PkgRadar

npm · registry.npmjs.org

@aicostguard-dev/auto

Credential file access: matched ".AWS"

Why PkgRadar flagged 0.3.0-beta.8

SeveritySignalEvidence
highCredential file accessmatched ".AWS" · package/dist/auto.cjs
highCredential file accessmatched ".AWS" · package/dist/diagnostics.cjs
highCredential file accessmatched ".AWS" · package/dist/index.cjs
highCredential file accessmatched ".AWS" · package/dist/auto.js
highCredential file accessmatched ".AWS" · package/dist/diagnostics.js
highCredential file accessmatched ".AWS" · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.3.0-beta.14Low risk02026-05-31
0.3.0-beta.13Low risk02026-05-31
0.3.0-beta.12Low risk02026-05-30
0.3.0-beta.11Low risk02026-05-30
0.3.0-beta.10Low risk02026-05-30
0.3.0-beta.9Low risk02026-05-30
0.3.0-beta.3Low risk02026-05-24
0.3.0-beta.8Review502026-05-24

Block this in CI

PkgRadar gates @aicostguard-dev/auto (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @aicostguard-dev/[email protected]