Loading the latest scan…
npm · registry.npmjs.org
Js Obfuscated Fetch Exec, Webhook Exfil Endpoint, Remote Payload +3 more
Why PkgRadar flagged 2026.6.5
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Obfuscated Fetch Exec | — |
| high | Webhook Exfil Endpoint | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
| medium | Remote Payload | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2026.6.5 | High risk | 189 | 2026-07-12 |
2026.6.4 | High risk | 194 | 2026-07-12 |
2026.3.17 | High risk | 189 | 2026-07-11 |
2026.3.16 | High risk | 189 | 2026-07-11 |
2026.5.12 | High risk | 213 | 2026-07-11 |
2026.6.3 | High risk | 194 | 2026-07-11 |
Related campaigns
Block this in CI
pkgradar gate --ecosystem npm @hanzo/[email protected]