PkgRadar

npm · registry.npmjs.org

@builder.io/dev-tools

Credential file access: matched "id_rsa"

Early detection

PkgRadar flagged this 1.5 days before public disclosure

Detected 2026-06-08 · disclosed as MAL-2026-5493 on 2026-06-10

Scanned versions

VersionVerdictScoreScanned (UTC)
1.66.2-dev.202606171521.7b85e8886Low risk02026-06-17
1.66.2-dev.202606171451.b760d4427Low risk02026-06-17
1.67.0Low risk02026-06-17
1.66.2-beta.202606171357.504b02a.allow-pkill-and-pgrep-in-the-fusion-launLow risk02026-06-17
1.66.2-beta.202606171353.9c19668.allow-pkill-and-pgrep-in-the-fusion-launLow risk02026-06-17
1.66.2-beta.202606171327.fb3692d.allow-pkill-and-pgrep-in-the-fusion-launLow risk02026-06-17
1.66.2-beta.202606171311.b8846c8.tighten-pr-highlight-recordframe-guidancLow risk02026-06-17
1.66.1-dev.202606171106.3ccc9cebaLow risk02026-06-17
1.66.1-dev.202606171044.010892d76Low risk02026-06-17
1.66.2Low risk02026-06-17
1.66.1-beta.202606170736.b32bf7a.fix-bash-acl-incorrectly-blocking-validLow risk02026-06-17
1.66.1-dev.202606161652.35dde6127Low risk02026-06-16
1.66.1Low risk02026-06-16
1.66.0-beta.202606161507.0d6820f.add-deploy-pod-build-and-upload-pipelineLow risk02026-06-16
1.66.0-beta.202606161450.0f43f75.use-no-cors-reachability-only-http-checkLow risk02026-06-16
1.66.0-beta.202606161038.8dc8522.add-deletehosting-request-response-schemLow risk02026-06-16
1.66.0-beta.202606160903.c62327a.add-deletehosting-request-response-schemLow risk02026-06-16
1.66.0-beta.202606161027.ffdb2a3.add-deletehosting-request-response-schemLow risk02026-06-16
1.66.0-beta.202606160517.35617e7.add-deletehosting-request-response-schemLow risk02026-06-16
1.66.0-beta.202606152024.c22d8ce.add-deletehosting-request-response-schemLow risk02026-06-15
1.66.0-dev.202606151853.47d79d2c1Low risk02026-06-15
1.66.0-beta.202606151600.517649Low risk02026-06-15
1.66.0-beta.202606151706.8cef5b5Low risk02026-06-15
1.66.0-beta.202606151552.13df2baLow risk02026-06-15
1.66.0-beta.202606151352.23e13f9Low risk02026-06-15
1.66.0-beta.202606122233.47d79d2Low risk02026-06-12
1.66.0-beta.202606122056.cd9a82eLow risk02026-06-12
1.66.0-beta.202606121949.e952670Low risk02026-06-12
1.65.2-dev.202606121843.c2dbf6b3cLow risk02026-06-12
1.65.2-dev.202606121847.c2dbf6b3cLow risk02026-06-12
1.65.2-dev.202606121840.c2dbf6b3cLow risk02026-06-12
1.65.2-dev.202606121802.c2dbf6b3cLow risk02026-06-12
1.66.0-beta.202606121755.49553fcLow risk02026-06-12
1.65.2-dev.202606121727.c2dbf6b3cLow risk02026-06-12
1.66.0Low risk02026-06-12
1.66.0-beta.202606121644.47b75a5Low risk02026-06-12
1.65.2-beta.202606121629.d2f70c4Low risk02026-06-12
1.65.2-beta.202606121620.bed4386Low risk02026-06-12
1.65.2-beta.202606121453.4c4a962Low risk02026-06-12
1.65.2-beta.202606121612.f4ad6e5Low risk02026-06-12
1.65.2-beta.202606121440.3d385e5Low risk02026-06-12
1.65.2-beta.202606121347.4fa7e68Low risk02026-06-12
1.65.2-beta.202606121221.c18da15Low risk02026-06-12
1.65.2-beta.202606121205.2426e76Low risk02026-06-12
1.65.2-beta.202606121105.6ce62beLow risk02026-06-12
1.65.2Low risk02026-06-12
1.65.1-beta.202606121024.bf2bd60Low risk02026-06-12
1.65.1-beta.202606121021.4484504Low risk02026-06-12
1.65.1-beta.202606121012.1a361bcLow risk02026-06-12
1.65.1-beta.202606120727.e1d415cLow risk02026-06-12
1.65.1-beta.202606120428.e0f3c40Low risk02026-06-12
1.65.1-beta.202606120037.7f6da7bLow risk02026-06-12
1.65.1-beta.202606112015.bd7ae6eLow risk02026-06-11
1.65.1-beta.202606111906.32819a4Low risk02026-06-11
1.65.1-beta.202606111725.4f55293Low risk02026-06-11
1.65.1-beta.202606111728.e7d546bLow risk02026-06-11
1.65.1-beta.202606111711.94e8e21Low risk02026-06-11
1.65.1-beta.202606111647.402a7ecLow risk02026-06-11
1.65.1-beta.202606111617.9f9a465Low risk02026-06-11
1.65.1-beta.202606111556.4436892Low risk02026-06-11
1.65.1-beta.202606111538.57f4257Low risk02026-06-11
1.65.1-beta.202606111506.9829315Low risk02026-06-11
1.65.1-beta.202606111431.c0c88beLow risk02026-06-11
1.65.1-beta.202606111359.597909bLow risk02026-06-11
1.65.1-beta.202606111201.87765e3Low risk02026-06-11
1.65.1-beta.202606111220.5e1fdd6Low risk02026-06-11
1.65.1-beta.202606111108.f86624eLow risk02026-06-11
1.65.1Low risk02026-06-11
1.65.1-beta.202606111033.47c06bbLow risk02026-06-11
1.65.0-beta.202606111021.17afc2eLow risk02026-06-11
1.65.0-beta.202606110948.8c373e4Low risk02026-06-11
1.65.0-beta.202606110942.01b5007Low risk02026-06-11
1.65.0-beta.202606110817.b43480fLow risk02026-06-11
1.65.0-beta.202606102044.72b9c0fLow risk02026-06-10
1.65.0-beta.202606102059.0c899f5Low risk02026-06-10
1.65.0-beta.202606102011.baf7b09Low risk02026-06-10
1.65.0Low risk02026-06-10
1.65.0-beta.202606101946.dc7f59dLow risk02026-06-10
1.64.3-beta.202606101831.9d87554Low risk02026-06-10
1.64.3-beta.202606101606.c50d3f0Low risk02026-06-10
1.64.3-beta.202606101533.c0d87aeLow risk02026-06-10
1.64.3-beta.202606101450.b99f7dbLow risk02026-06-10
1.64.3-beta.202606101353.e6eb3e6Low risk02026-06-10
1.64.3-beta.202606101408.88e37b8Low risk02026-06-10
1.64.3-beta.202606101340.ce4181cLow risk02026-06-10
1.64.3Low risk02026-06-10
1.64.3-beta.202606101240.8793206Low risk02026-06-10
1.64.3-beta.202606101039.a41fee2Low risk02026-06-10
1.64.2-beta.202606100807.c512132Low risk02026-06-10
1.64.2-beta.202606100020.95cbe0bLow risk02026-06-10
1.64.2-beta.202606092350.c45d66fLow risk02026-06-09
1.64.2-beta.202606092106.da31a10Low risk02026-06-09
1.64.2-beta.202606091955.b372e0fLow risk02026-06-09
1.63.1-dev.202606091937.a3b03427eReview52026-06-09
1.64.2-beta.202606091632.73044f6Low risk02026-06-09
1.64.2-beta.202606091558.79e816eLow risk02026-06-09
1.64.2-beta.202606091618.c97db1eLow risk02026-06-09
1.64.2-beta.202606091533.72ef003Low risk02026-06-09
1.64.2-beta.202606091524.9594880Low risk02026-06-09
1.64.2-beta.202606091257.db92e47Low risk02026-06-09
1.64.2-beta.202606091112.9dcdde3Low risk02026-06-09
1.63.1-dev.202606090631.c5e966814Low risk02026-06-09
1.64.2-beta.202606091011.087ec4dLow risk02026-06-09
1.64.2-beta.202606090450.ae227aeLow risk02026-06-09
1.64.2-dev.202606082025.8ce823363Review52026-06-08
1.64.2-dev.202606081952.82e0e57bbReview52026-06-08
1.64.2-dev.202606081921.b0dd50edfReview52026-06-08
1.64.2-beta.202606081803.258f5ecLow risk02026-06-08
1.64.2-beta.202606081610.17f8998Low risk02026-06-08
1.64.2-beta.202606081652.bec24f8Low risk02026-06-08
1.64.2-beta.202606081419.b4fc5b2Low risk02026-06-08
1.62.0-dev.202606081416.cb92a3f56Low risk02026-06-08
1.64.2-beta.202606081402.2979775Low risk02026-06-08
1.64.2-beta.202606081411.c76b0d4Low risk02026-06-08
1.64.2Low risk02026-06-08
1.64.2-beta.202606081146.ab08729Low risk02026-06-08
1.64.1-beta.202606081115.eb6eb34Low risk02026-06-08
1.64.1-beta.202606080956.91be59eLow risk02026-06-08
1.64.1-beta.202606080946.2e682afLow risk02026-06-08
1.64.1-beta.202606052141.6278c71Low risk02026-06-05
1.64.1-beta.202606051942.cfaf9fbLow risk02026-06-05
1.64.1-beta.202606051829.cba51dbLow risk02026-06-05
1.64.1-beta.202606051747.0a66eddLow risk02026-06-05
1.64.1-beta.202606051751.55497aaLow risk02026-06-05
1.64.1-beta.202606051519.bd42c90Low risk02026-06-05
1.64.1-beta.202606051534.c5c2e85Low risk02026-06-05
1.64.1-beta.202606051314.b9aa68cLow risk02026-06-05
1.64.1-beta.202606051251.5887497Low risk02026-06-05
1.64.1-beta.202606050747.03d0e52Low risk02026-06-05
1.64.1Low risk02026-06-05
1.64.1-beta.202606050336.93ea315Low risk02026-06-05
1.64.0-beta.202606050102.d545e66Low risk02026-06-05
1.64.0-beta.202606042005.b5807baLow risk02026-06-04
1.64.0-beta.202606042035.4a2e85aLow risk02026-06-04
1.64.0Low risk02026-06-04
1.64.0-beta.202606041513.f24ef4dLow risk02026-06-04
1.63.1-beta.202606040748.c60b3e2Low risk02026-06-04
1.63.1-beta.202606032200.61b5b26Low risk02026-06-03
1.63.1-beta.202606032204.c83d754Low risk02026-06-03
1.63.1-dev.202606031857.22926bac1Review52026-06-03
1.63.1-beta.202606031709.22926baLow risk02026-06-03
1.63.1-dev.202606031719.c8ee65030Review52026-06-03
1.63.1-beta.202606031424.a42a079Low risk02026-06-03
1.63.1-beta.202606031447.74c3352Low risk02026-06-03
1.63.1-beta.202606031131.e836ffbLow risk02026-06-03
1.63.1-beta.202606031028.872cdf1Low risk02026-06-03
1.63.1Low risk02026-06-03
1.63.0-beta.202606021756.e5fa63cLow risk02026-06-02
1.63.0-beta.202606021821.5efe12eLow risk02026-06-02
1.62.0-beta.202606021128.823995Low risk02026-06-02
1.62.0-beta.202606021154.af420e1Low risk02026-06-02
1.62.0-beta.202606021032.be31c1cLow risk02026-06-02
1.62.0-beta.202606020946.41141c3Low risk02026-06-02
1.62.0-beta.202606012326.6a6fd33Low risk02026-06-02
1.62.0-beta.202606011940.669a07bLow risk02026-06-01
1.62.0-beta.202606012049.4fec9f6Low risk02026-06-01
1.62.0-beta.202606011723.f3186b6Low risk02026-06-01
1.62.0-beta.202606011741.9dd99f0Low risk02026-06-01
1.62.0-beta.202605292059.7577804Low risk02026-05-29
1.62.0Low risk02026-05-29
1.61.3-beta.202605291250.2d53da2Low risk02026-05-29
1.61.3-beta.202605291258.f681e36Low risk02026-05-29
1.61.2-beta.202605291033.dc14323Low risk02026-05-29
1.61.2-beta.202605290920.844f87bLow risk02026-05-29
1.61.2-beta.202605282125.ea457d6Low risk02026-05-29
1.61.2Low risk02026-05-29
1.61.0-dev.202605272155.ea28ee357Review152026-05-28
1.61.0-beta.202605280128.9b2fcecReview172026-05-28
1.60.1-beta.202605270612.5d85b1dReview172026-05-27
1.60.1Review172026-05-27
1.60.0-beta.202605262047.99658a4Review172026-05-27
1.60.0-beta.202605262053.1ee9544Review172026-05-27
1.60.0-beta.202605260842.907931bReview172026-05-26
1.60.0-beta.202605251446.c708c6cReview172026-05-25
1.60.0Review172026-05-25

Block this in CI

PkgRadar gates @builder.io/dev-tools (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @builder.io/[email protected]
Start free — 25 scans / moView full evidence