PkgRadar

npm · registry.npmjs.org

@chainpatrol/cli

Credential file access: matched ".SSH"

Why PkgRadar flagged 0.20.0

SeveritySignalEvidence
highCredential file accessmatched ".SSH" · package/dist/chunk-PZV55KAR.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/chunk-3LJTWYT6.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.23.0Low risk02026-06-13
0.22.0Low risk02026-06-03
0.21.0Low risk02026-05-27
0.20.0Review302026-05-25
0.18.0Review302026-05-24
0.19.0Review302026-05-24

Block this in CI

PkgRadar gates @chainpatrol/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @chainpatrol/[email protected]
Start free — 25 scans / moView full evidence