PkgRadar

npm · registry.npmjs.org

prizmkit

Remote Payload: matched "curl "

Why PkgRadar flagged 1.1.78

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/src/scaffold.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.78Review82026-06-14
1.1.77Review82026-06-14
1.1.76Review82026-06-13
1.1.74Review122026-06-12
1.1.72Review122026-06-11
1.1.70Review122026-06-10
1.1.69Review122026-06-09
1.1.67Review122026-06-09
1.1.68Review122026-06-09
1.1.66Review122026-06-08
1.1.64Review122026-06-08
1.1.63Review122026-06-08
1.1.62Review122026-06-08
1.1.61Review122026-06-08
1.1.60Review122026-06-08
1.1.58Review122026-06-07
1.1.57Review122026-05-30
1.1.56Review162026-05-25
1.1.55Review242026-05-25
1.1.54Review242026-05-24
1.1.51Review122026-05-24
1.1.53Review122026-05-24

Block this in CI

PkgRadar gates prizmkit (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]