PkgRadar

npm · registry.npmjs.org

@iinm/plain-agent

Credential file access: matched ".azure"

Why PkgRadar flagged 1.10.19

SeveritySignalEvidence
highCredential file accessmatched ".azure" · package/src/providers/platform/azure.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
1.11.6Low risk02026-06-13
1.11.5Low risk02026-06-10
1.11.4Low risk02026-06-10
1.11.3Low risk02026-06-09
1.11.2Low risk02026-06-09
1.11.1Low risk02026-06-08
1.11.0Low risk02026-06-07
1.10.28Low risk02026-06-07
1.10.27Low risk02026-06-06
1.10.26Low risk02026-06-06
1.10.25Low risk02026-06-05
1.10.24Low risk02026-06-05
1.10.23Low risk02026-06-03
1.10.22Low risk02026-06-03
1.10.21Low risk02026-05-31
1.10.20Low risk02026-05-29
1.10.19Review302026-05-28
1.10.18Review302026-05-27
1.10.16Review302026-05-26
1.10.17Review302026-05-26

Block this in CI

PkgRadar gates @iinm/plain-agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @iinm/[email protected]
Start free — 25 scans / moView full evidence