PkgRadar

npm · registry.npmjs.org

@mcp-use/cli

Credential file access: matched ".SSH"

Why PkgRadar flagged 3.2.1-canary.16

SeveritySignalEvidence
highCredential file accessmatched ".SSH" · package/dist/index.cjs
highCredential file accessmatched ".SSH" · package/dist/index.js
mediumRemote Payloadmatched "cUrl " · package/dist/index.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/index.cjs
mediumRemote Payloadmatched "cUrl " · package/dist/index.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.5.3-canary.4Low risk02026-06-16
3.5.3-canary.3Low risk02026-06-16
3.5.3-canary.2Low risk02026-06-16
3.5.3-canary.1Low risk02026-06-16
3.5.3-canary.0Low risk02026-06-16
3.5.2-canary.14Low risk02026-06-16
3.5.2Low risk02026-06-16
3.5.2-canary.12Low risk02026-06-16
3.5.2-canary.13Low risk02026-06-16
3.5.2-canary.11Low risk02026-06-16
3.5.2-canary.9Low risk02026-06-16
3.5.2-canary.10Low risk02026-06-16
3.5.2-canary.8Low risk02026-06-15
3.5.2-canary.7Low risk02026-06-15
3.5.2-canary.6Low risk02026-06-15
3.5.2-canary.4Low risk02026-06-15
3.5.2-canary.5Low risk02026-06-15
3.5.2-canary.3Low risk02026-06-15
3.5.2-canary.2Low risk02026-06-12
3.5.2-canary.1Low risk02026-06-11
3.5.2-canary.0Low risk02026-06-11
3.5.1Low risk02026-06-11
3.5.0Low risk02026-06-11
3.5.1-canary.0Low risk02026-06-11
3.5.0-canary.0Low risk02026-06-11
3.4.2Low risk02026-06-10
3.4.2-canary.1Low risk02026-06-10
3.4.2-canary.0Low risk02026-06-10
3.4.1Low risk02026-06-10
3.4.1-canary.0Low risk02026-06-10
3.4.0Low risk02026-06-10
3.4.0-canary.3Low risk02026-06-10
3.4.0-canary.2Low risk02026-06-10
3.4.0-canary.1Low risk02026-06-10
1.0.18Low risk02026-06-10
1.0.20Low risk02026-06-10
1.0.19Low risk02026-06-10
3.4.0-canary.0Low risk02026-06-10
3.3.2Low risk02026-06-10
3.3.2-canary.6Low risk02026-06-08
3.3.2-canary.5Low risk02026-06-08
3.3.2-canary.4Low risk02026-06-07
3.3.2-canary.3Low risk02026-06-05
3.3.2-canary.1Low risk02026-06-05
3.3.2-canary.2Low risk02026-06-05
3.3.2-canary.0Low risk02026-06-05
3.3.1Low risk02026-06-04
3.3.1-canary.2Low risk02026-06-04
3.3.1-canary.1Low risk02026-06-04
3.3.1-canary.0Low risk02026-06-03
3.3.0Low risk02026-06-03
3.3.0-canary.23Low risk02026-06-03
3.3.0-canary.22Low risk02026-06-03
3.3.0-canary.21Low risk02026-05-27
3.3.0-canary.20Low risk02026-05-27
3.3.0-canary.19Low risk02026-05-27
3.2.1-canary.18Low risk02026-05-26
3.2.1-canary.16Review742026-05-24
3.2.1-canary.17Review742026-05-24

Related campaigns

Block this in CI

PkgRadar gates @mcp-use/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @mcp-use/[email protected]
Start free — 25 scans / moView full evidence