PkgRadar

npm · registry.npmjs.org

uirelay

Remote Payload: matched "curl "

Why PkgRadar flagged 1.0.29

SeveritySignalEvidence
mediumRemote Payloadmatched "curl " · package/dist-public/cli.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.29Review122026-06-07
1.0.28Review122026-06-07
1.0.27Review122026-06-07
1.0.26Review122026-06-04
1.0.24Review122026-06-04
1.0.25Review122026-06-04
1.0.20Review122026-06-04
1.0.19Review122026-06-04
1.0.15Review122026-06-03
1.0.16Review122026-06-03
1.0.0Review222026-06-02

Block this in CI

PkgRadar gates uirelay (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
uirelay — npm security scan | PkgRadar