npm · registry.npmjs.org

@aws/lsp-codewhisperer

Credential file access: matched ".aws/"

Why PkgRadar flagged 0.0.119

Severity	Signal	Evidence
medium	Credential file access	matched ".aws/" · package/out/language-server/agenticChat/tools/chatDb/chatDb.js

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`0.0.119`	Review	29	2026-06-09
`0.0.118`	Review	38	2026-05-28
`0.0.116`	Review	40	2026-05-27
`0.0.117`	Review	40	2026-05-27

Block this in CI

PkgRadar gates @aws/lsp-codewhisperer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @aws/[email protected]