PkgRadar

npm · registry.npmjs.org

@aiscene/aiserver

Credential File Packaged: package/dist/.env

Why PkgRadar flagged 1.7.1

SeveritySignalEvidence
highCredential File Packagedpackage/dist/.env · package/dist/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
1.7.1High risk352026-06-12
1.7.0High risk352026-06-12
1.6.9High risk352026-06-11
1.6.8High risk352026-06-11
1.6.7High risk352026-06-10
1.6.6High risk352026-06-10
1.6.5High risk352026-06-10
1.6.4High risk352026-06-10
1.6.3High risk352026-06-10
1.6.2High risk352026-06-10
1.6.1High risk352026-06-10
1.5.9High risk352026-06-10
1.6.0High risk352026-06-10

Block this in CI

PkgRadar gates @aiscene/aiserver (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @aiscene/[email protected]