PkgRadar

Package evidence

@evalguard/[email protected]

Js Decode Then Exec, Shell Credential File Read, Webhook Exfil Endpoint +8 more

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
569
Versions published
7
First published
Apr 2026
Publisher
GitHub ActionsTrusted automation · −70% score

Effective trust discount applied: −70% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Add to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@evalguard/[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@evalguard/[email protected]"],"fail_on":"high"}'
PublisherGitHub Actions
Artifact bytes5,784,511
Previous version1.1.0
Published2026-06-11T12:42:34.061Z
SHA-256df766845af644595f71789498d48a3891531e6d7493d8d881d9a7c4bf2a7fdd8

Why flagged

What the scanner saw

Js Decode Then Exec

3 candidate cluster(s) currently reference this release. 1 remote tarball(s) were followed statically.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high
Last checked
highRisk
369Score
1.2.0Version
Status history (6 events)
  1. available → available · risk high · score 369 · status available -> available, risk high -> high, score 324 -> 369
  2. available → available · risk high · score 324 · status available -> available, risk high -> high, score 329 -> 324
  3. available → available · risk high · score 329 · status available -> available, risk high -> high, score 289 -> 329
  4. available → available · risk high · score 289 · status available -> available, risk high -> high, score 277 -> 289
  5. available → available · risk high · score 277 · status available -> available, risk high -> high, score 272 -> 277
  6. new → available · risk high · score 272 · status changed

Related candidates

Linked campaigns and clusters

Repeated static TTPactive

Shell Credential File Read

786 members · evidence strength 90
Repeated static TTPactive

Js Decode Then Exec

94 members · evidence strength 90
Repeated static TTPactive

Webhook Exfil Endpoint

117 members · evidence strength 90
Repeated static TTPcandidate

Shell Credential File Read

786 members · max score 510
Repeated static TTPcandidate

Webhook Exfil Endpoint

117 members · max score 369
Repeated static TTPcandidate

Js Decode Then Exec

94 members · max score 372

Evidence

Static findings

22 static · 1 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
highJs Decode Then Execpackage/dist/firewall/detection-engine.js—45
highShell Credential File Readpackage/dist/security/mcp-security.js—45
highWebhook Exfil Endpointpackage/dist/security/plugins/coding-agent-network-egress.js—40
highWebhook Exfil Endpointpackage/dist/security/plugins/coding-agent-secret-env-read.js—40
highWebhook Exfil Endpointpackage/dist/security/plugins/mcp-data-exfiltration.js—40
highReverse Shellpackage/dist/security/mcp-security.js—40
highRemote Dependency Specpackage.json—35
highDependency Changed To Remote Vs Previouspackage.json—35
mediumTls Verification Disabledpackage/dist/security/plugins/coding-agent-generated-vulnerability.js—12
mediumRemote Payloadpackage/dist/integrations/telegram.js—12
Show all 23 findings (low-signal and informational)
SeverityKindPathDetailPoints
highJs Decode Then Execpackage/dist/firewall/detection-engine.js—45
highShell Credential File Readpackage/dist/security/mcp-security.js—45
highWebhook Exfil Endpointpackage/dist/security/plugins/coding-agent-network-egress.js—40
highWebhook Exfil Endpointpackage/dist/security/plugins/coding-agent-secret-env-read.js—40
highWebhook Exfil Endpointpackage/dist/security/plugins/mcp-data-exfiltration.js—40
highReverse Shellpackage/dist/security/mcp-security.js—40
highRemote Dependency Specpackage.json—35
highDependency Changed To Remote Vs Previouspackage.json—35
mediumTls Verification Disabledpackage/dist/security/plugins/coding-agent-generated-vulnerability.js—12
mediumRemote Payloadpackage/dist/integrations/telegram.js—12
lowCredential file accesspackage/dist/security/plugins/agent-privilege-escalation-chain.js—5
lowCredential file accesspackage/dist/security/plugins/coding-agent-delayed-ci-exfil.js—5
lowCredential file accesspackage/dist/security/plugins/coding-agent-procfs-credential-read.js—5
lowCredential file accesspackage/dist/security/plugins/coding-agent-secret-env-read.js—5
lowCredential file accesspackage/dist/security/plugins/coding-agent-secret-file-read.js—5
lowCredential file accesspackage/dist/mcp-eval/evil-mcp.js—5
lowCredential file accesspackage/dist/security/plugins/exploit-tool-agent.js—5
lowCredential file accesspackage/dist/security/mcp-security.js—5
lowCredential file accesspackage/dist/anonymizer/recognizers.js—5
lowCredential file accesspackage/dist/support/support-bundle.js—5
lowMessenger Bot Endpointpackage/dist/integrations/telegram.js—5
lowObfuscation Densitypackage/dist/security/plugins/ascii-smuggling.js—0
lowObfuscation Densitypackage/dist/security/multilingual.js—0

Remote payloads

Followed remote artifacts

1 remote artifact were followed statically. Sign in to view URLs and per-artifact findings.

Manifest

Package metadata

Scripts 9

Sign in to view install / lifecycle script contents.

Dependencies5
  • ioredis^5.11.1
  • jose^6.2.3
  • ws^8.21.0
  • yaml^2.9.0
  • zod^4.4.3
Optional dependencies3
  • mammoth^1.8.0
  • pdf-parse^2.4.5
  • xlsxhttps://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz