PkgRadar

npm · registry.npmjs.org

visionclaw

Remote Payload: matched "api.telegram.org/bot"

Why PkgRadar flagged 0.1.199-beta.2

SeveritySignalEvidence
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/onboarding/bot-profile.js
mediumRemote Payloadmatched "curl " · package/dist/onboarding/macos-permissions.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/onboarding/send-invite.js
mediumRemote Payloadmatched "api.telegram.org/bot" · package/dist/realtime/tools.js
mediumRemote Payloadmatched "github.com/senzhk/ADBKeyBoard/releases/download" · package/dist/builtin-skills/catalog/phone-adb-automation/phone_setup.sh
mediumCredential file accessmatched ".npmrc" · package/dist/tools/upgrade.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.199-beta.2Review732026-06-17
0.1.199-beta.1Review582026-06-16
0.1.199-beta.0Review582026-06-16
0.1.198Review732026-06-15
0.1.198-beta.6Review732026-06-13
0.1.198-beta.5Review582026-06-13
0.1.198-beta.4Review582026-06-13
0.1.198-beta.3Review582026-06-13
0.1.198-dev.fix-owner-yield-stopgaps-485.1Review582026-06-11
0.1.198-beta.2Review582026-06-11
0.1.198-beta.1Review732026-06-11
0.1.198-dev.feat-provider-settings-474.1Review582026-06-11
0.1.198-beta.0Review582026-06-10
0.1.198-dev.chore-upgrade-claude-agent-sdk-0-3-169.2Review582026-06-09
0.1.198-dev.chore-upgrade-claude-agent-sdk-0-3-169.1Review582026-06-09
0.1.197-dev.chore-upgrade-claude-agent-sdk-0-3-169.1Review582026-06-09
0.1.197Review732026-06-09
0.1.197-beta.3Review582026-06-04
0.1.197-beta.2Review582026-06-04
0.1.197-dev.feat-sdk-upgrade-464.2Review582026-06-04
0.1.197-dev.feat-sdk-upgrade-464.1Review582026-06-04
0.1.197-beta.0Review732026-06-03
0.1.197-beta.1Review582026-06-03
0.1.196-beta.7Review832026-06-02
0.1.196Review732026-05-31
0.1.196-beta.4Review832026-05-30
0.1.196-beta.5Review832026-05-30
0.1.196-beta.3Review832026-05-30
0.1.196-beta.2Review582026-05-30
0.1.196-dev.feat-agent-rdp-remote-access.2Review582026-05-30
0.1.196-dev.chore-upgrade-playwright-mcp.1Review582026-05-30
0.1.196-dev.feat-usage-metering-workunit-refactor.1Review832026-05-30
0.1.196-dev.fix-skip-chrome-restart-when-connected.10Review832026-05-30
0.1.196-dev.fix-skip-chrome-restart-when-connected.11Review832026-05-30
0.1.196-dev.feat-playwriter-cdp-relay.1Review582026-05-30
0.1.195-beta.3Review732026-05-30
0.1.195Review1052026-05-30
0.1.195-beta.4Review1052026-05-30
0.1.196-beta.0Review1052026-05-30
0.1.196-beta.6Review582026-05-29

Block this in CI

PkgRadar gates visionclaw (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence