Cargo · crates.io

smooai-smooth-operator-core

Shell Credential File Read, Webhook Exfil Endpoint, Credential file access

Why PkgRadar flagged 1.13.2

Severity	Signal	Evidence
high	Shell Credential File Read	—
high	Webhook Exfil Endpoint	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`1.13.2`	High risk	90	2026-08-20
`1.13.1`	High risk	90	2026-08-19
`1.13.0`	High risk	90	2026-08-19
`1.12.0`	High risk	90	2026-08-19
`1.11.0`	High risk	90	2026-08-19
`1.10.0`	High risk	90	2026-08-18
`1.9.0`	High risk	90	2026-08-17
`1.8.12`	High risk	90	2026-08-17
`1.8.11`	High risk	90	2026-08-17
`1.8.5`	High risk	90	2026-08-17
`1.8.4`	High risk	90	2026-08-17
`1.8.3`	High risk	90	2026-08-17
`1.8.1`	High risk	90	2026-08-17
`1.8.0`	High risk	90	2026-08-17
`1.7.16`	High risk	90	2026-08-17

Block this in CI

PkgRadar gates smooai-smooth-operator-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]

Prefer zero config? Install the GitHub App and it gates every pull request automatically — no pipeline edits, no API key.