PkgRadar

npm · registry.npmjs.org

pmxt-core

Remote Payload: matched "cUrl "

Why PkgRadar flagged 2.44.4

SeveritySignalEvidence
mediumRemote Payloadmatched "cUrl " · package/dist/exchanges/opinion/auth.js
mediumRemote Payloadmatched "cUrl " · package/dist/exchanges/baozi/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.50.2Low risk02026-06-15
2.49.11Low risk02026-06-12
2.49.10Low risk02026-06-12
2.49.9Low risk02026-06-11
2.49.7Low risk02026-06-10
2.49.8Low risk02026-06-10
2.49.6Low risk02026-06-09
2.49.5Low risk02026-06-09
2.49.4Low risk02026-06-09
2.49.3Low risk02026-06-09
2.49.1Low risk02026-06-08
2.49.0Low risk02026-06-08
2.48.6Low risk02026-06-04
2.48.5Low risk02026-06-02
2.48.4Low risk02026-06-02
2.48.3Low risk02026-06-01
2.48.2Low risk02026-06-01
2.48.1Low risk02026-05-30
2.48.0Low risk02026-05-30
2.47.0Low risk02026-05-30
2.46.14Low risk02026-05-26
2.46.13Low risk02026-05-26
2.46.4Low risk02026-05-26
2.46.3Low risk02026-05-25
2.46.1Low risk02026-05-25
2.46.2Low risk02026-05-25
2.44.6Low risk02026-05-25
2.44.5Low risk02026-05-25
2.44.4Review242026-05-24
2.44.3Review242026-05-24
2.44.2Review242026-05-24
2.44.1Review242026-05-24
2.44.0Review242026-05-24
2.43.25Review242026-05-24
2.43.24Review242026-05-24
2.43.20Review242026-05-24
2.43.19Review242026-05-24
2.43.18Review242026-05-24
2.43.17Review242026-05-24
2.43.16Review242026-05-24
2.43.14Review242026-05-24
2.43.15Review242026-05-24

Block this in CI

PkgRadar gates pmxt-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence