npm · registry.npmjs.org
viem
Remote Payload: matched "cUrl "
Why PkgRadar flagged 2.50.4
| Severity | Signal | Evidence |
|---|---|---|
| medium | Remote Payload | matched "cUrl " · package/_cjs/actions/index.js |
| medium | Remote Payload | matched "cUrl " · package/_esm/actions/index.js |
| medium | Obfuscation Density | high encoded/escaped-token density · package/_esm/account-abstraction/actions/bundler/prepareUserOperation.js |
| medium | Remote Payload | matched "cUrl " · package/_cjs/actions/test/reset.js |
| medium | Remote Payload | matched "cUrl " · package/_esm/actions/test/reset.js |
| medium | Remote Payload | matched "cUrl " · package/_cjs/actions/test/setRpcUrl.js |
| medium | Remote Payload | matched "cUrl\n " · package/_esm/actions/test/setRpcUrl.js |
| medium | Remote Payload | matched "cUrl " · package/_esm/clients/decorators/test.js |
| medium | Remote Payload | matched "cUrl " · package/_cjs/tempo/zones/zone.js |
| medium | Remote Payload | matched "cUrl " · package/_esm/tempo/zones/zone.js |
| medium | Obfuscation Density | high encoded/escaped-token density · package/trusted-setups/mainnet.json |
| medium | Obfuscation Density | high encoded/escaped-token density · package/trusted-setups/minimal.json |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.52.2 | Low risk | 0 | 2026-06-04 |
2.52.0 | Low risk | 0 | 2026-06-01 |
2.51.3 | Low risk | 0 | 2026-05-28 |
2.51.2 | Low risk | 0 | 2026-05-27 |
2.50.4 | Review | 50 | 2026-05-25 |
2.51.0 | Review | 50 | 2026-05-25 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]