npm · registry.npmjs.org
strray-ai
Remote Payload: matched "curl "
Why PkgRadar flagged 1.22.69
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "curl " · package/dist/cli/commands/skill-install.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.22.69 | Review | 17 | 2026-06-03 |
1.22.68 | Review | 17 | 2026-06-02 |
1.22.66 | Review | 17 | 2026-06-02 |
1.22.67 | Review | 17 | 2026-06-02 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]