PkgRadar

npm · registry.npmjs.org

@inspectr/mcplab-core

Credential file access: matched ".AZURE"

Why PkgRadar flagged 1.11.1

SeveritySignalEvidence
highCredential file accessmatched ".AZURE" · package/dist/agent.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.17.0Low risk02026-06-12
1.16.0Low risk02026-06-04
1.15.0Low risk02026-05-28
1.14.0Low risk02026-05-28
1.13.0Low risk02026-05-27
1.11.1Review302026-05-24
1.12.0Review302026-05-24

Related campaigns

Block this in CI

PkgRadar gates @inspectr/mcplab-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @inspectr/[email protected]