PkgRadar

npm · registry.npmjs.org

@devbro/pashmak

Credential file access: matched ".Aws"

Why PkgRadar flagged 0.1.60

SeveritySignalEvidence
highCredential file accessmatched ".Aws" · package/dist/cjs/cache/cache.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/generate/CreateFeatureCommand.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/DefaultCommand.js
highCredential file accessmatched ".Aws" · package/dist/cjs/facades.js
highCredential file accessmatched ".Aws" · package/dist/cjs/factories.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/generate/GenerateApiDocsCommand.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/generate/GenerateControllerCommand.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/migrate/GenerateMigrateCommand.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/queue/GenerateQueueMigrateCommand.js
highCredential file accessmatched ".Aws" · package/dist/cjs/http.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/generate/index.js
highCredential file accessmatched ".Aws" · package/dist/cjs/app/console/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.60Review502026-05-24
0.1.61Review502026-05-24

Related campaigns

Block this in CI

PkgRadar gates @devbro/pashmak (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @devbro/[email protected]