Package evidence

[email protected]

Webhook Exfil Endpoint: matched "ngrok-free.app"

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads: 2
Versions published: 14Established · −30% score
First published: Sep 2025
Publisher: ashwathg

Effective trust discount applied: −30% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'

Publisherashwathg

Artifact bytes3,938,124

Previous version0.2.2

Published2026-06-06T18:37:39.966Z

SHA-256f4c9ae21fdd741d48cf1b30f4497ddb6db09c6998ea41b6361288304484576ab

Why flagged

What the scanner saw

Webhook Exfil Endpoint: matched "ngrok-free.app"

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high

10h agoLast checked

highRisk

38Score

0.2.4Version

Status history (1 event)

new → available10h ago · risk high · score 38 · status changed

Evidence

Static findings

4 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
high	Webhook Exfil Endpoint	package/dist/src/providers/phone/audio-utils.js	matched "ngrok-free.app"	40

Show all 4 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
high	Webhook Exfil Endpoint	package/dist/src/providers/phone/audio-utils.js	matched "ngrok-free.app"	40
low	Credential file access	package/dist/src/util/secrets/providers/AWSSecretManagerProvider.js	matched "AWS_ACCESS_KEY"	5
low	Credential file access	package/dist/src/util/credentials/providers/AWSSTSProvider.js	matched "AWS_ACCESS_KEY"	5
low	Credential file access	package/dist/src/server/controller/application/get-application-monitoring-details.js	matched "AWS_ACCESS_KEY"	5

Manifest

Package metadata

Scripts40

audit:fixnpm audit fix && npm audit fix --prefix src/app && npm audit fix --prefix site
backfill:eval-denormnpx tsx scripts/backfillEvalResultsDenorm.ts
backfill:eval-denorm:chnpx tsx scripts/backfillEvalResultsDenorm.ts -- --targets ch
backfill:eval-denorm:pgnpx tsx scripts/backfillEvalResultsDenorm.ts -- --targets pg
bindist/src/main.js
buildcross-env NODE_OPTIONS=--max-old-space-size=4096 tsc && shx mkdir -p dist/src && shx cp src/*.html dist/src && shx mkdir -p dist/src/assertions/python && shx cp -r src/assertions/python/ dist/src/assertions && shx mkdir -p dist/src/python && shx cp src/python/wrapper.py dist/src/python && shx mkdir -p dist/src/golang && shx cp src/golang/wrapper.go dist/src/golang && shx rm -rf dist/drizzle && shx cp -r drizzle dist/drizzle && npm run build:app && shx chmod +x dist/src/main.js
build:appcross-env NODE_OPTIONS=--max-old-space-size=4096 npm run build --prefix src/app
build:cleanshx rm -rf dist
build:trusyscross-env NODE_OPTIONS=--max-old-space-size=4096 tsc && shx mkdir -p dist/src && shx cp src/*.html dist/src && shx mkdir -p dist/src/python && shx cp src/python/wrapper.py dist/src/python && shx mkdir -p dist/src/golang && shx cp src/golang/wrapper.go dist/src/golang && shx rm -rf dist/drizzle && shx cp -r drizzle dist/drizzle && shx chmod +x dist/src/main.js && shx rm -rf dist/test
build:watchcross-env NODE_OPTIONS=--max-old-space-size=4096 tsc --watch
citation:generatets-node scripts/generateCitation.ts
db:generatenpx drizzle-kit generate
db:migratenpx tsx src/migrate.ts
db:pushnpx drizzle-kit push
db:studionpx drizzle-kit studio
devconcurrently "npm run dev:server" "npm run dev:app"
dev:appnpm run dev --prefix src/app
dev:servernpx drizzle-kit push && nodemon -P 1000 src/server/index.ts
dev:server:debugnodemon -P 1000 src/server/index.ts
estimate:eval-denorm-backfillnpx tsx scripts/estimateEvalDenormBackfill.ts
fgit diff --name-only --diff-filter=ACMRTUXB origin/main | grep -E '\.(j2|js|jsx|mjs|cjs|ts|tsx|json|css|scss|html|md|mdc|mdx|yaml|yml)$' | xargs prettier --write
formatprettier -w .
format:checkprettier --check .
jsonSchema:generatenpx -y tsx scripts/generateJsonSchema.ts > site/static/config-schema.json | npx prettier --write site/static/config-schema.json
lgit diff --name-only --diff-filter=ACMRTUXB origin/main | grep -E '\.(js|ts|tsx)$' | xargs eslint --max-warnings=0 --fix --no-warn-ignored
lintnpm run lint:src
lint:siteeslint site --max-warnings=0
lint:srceslint src --max-warnings=0
lint:testseslint test --max-warnings=0
localts-node --cwdMode --transpileOnly src/main.ts
…and 10 more.

Dependencies89

@anthropic-ai/sdk^0.36.3
@apidevtools/json-schema-ref-parser^11.9.0
@aws-sdk/client-s3^3.850.0
@aws-sdk/s3-request-presigner^3.862.0
@azure/ai-projects^1.0.1
@azure/identity^4.10.0
@azure/keyvault-secrets^4.10.0
@azure/storage-blob^12.28.0
@clickhouse/client^1.11.2
@elevenlabs/elevenlabs-js^2.21.0
@googleapis/sheets^9.3.1
@langchain/core^1.1.27
@langchain/langgraph^1.1.5
@langchain/openai^1.2.9
@modelcontextprotocol/sdk^1.13.1
@openai/agents^0.3.6
@remix-run/router^1.23.0
@types/jszip^3.4.0
@types/multer^2.0.0
adm-zip^0.5.16
ajv^8.17.1
ajv-formats^3.0.1
async^3.2.6
aws-sdk^2.1692.0
axios^1.12.2
bson^6.10.4
cache-manager^4.1.0
cache-manager-fs-hash^1.0.0
chalk^4.1.2
chokidar4.0.3
…and 59 more.