npm · registry.npmjs.org
@mc-and-his-agents/loom-installer
Credential file access: matched "GITHUB_TOKEN"
Why PkgRadar flagged 0.1.118
| Severity | Signal | Evidence |
|---|---|---|
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-build/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/loom-story/.loom-runtime/shared/scripts/loom_flow.py |
| medium | Credential file access | matched "GITHUB_TOKEN" · package/payload/plugin/loom/skills/shared/scripts/loom_flow.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.1.118 | Review | 35 | 2026-05-26 |
0.1.119 | Review | 35 | 2026-05-26 |
Block this in CI
pkgradar gate --ecosystem npm @mc-and-his-agents/[email protected]