PyPI · pypi.org

garmin-mcp-gt

Webhook Exfil Endpoint: matched "ngrok.app"

Why PkgRadar flagged 0.1.6

Severity	Signal	Evidence
high	Webhook Exfil Endpoint	matched "ngrok.app" · garmin_mcp_gt-0.1.6/ui/node_modules/psl/data/rules.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.1.6`	High risk	40	2026-06-04
`0.1.5`	High risk	40	2026-06-04
`0.1.4`	High risk	40	2026-06-04
`0.1.3`	High risk	40	2026-06-04
`0.1.2`	High risk	40	2026-06-04
`0.1.0`	Low risk	0	2026-05-30

Block this in CI

PkgRadar gates garmin-mcp-gt (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem pypi garmin-mcp-gt==0.1.6