PkgRadar

npm · registry.npmjs.org

skykoi

Webhook Exfil Endpoint: matched "ngrok.app"

Why PkgRadar flagged 2026.3.341

SeveritySignalEvidence
highWebhook Exfil Endpointmatched "ngrok.app" · package/extensions/voice-call/src/providers/twilio.test.ts
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/extensions/voice-call/src/webhook-security.test.ts
highWebhook Exfil Endpointmatched "ngrok-free.app" · package/extensions/voice-call/src/webhook-security.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.3.341High risk572026-06-13
2026.3.339High risk572026-06-13
2026.3.338High risk572026-06-13
2026.3.337High risk1152026-06-11
2026.3.336High risk1152026-06-11
2026.3.335High risk1152026-06-11
2026.3.334High risk1152026-06-11
2026.3.333High risk1152026-06-11
2026.3.332High risk572026-06-11
2026.3.331High risk1152026-06-11
2026.3.330High risk572026-06-11
2026.3.329High risk572026-06-11
2026.3.328High risk1152026-06-11
2026.3.327High risk572026-06-11
2026.3.326High risk572026-06-11
2026.3.325High risk572026-06-11
2026.3.324High risk1152026-06-10
2026.3.323High risk572026-06-10
2026.3.321High risk1152026-06-10
2026.3.320High risk1152026-06-10
2026.3.319High risk1152026-06-10
2026.3.318High risk572026-06-10
2026.3.317High risk1152026-06-10
2026.3.316High risk572026-06-10
2026.3.315High risk1152026-06-10
2026.3.314High risk572026-06-10
2026.3.313High risk572026-06-10
2026.3.312High risk572026-06-10
2026.3.309High risk572026-06-10
2026.3.308High risk572026-06-10
2026.3.307High risk572026-06-10
2026.3.306High risk572026-06-10
2026.3.305High risk572026-06-10
2026.3.303High risk572026-06-10
2026.3.304High risk572026-06-10
2026.3.302High risk572026-06-10
2026.3.299High risk572026-06-10
2026.3.301High risk572026-06-10
2026.3.298High risk572026-06-10
2026.3.294High risk572026-06-10
2026.3.297High risk572026-06-10
2026.3.296High risk572026-06-10
2026.3.295High risk572026-06-10

Block this in CI

PkgRadar gates skykoi (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]