PkgRadar

npm · registry.npmjs.org

relay-ide

Webhook Exfil Endpoint: matched "smee.io"

Why PkgRadar flagged 0.1.0-nightly.20260618.635

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "smee.io" · package/dist/frontend/assets/main-CD3lmZU_.js
highWebhook Exfil Endpointmatched "smee.io" · package/dist/server/webhook-manager.js
mediumRemote Dependency Specdependencies.@xterm/xterm="github:donovan-yohan/xterm.js#v6.0.0-relay.1" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.0-nightly.20260618.635High risk212026-06-18
0.1.0-nightly.20260617.634High risk212026-06-17
0.1.0-nightly.20260616.633High risk212026-06-17
0.1.0-nightly.20260616.632High risk212026-06-16
0.1.0-nightly.20260616.631High risk212026-06-16
0.1.0-nightly.20260615.630High risk212026-06-15
0.1.0-nightly.20260615.629High risk212026-06-15
0.1.0-nightly.20260615.628High risk212026-06-15
0.1.0-nightly.20260615.627High risk212026-06-15
0.1.0-nightly.20260615.626High risk212026-06-15
0.1.0-nightly.20260615.625High risk212026-06-15
0.1.0-nightly.20260615.624High risk212026-06-15
0.1.0-nightly.20260615.623High risk212026-06-15
0.1.0-nightly.20260614.622High risk212026-06-15
0.1.0-nightly.20260614.621High risk212026-06-14
0.1.0-nightly.20260613.620High risk212026-06-14
0.1.0-nightly.20260613.619High risk212026-06-13
0.1.0-nightly.20260613.618High risk212026-06-13
0.1.0-nightly.20260612.617High risk212026-06-12
0.1.0-nightly.20260612.616High risk212026-06-12
0.1.0-nightly.20260612.615High risk212026-06-12
0.1.0-nightly.20260612.614High risk212026-06-12
0.1.0-nightly.20260612.613High risk212026-06-12
0.1.0-nightly.20260612.612High risk212026-06-12
0.1.0-nightly.20260612.611High risk212026-06-12
0.1.0-nightly.20260612.610High risk212026-06-12
0.1.0-nightly.20260612.609High risk212026-06-12
0.1.0-nightly.20260612.608High risk212026-06-12
0.1.0-nightly.20260612.607High risk212026-06-12
0.1.0-nightly.20260612.606High risk212026-06-12
0.1.0-nightly.20260610.604High risk212026-06-12
0.1.0-nightly.20260612.605High risk212026-06-12
0.1.0-nightly.20260610.603High risk212026-06-10
0.1.0-nightly.20260610.602High risk212026-06-10
0.1.0-nightly.20260610.601High risk212026-06-10
0.1.0-nightly.20260610.600High risk212026-06-10
0.1.0-nightly.20260610.599High risk212026-06-10
0.1.0-nightly.20260610.597High risk212026-06-10
0.1.0-nightly.20260610.598High risk212026-06-10
0.1.0-nightly.20260610.596High risk212026-06-10
0.1.0-nightly.20260610.595High risk212026-06-10
0.1.0-nightly.20260610.594High risk212026-06-10
0.1.0High risk352026-06-10
0.1.0-nightly.20260610.593High risk212026-06-10
0.1.0-nightly.20260610.592Review182026-06-10
0.1.0-nightly.20260609.591Review182026-06-09
0.1.0-nightly.20260609.590Review182026-06-09
0.1.0-nightly.20260609.589Review182026-06-09
0.1.0-nightly.20260608.588Review182026-06-08
0.1.0-nightly.20260608.587Review182026-06-08
0.1.0-nightly.20260608.586Review182026-06-08
0.1.0-nightly.20260608.585Review182026-06-08
0.1.0-nightly.20260608.584Review182026-06-08
0.1.0-nightly.20260608.583Review182026-06-08
0.1.0-nightly.20260608.582Review182026-06-08
0.1.0-nightly.20260608.581Review182026-06-08
0.1.0-nightly.20260606.580Review182026-06-06
0.1.0-nightly.20260606.579Review182026-06-06
0.1.0-nightly.20260606.578Review182026-06-06
0.1.0-nightly.20260606.577Review182026-06-06
0.1.0-nightly.20260603.576Review182026-06-03
0.1.0-nightly.20260603.575Review182026-06-03
0.1.0-nightly.20260602.574Review182026-06-02
0.1.0-nightly.20260602.573Review182026-06-02
0.1.0-nightly.20260601.572Review182026-06-01
0.1.0-nightly.20260601.571Review182026-06-01
0.1.0-nightly.20260601.570Review182026-06-01
0.1.0-nightly.20260601.569Review182026-06-01
0.1.0-nightly.20260601.568Review182026-06-01
0.1.0-nightly.20260601.567Review182026-06-01
0.1.0-nightly.20260601.566Review182026-06-01
0.1.0-nightly.20260531.565Review182026-05-31
0.1.0-nightly.20260531.564Review182026-05-31
0.1.0-nightly.20260530.563Review182026-05-30
0.1.0-nightly.20260530.562Review182026-05-30
0.1.0-nightly.20260529.560Review182026-05-29
0.1.0-nightly.20260529.561Review182026-05-29
0.1.0-nightly.20260529.558Review182026-05-29
0.1.0-nightly.20260529.559Review182026-05-29
0.1.0-nightly.20260529.557Review182026-05-29
0.1.0-nightly.20260529.556Review182026-05-29
0.1.0-nightly.20260529.555Review272026-05-29
0.1.0-nightly.20260529.554Review272026-05-29
0.1.0-nightly.20260529.552Review272026-05-29
0.1.0-nightly.20260529.553Review272026-05-29
0.1.0-nightly.20260528.550Review272026-05-28
0.1.0-nightly.20260528.551Review272026-05-28
0.1.0-nightly.20260527.548Review272026-05-28
0.1.0-nightly.20260528.549Review272026-05-28
0.1.0-nightly.20260527.525Review272026-05-27
0.1.0-nightly.20260527.526Review272026-05-27
0.1.0-nightly.20260526.521Review272026-05-27
0.1.0-nightly.20260525.519Review272026-05-25
0.1.0-nightly.20260525.520Review272026-05-25

Block this in CI

PkgRadar gates relay-ide (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence