npm · registry.npmjs.org

@gaodefa/daocore

Webhook Exfil Endpoint, Credential file access, Install-time lifecycle script +1 more

Why PkgRadar flagged 2026.5.67

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`2026.5.67`	High risk	6	2026-06-19
`2026.5.41`	High risk	6	2026-06-19
`2026.5.42`	High risk	6	2026-06-19
`2026.5.100`	High risk	6	2026-06-19
`2026.5.73`	High risk	6	2026-06-19
`2026.5.64`	High risk	6	2026-06-19
`2026.5.58`	High risk	6	2026-06-19
`2026.5.102`	High risk	6	2026-06-19
`2026.5.37`	High risk	6	2026-06-18
`2026.5.62`	High risk	6	2026-06-18
`2026.5.77`	High risk	6	2026-06-18
`2026.5.63`	High risk	6	2026-06-18
`2026.5.38`	High risk	6	2026-06-18
`2026.5.44`	High risk	6	2026-06-18
`2026.5.34`	High risk	6	2026-06-18
`2026.5.48`	High risk	6	2026-06-18
`2026.5.101`	High risk	6	2026-06-18
`2026.5.65`	High risk	6	2026-06-18
`2026.5.60`	High risk	6	2026-06-18
`2026.5.50`	High risk	6	2026-06-18
`2026.5.46`	High risk	6	2026-06-18
`2026.5.35`	High risk	6	2026-06-18
`2026.5.75`	High risk	6	2026-06-18
`2026.5.74`	High risk	6	2026-06-18
`2026.5.83`	High risk	6	2026-06-18
`2026.5.82`	High risk	6	2026-06-18
`2026.5.76`	High risk	6	2026-06-18
`2026.5.72`	High risk	6	2026-06-18
`2026.5.68`	High risk	6	2026-06-18
`2026.5.61`	High risk	6	2026-06-18
`2026.5.59`	High risk	6	2026-06-18
`2026.5.51`	High risk	6	2026-06-18
`2026.5.47`	High risk	6	2026-06-18
`2026.5.45`	High risk	6	2026-06-18
`2026.5.43`	High risk	6	2026-06-18

Block this in CI

PkgRadar gates @gaodefa/daocore (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @gaodefa/[email protected]

Loading the latest scan…