PkgRadar

npm · registry.npmjs.org

otomato-sdk

Remote Payload: matched "cUrl "

Why PkgRadar flagged 2.0.582

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/src/utils/addressBalance.js
mediumRemote Payloadmatched "cUrl " · package/dist/src/services/RpcServices.js
mediumLarge Javascript Payload31879999 bytes · package/dist/src/constants/Blocks.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.598Low risk02026-06-17
2.0.597Low risk02026-06-17
2.0.596Low risk02026-06-16
2.0.595Low risk02026-06-16
2.0.594Low risk02026-06-16
2.0.593Low risk02026-06-15
2.0.592Low risk02026-06-15
2.0.590Low risk02026-06-02
2.0.591Low risk02026-06-02
2.0.588Low risk02026-06-02
2.0.589Low risk02026-06-02
2.0.586Low risk02026-06-01
2.0.585Low risk02026-06-01
2.0.584Low risk02026-05-29
2.0.582Review342026-05-25
2.0.583Review342026-05-25

Block this in CI

PkgRadar gates otomato-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence