PkgRadar

npm · registry.npmjs.org

@indigoai-us/hq-cloud

Credential file access: matched ".AWS"

Why PkgRadar flagged 5.36.0

SeveritySignalEvidence
highCredential file accessmatched ".AWS" · package/dist/bin/sync-runner.js
highCredential file accessmatched ".AWS" · package/src/bin/sync-runner.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
6.9.0Low risk02026-06-12
6.8.0Low risk02026-06-12
6.7.1Low risk02026-06-12
6.7.0Low risk02026-06-12
6.6.0Low risk02026-06-12
6.5.0Low risk02026-06-11
6.4.0Low risk02026-06-11
6.3.6Low risk02026-06-11
6.3.5Low risk02026-06-10
6.3.4Low risk02026-06-10
6.3.3Low risk02026-06-10
6.3.2Low risk02026-06-10
6.3.1Low risk02026-06-10
6.3.0Low risk02026-06-10
6.2.7Low risk02026-06-10
6.2.6Low risk02026-06-10
6.2.4Low risk02026-06-10
6.2.5Low risk02026-06-10
6.2.3Low risk02026-06-10
6.2.2Low risk02026-06-09
6.2.1Low risk02026-06-09
6.2.0Low risk02026-06-09
6.1.0Low risk02026-06-08
6.0.3Low risk02026-06-06
6.0.2Low risk02026-06-06
6.0.1Low risk02026-06-06
6.0.0Low risk02026-06-06
5.48.4Low risk02026-06-06
5.48.3Low risk02026-06-06
5.48.2Low risk02026-06-06
5.48.0Low risk02026-06-06
5.48.1Low risk02026-06-06
5.47.2Low risk02026-06-06
5.47.1Low risk02026-06-05
5.47.0Low risk02026-06-05
5.46.0Low risk02026-06-04
5.45.0Low risk02026-06-02
5.44.0Low risk02026-05-30
5.43.0Low risk02026-05-29
5.42.0Low risk02026-05-29
5.41.0Low risk02026-05-27
5.39.0Low risk02026-05-26
5.40.0Low risk02026-05-26
5.38.0Low risk02026-05-26
5.37.0Low risk02026-05-25
5.36.0Review502026-05-24
5.34.0Review502026-05-24
5.35.0Review502026-05-24

Block this in CI

PkgRadar gates @indigoai-us/hq-cloud (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @indigoai-us/[email protected]
Start free — 25 scans / moView full evidence