PkgRadar

npm · registry.npmjs.org

@backstage/backend-defaults

Shell Credential File Read

Why PkgRadar flagged 0.0.0-nightly-20260623032249

SeveritySignalEvidence
highShell Credential File Readpackage/dist/entrypoints/auth/plugin/keys/createPluginKeySource.cjs.js

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-nightly-20260623032249High risk132026-06-23
0.0.0-nightly-20260622032447Low risk02026-06-22
0.0.0-nightly-20260621032345Low risk02026-06-21
0.0.0-nightly-20260620032105Low risk02026-06-21
0.0.0-nightly-20260619032606Low risk02026-06-19
0.0.0-nightly-20260618032436Low risk02026-06-18
0.17.3Low risk02026-06-16
0.0.0-nightly-20260616032439Low risk02026-06-16
0.0.0-nightly-20260615032517Low risk02026-06-15
0.0.0-nightly-20260614032343Low risk02026-06-15
0.0.0-nightly-20260613032133Low risk02026-06-13
0.0.0-nightly-20260612032440Low risk02026-06-13
0.0.0-nightly-20260611032059Low risk02026-06-11
0.0.0-nightly-20260610032156Low risk02026-06-10
0.17.3-next.2Low risk02026-06-09
0.0.0-nightly-20260609032118Low risk02026-06-09
0.0.0-nightly-20260608032505Low risk02026-06-09
0.0.0-nightly-20260607032244Low risk02026-06-07
0.0.0-nightly-20260606031950Low risk02026-06-06
0.0.0-nightly-20260605032312Low risk02026-06-05
0.0.0-nightly-20260604032348Low risk02026-06-04
0.0.0-nightly-20260603032450Low risk02026-06-03
0.17.3-next.1Low risk02026-06-02
0.0.0-nightly-20260602032639Low risk02026-06-02
0.0.0-nightly-20260601032430Low risk02026-06-02
0.0.0-nightly-20260531032321Low risk02026-05-31
0.0.0-nightly-20260530032139Low risk02026-05-30
0.17.2Low risk02026-05-29
0.0.0-nightly-20260529032432Low risk02026-05-29
0.0.0-nightly-20260528032551Low risk02026-05-28
0.0.0-nightly-20260527032423Low risk02026-05-27
0.17.2-next.0Low risk02026-05-26
0.17.1Low risk02026-05-26
0.0.0-nightly-20260526032421Low risk02026-05-26

Block this in CI

PkgRadar gates @backstage/backend-defaults (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @backstage/[email protected]
Start free — 25 scans / moView full evidence