PkgRadar

Package evidence

[email protected]

Remote Payload: matched "curl "

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
37
First published
May 2026
Publisher
kaiji1126

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarballAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'
Publisherkaiji1126
Artifact bytes27,538,344
Previous version2026.6.11
Published2026-06-12T10:05:21.308Z
SHA-25655aafa70c47247b3f88d831da1b60dad8178c305aa792e5849375234889e2bc7

Why flagged

What the scanner saw

Remote Payload: matched "curl "

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high
Last checked
highRisk
105Score
2026.6.12-2Version
Status history (1 event)
  1. new → available · risk high · score 105 · status changed

Evidence

Static findings

16 static · 0 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_chrome_beta_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_chrome_stable_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_msedge_beta_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_msedge_dev_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_msedge_stable_mac.shmatched "curl "12
mediumCredential file accesspackage/dist/install-package-dir-BjSokDjV.jsmatched ".npmrc"10
Show all 16 findings (low-signal and informational)
SeverityKindPathDetailPoints
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_chrome_beta_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_chrome_stable_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_msedge_beta_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_msedge_dev_mac.shmatched "curl "12
mediumRemote Payloadpackage/dist/extensions/diffs/node_modules/playwright-core/bin/reinstall_msedge_stable_mac.shmatched "curl "12
mediumCredential file accesspackage/dist/install-package-dir-BjSokDjV.jsmatched ".npmrc"10
lowCredential file accesspackage/dist/host-env-security-1-qBf4wh.jsmatched "GOOGLE_APPLICATION_CREDENTIALS"5
lowCredential file accesspackage/dist/model-auth-D6RZfWsE.jsmatched "AWS_ACCESS_KEY"5
lowCredential file accesspackage/dist/model-auth-markers-2IaWHAzl.jsmatched "AWS_ACCESS_KEY"5
lowCredential file accesspackage/dist/model-auth-runtime-shared-DVbW-PEX.jsmatched "AWS_ACCESS_KEY"5
lowCredential file accesspackage/dist/node-Px_cGPxH.jsmatched "AWS_ACCESS_KEY"5
lowCredential file accesspackage/dist/extensions/anthropic-vertex/provider-discovery.jsmatched "GOOGLE_APPLICATION_CREDENTIALS"5
lowCredential file accesspackage/dist/region-2KZ06fdS.jsmatched "GOOGLE_APPLICATION_CREDENTIALS"5
lowCredential file accesspackage/dist/extensions/diffs/node_modules/@shikijs/langs/dist/ssh-config.mjsmatched ".ssh/"5
lowInstall-time lifecycle scriptpackage.jsonpostinstall="node scripts/postinstall-bundled-plugins.mjs"5
lowLarge Javascript Payloadpackage/dist/extensions/diffs/assets/viewer-runtime.js9867326 bytes0

Manifest

Package metadata

Scripts145
  • audit:seamsnode scripts/audit-seams.mjs
  • buildnode scripts/build-all.mjs
  • build:dockernode scripts/tsdown-build.mjs && node scripts/runtime-postbuild.mjs && node scripts/build-stamp.mjs && node --import tsx scripts/canvas-a2ui-copy.ts && node --import tsx scripts/copy-hook-metadata.ts && node --import tsx scripts/copy-export-html-templates.ts && node --import tsx scripts/write-build-info.ts && node --experimental-strip-types scripts/write-cli-startup-metadata.ts && node --import tsx scripts/write-cli-compat.ts
  • build:plugin-sdk:dtstsc -p tsconfig.plugin-sdk.dts.json
  • build:strict-smokepnpm canvas:a2ui:bundle && node scripts/tsdown-build.mjs && node scripts/runtime-postbuild.mjs && node scripts/build-stamp.mjs && pnpm build:plugin-sdk:dts && node --import tsx scripts/write-plugin-sdk-entry-dts.ts && node scripts/check-plugin-sdk-exports.mjs
  • canvas:a2ui:bundlenode scripts/bundle-a2ui.mjs
  • checkpnpm check:no-conflict-markers && pnpm tool-display:check && pnpm tsgo && node scripts/prepare-extension-package-boundary-artifacts.mjs && pnpm lint && pnpm lint:webhook:no-low-level-body-read && pnpm lint:auth:no-pairing-store-group && pnpm lint:auth:pairing-account-scope
  • check:base-config-schemanode --import tsx scripts/generate-base-config-schema.ts --check
  • check:bundled-channel-config-metadatanode --import tsx scripts/generate-bundled-channel-config-metadata.ts --check
  • check:docspnpm format:docs:check && pnpm lint:docs && pnpm docs:check-i18n-glossary && pnpm docs:check-links
  • check:import-cyclesnode --import tsx scripts/check-import-cycles.ts
  • check:locnode --import tsx scripts/check-ts-max-loc.ts --max 500
  • check:no-conflict-markersnode scripts/check-no-conflict-markers.mjs
  • config:channels:checknode --import tsx scripts/generate-bundled-channel-config-metadata.ts --check
  • config:channels:gennode --import tsx scripts/generate-bundled-channel-config-metadata.ts --write
  • config:docs:checknode --import tsx scripts/generate-config-doc-baseline.ts --check
  • config:docs:gennode --import tsx scripts/generate-config-doc-baseline.ts --write
  • config:schema:checknode --import tsx scripts/generate-base-config-schema.ts --check
  • config:schema:gennode --import tsx scripts/generate-base-config-schema.ts --write
  • deadcode:knippnpm dlx knip --config knip.config.ts --production --no-progress --reporter compact --files --dependencies
  • deadcode:reportpnpm deadcode:knip; pnpm deadcode:ts-prune; pnpm deadcode:ts-unused
  • deadcode:ts-prunepnpm dlx ts-prune src extensions scripts
  • deadcode:ts-unusedpnpm dlx ts-unused-exports tsconfig.json --ignoreTestFiles --exitWithCount
  • devnode scripts/run-node.mjs
  • docs:binnode scripts/build-docs-list.mjs
  • docs:check-i18n-glossarynode scripts/check-docs-i18n-glossary.mjs
  • docs:check-linksnode scripts/docs-link-audit.mjs
  • docs:check-links:anchorsnode scripts/docs-link-audit.mjs --anchors
  • docs:devcd docs && mint dev
  • docs:listnode scripts/docs-list.js
  • …and 115 more.
Dependencies50
  • @agentclientprotocol/sdk0.18.0
  • @anthropic-ai/vertex-sdk^0.14.4
  • @aws-sdk/client-bedrock-runtime3.1024.0
  • @aws-sdk/credential-provider-node3.972.29
  • @clack/prompts^1.2.0
  • @homebridge/ciao^1.3.6
  • @lancedb/lancedb^0.27.2
  • @larksuiteoapi/node-sdk^1.60.0
  • @lydell/node-pty1.2.0-beta.10
  • @mariozechner/pi-agent-core0.65.2
  • @mariozechner/pi-ai0.65.2
  • @mariozechner/pi-coding-agent0.65.2
  • @mariozechner/pi-tui0.65.2
  • @modelcontextprotocol/sdk1.29.0
  • @mozilla/readability^0.6.0
  • @sinclair/typebox0.34.49
  • ajv^8.18.0
  • chalk^5.6.2
  • chokidar^5.0.0
  • cli-highlight^2.1.11
  • commander^14.0.3
  • croner^10.0.1
  • dotenv^17.4.0
  • express^5.2.1
  • file-type22.0.0
  • gaxios7.1.4
  • hono4.12.12
  • https-proxy-agent^9.0.0
  • ipaddr.js^2.3.0
  • jiti^2.6.1
  • …and 20 more.
Optional dependencies2
  • @larksuite/clilatest
  • openshell0.1.0