PkgRadar

npm · registry.npmjs.org

pulse-arch

Remote Payload: matched "curl "

Why PkgRadar flagged 1.3.9

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/pulse/cli.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.9Review172026-06-01
1.3.8Review172026-06-01
1.3.7Review112026-06-01
1.3.6Review112026-05-31
1.3.5Review112026-05-31
1.3.4Review112026-05-31
1.3.3Review112026-05-31
1.3.2Review112026-05-31
1.3.1Review172026-05-31
1.3.0Review112026-05-31
1.2.9Review172026-05-31
1.2.8Review112026-05-31
1.2.7Review172026-05-31
1.2.6Review52026-05-30
1.2.5Review52026-05-30
1.2.4Review52026-05-30
1.2.2Review52026-05-30
1.2.1Review52026-05-29
1.0.9Review52026-05-29
1.0.10Review52026-05-29

Block this in CI

PkgRadar gates pulse-arch (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence