PkgRadar

npm · registry.npmjs.org

testdriverai

Remote Payload: matched "Invoke-WebRequest"

Why PkgRadar flagged 7.9.112-test

SeveritySignalEvidence
mediumRemote Payloadmatched "Invoke-WebRequest" · package/setup/aws/spawn-runner.sh

Scanned versions

VersionVerdictScoreScanned (UTC)
7.9.112-testReview82026-06-16
7.9.111-canaryReview82026-06-16
7.9.110-canaryReview82026-06-16
7.9.111-testReview82026-06-16
7.9.110-testReview82026-06-16
7.9.109-testReview82026-06-16
7.9.109-canaryReview82026-06-16
7.9.108-testReview82026-06-16
7.9.107-canaryReview82026-06-16
7.9.107-testReview82026-06-16
7.9.106-testReview82026-06-16
7.9.105-canaryReview82026-06-16
7.9.105-testReview82026-06-16
7.9.104-canaryReview82026-06-12
7.9.104-testReview82026-06-12
7.9.103-canaryReview82026-06-12
7.9.103-testReview82026-06-12
7.9.102-testReview82026-06-12
7.9.101-testReview82026-06-12
7.9.100-canaryReview82026-06-10
7.9.3Review22026-06-10
7.9.100-testReview82026-06-10
7.9.99-canaryReview82026-06-08
7.9.99-testReview82026-06-08
7.9.98-testReview82026-05-30
7.9.98-canaryReview82026-05-30
7.9.97-testReview132026-05-28
7.9.97-canaryReview132026-05-28
7.9.96-canaryReview302026-05-28
7.9.95-testReview302026-05-28
7.9.96-testReview302026-05-28

Block this in CI

PkgRadar gates testdriverai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]