npm · registry.npmjs.org
@aihubmix/ai-vendor-specs
Credential file access: matched ".aws"
Why PkgRadar flagged 0.1.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched ".aws" · package/upstream/anthropic/bedrock/metadata.json |
| high | Credential file access | matched ".azure" · package/upstream/openai/azure-preview/openapi.json |
| high | Credential file access | matched ".azure" · package/upstream/openai/azure/openapi.json |
| high | Credential file access | matched ".aws" · package/upstream/anthropic/bedrock/overlay.yml |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/scripts/build-manifest.js |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/manifest.json |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/upstream/cohere/official/metadata.json |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/upstream/openai/azure-preview/metadata.json |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/upstream/openai/azure/metadata.json |
| medium | Remote Payload | matched "raw.githubusercontent.com" · package/upstream/vertex/official/metadata.json |
| medium | Remote Payload | matched "curl\n " · package/upstream/cohere/official/openapi.yml |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.20260603.0 | Low risk | 0 | 2026-06-03 |
0.1.1 | Low risk | 0 | 2026-06-01 |
0.1.0 | Review | 124 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @aihubmix/[email protected]