npm · registry.npmjs.org
@gravity-platform/aws-nova
Credential file access: matched ".Aws"
Why PkgRadar flagged 1.2.7
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched ".Aws" · package/dist/Nova/service/utils/errors/AwsErrorHandler.js |
| high | Credential file access | matched ".aws" · package/dist/Nova/service/io/events/outgoing/handlers/ContentHandler.js |
| high | Credential file access | matched ".AWS" · package/dist/credentials/index.js |
| high | Credential file access | matched ".Aws" · package/dist/Nova/service/utils/index.js |
| high | Credential file access | matched ".aws" · package/dist/Nova/service/io/events/incoming/builders/StartEventBuilder.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.2.6 | Low risk | 0 | 2026-06-12 |
1.2.9 | Low risk | 0 | 2026-06-12 |
1.2.7 | Review | 100 | 2026-05-24 |
1.2.8 | Review | 100 | 2026-05-24 |
Related campaigns
- payner35 — 14 releases, max score 139
Block this in CI
pkgradar gate --ecosystem npm @gravity-platform/[email protected]