PkgRadar

npm · registry.npmjs.org

@azure/arm-containerservice

Credential file access: matched ".azure"

Why PkgRadar flagged 25.2.0

SeveritySignalEvidence
highCredential file accessmatched ".azure" · package/dist/browser/static-helpers/cloudSettingHelpers.js
highCredential file accessmatched ".azure" · package/dist/commonjs/static-helpers/cloudSettingHelpers.js
highCredential file accessmatched ".azure" · package/dist/esm/static-helpers/cloudSettingHelpers.js
highCredential file accessmatched ".azure" · package/dist/react-native/static-helpers/cloudSettingHelpers.js
highCredential file accessmatched ".azure" · package/dist/browser/api/containerServiceContext.js
highCredential file accessmatched ".azure" · package/dist/commonjs/api/containerServiceContext.js
highCredential file accessmatched ".azure" · package/dist/esm/api/containerServiceContext.js
highCredential file accessmatched ".azure" · package/dist/react-native/api/containerServiceContext.js
highCredential file accessmatched ".Azure" · package/dist/commonjs/index.js
highCredential file accessmatched ".azure" · package/dist/browser/models/models.js
highCredential file accessmatched "kubeConfig" · package/dist/commonjs/models/models.js
highCredential file accessmatched ".azure" · package/dist/esm/models/models.js

Scanned versions

VersionVerdictScoreScanned (UTC)
25.4.0-beta.1Low risk02026-06-10
25.1.0Low risk02026-06-09
25.3.0Low risk02026-06-09
25.2.0Review1002026-05-25
25.3.0-beta.1Review1002026-05-25

Block this in CI

PkgRadar gates @azure/arm-containerservice (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @azure/[email protected]