 |
5.0.1 | Review | 73 | 2026-06-06 |
5.0.0 | Review | 73 | 2026-06-06 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]