PkgRadar

npm · registry.npmjs.org

@matterbridge/dgram

Credential file access: matched ".SSH"

Why PkgRadar flagged 3.8.0-dev-20260525-eed6b4a

SeveritySignalEvidence
highCredential file accessmatched ".SSH" · package/dist/mdns.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.9.0Low risk02026-06-12
3.9.0-dev-20260612-1840a85Low risk02026-06-12
3.9.0-dev-20260612-72f7125Low risk02026-06-12
3.9.0-dev-20260612-80cb9b0Low risk02026-06-12
3.9.0-dev-20260612-339f9b8Low risk02026-06-12
3.9.0-dev-20260612-94fd2e4Low risk02026-06-12
3.9.0-dev-20260611-fd7bca4Low risk02026-06-11
3.8.1-dev-20260610-f258cc7Low risk02026-06-10
3.8.1-dev-20260609-f3c25c0Low risk02026-06-09
3.8.1-dev-20260609-77be5baLow risk02026-06-09
3.8.1-dev-20260609-37884d6Low risk02026-06-09
3.8.1-dev-20260609-705c476Low risk02026-06-09
3.8.1-dev-20260608-9dc483fLow risk02026-06-08
3.8.1-dev-20260607-08cd4daLow risk02026-06-07
3.8.1-dev-20260606-d6bb335Low risk02026-06-06
3.8.0Low risk02026-06-05
3.8.0-dev-20260605-48352afLow risk02026-06-05
3.8.0-dev-20260604-48352afLow risk02026-06-04
3.8.0-dev-20260604-901f3fcLow risk02026-06-04
3.8.0-dev-20260603-c7525fbLow risk02026-06-03
3.8.0-dev-20260602-c7525fbLow risk02026-06-02
3.8.0-dev-20260601-a1bf774Low risk02026-06-01
3.8.0-dev-20260531-fafe993Low risk02026-05-31
3.8.0-dev-20260530-1971f9dLow risk02026-05-30
3.8.0-dev-20260529-1971f9dLow risk02026-05-29
3.8.0-dev-20260528-1971f9dLow risk02026-05-28
3.8.0-dev-20260528-b4148f4Low risk02026-05-28
3.8.0-dev-20260527-b4148f4Low risk02026-05-27
3.8.0-dev-20260526-20ee3dcLow risk02026-05-26
3.8.0-dev-20260525-eed6b4aReview302026-05-25
3.8.0-dev-20260524-eed6b4aReview302026-05-24
3.7.10Review302026-05-24
3.8.0-dev-20260524-92c5fddReview302026-05-24

Block this in CI

PkgRadar gates @matterbridge/dgram (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @matterbridge/[email protected]
Start free — 25 scans / moView full evidence