PkgRadar

npm · registry.npmjs.org

@andespindola/brainlink

Credential file access: matched ".AWS"

Why PkgRadar flagged 0.1.0-beta.137

SeveritySignalEvidence
highCredential file accessmatched ".AWS" · package/dist/infrastructure/bucket-vault.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.4Low risk02026-06-09
1.0.3Low risk02026-06-08
1.0.2Low risk02026-06-08
1.0.1Low risk02026-06-08
1.0.0Low risk02026-06-08
0.1.0-beta.169Low risk02026-06-08
0.1.0-beta.168Low risk02026-06-08
0.1.0-beta.167Low risk02026-06-08
0.1.0-beta.166Low risk02026-06-05
0.1.0-beta.165Low risk02026-06-05
0.1.0-beta.164Low risk02026-06-02
0.1.0-beta.163Low risk02026-06-02
0.1.0-beta.161Low risk02026-06-02
0.1.0-beta.162Low risk02026-06-02
0.1.0-beta.158Low risk02026-06-02
0.1.0-beta.159Low risk02026-06-02
0.1.0-beta.157Low risk02026-06-02
0.1.0-beta.156Low risk02026-06-01
0.1.0-beta.155Low risk02026-06-01
0.1.0-beta.154Low risk02026-06-01
0.1.0-beta.153Low risk02026-05-31
0.1.0-beta.152Low risk02026-05-31
0.1.0-beta.151Low risk02026-05-31
0.1.0-beta.150Low risk02026-05-31
0.1.0-beta.148Low risk02026-05-28
0.1.0-beta.149Low risk02026-05-28
0.1.0-beta.141Low risk02026-05-27
0.1.0-beta.140Low risk02026-05-26
0.1.0-beta.139Low risk02026-05-26
0.1.0-beta.137Review302026-05-24
0.1.0-beta.138Review302026-05-24

Related campaigns

Block this in CI

PkgRadar gates @andespindola/brainlink (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @andespindola/[email protected]
Start free — 25 scans / moView full evidence