PkgRadar

Cargo · crates.io

claudectl

Credential file access: matched "AWS_SECRET_ACCESS_KEY"

Why PkgRadar flagged 0.57.2

SeveritySignalEvidence
highCredential file accessmatched "AWS_SECRET_ACCESS_KEY" · claudectl-0.57.2/src/brain/diff_digest.rs
mediumRemote Payloadmatched "curl " · claudectl-0.57.2/src/brain/risk.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.57.2High risk422026-06-07
0.57.1High risk422026-06-07
0.57.0High risk422026-06-07
0.56.0High risk422026-06-07
0.55.0High risk422026-06-07
0.54.0High risk422026-06-07
0.51.0High risk422026-06-06
0.50.0High risk422026-05-30
0.49.3High risk422026-05-30
0.49.2High risk422026-05-30

Block this in CI

PkgRadar gates claudectl (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]
Start free — 25 scans / moView full evidence