npm · registry.npmjs.org
sidecar-mcp
no static findings
Early detection
PkgRadar flagged this 10.2 days before public disclosure
Detected 2026-06-30 · disclosed as MAL-2026-10161 on 2026-07-10
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.0.2 | High risk | 0 | 2026-07-11 |
1.0.4 | Low risk | 0 | 2026-06-30 |
1.0.3 | Low risk | 0 | 2026-06-30 |
1.0.1 | Low risk | 0 | 2026-06-30 |
1.0.0 | Review | 5 | 2026-06-30 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]