Loading the latest scan…
npm · registry.npmjs.org
Js B64 Hidden Command, Tls Verification Disabled
Why PkgRadar flagged 1.41.1-newly-public
| Severity | Signal | Evidence |
|---|---|---|
| high | Js B64 Hidden Command | — |
| high | Js B64 Hidden Command | — |
| medium | Tls Verification Disabled | — |
| medium | Tls Verification Disabled | — |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.41.1-newly-public | High risk | 22 | 2026-07-19 |
0.1.34-newly-public.40.1 | High risk | 22 | 2026-07-18 |
0.1.34-newly-public.38.1 | High risk | 22 | 2026-07-17 |
0.1.34-newly-public.37.1 | High risk | 22 | 2026-07-17 |
0.1.34-newly.12.1 | High risk | 30 | 2026-07-09 |
0.1.34-newly-public.11.1 | High risk | 45 | 2026-07-09 |
0.1.34-newly-public.6.1 | High risk | 45 | 2026-07-06 |
0.1.34-newly-public.5.1 | Review | 14 | 2026-07-03 |
0.1.34 | Review | 28 | 2026-07-03 |
Block this in CI
pkgradar gate --ecosystem npm @newly/[email protected]