PkgRadar

npm · registry.npmjs.org

@medusajs/file-s3

Credential file access: matched ".aws"

Why PkgRadar flagged 2.15.5-preview-20260525042800

SeveritySignalEvidence
highCredential file accessmatched ".aws" · package/dist/services/s3-file.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.16.0-preview-20260613153007Low risk02026-06-13
2.16.0-preview-20260613122905Low risk02026-06-13
2.16.0-preview-20260613071149Low risk02026-06-13
2.16.0-preview-20260613095900Low risk02026-06-13
2.16.0-preview-20260613002809Low risk02026-06-13
2.16.0-preview-20260612213020Low risk02026-06-12
2.16.0-preview-20260612183413Low risk02026-06-12
2.16.0-preview-20260612160149Low risk02026-06-12
2.16.0-preview-20260612102802Low risk02026-06-12
2.16.0-preview-20260612072853Low risk02026-06-12
2.16.0-preview-20260612071103Low risk02026-06-12
2.16.0-preview-20260612042832Low risk02026-06-12
2.16.0-preview-20260612002748Low risk02026-06-12
2.16.0-snapshot-20260611191046Low risk02026-06-11
2.16.0-preview-20260611213800Low risk02026-06-11
2.16.0-preview-20260611185403Low risk02026-06-11
2.16.0-preview-20260611162208Low risk02026-06-11
2.16.0-preview-20260611102936Low risk02026-06-11
2.16.0-snapshot-20260611090646Low risk02026-06-11
2.16.0-snapshot-20260611082613Low risk02026-06-11
2.16.0-snapshot-20260611074358Low risk02026-06-11
2.16.0-preview-20260611070214Low risk02026-06-11
2.16.0-snapshot-20260611063116Low risk02026-06-11
2.16.0-preview-20260611042812Low risk02026-06-11
2.16.0-preview-20260611002843Low risk02026-06-11
2.16.0-preview-20260610213811Low risk02026-06-10
2.16.0-preview-20260610184647Low risk02026-06-10
2.16.0-preview-20260610161511Low risk02026-06-10
2.16.0-snapshot-20260610151046Low risk02026-06-10
2.16.0-preview-20260610125926Low risk02026-06-10
2.16.0-preview-20260610112749Low risk02026-06-10
2.16.0-preview-20260610110926Low risk02026-06-10
2.16.0-preview-20260610105346Low risk02026-06-10
2.16.0-preview-20260610091709Low risk02026-06-10
2.16.0-snapshot-20260610064051Low risk02026-06-10
2.16.0-preview-20260610002622Low risk02026-06-10
2.16.0-preview-20260609213116Low risk02026-06-10
2.16.0-preview-20260609183817Low risk02026-06-09
2.16.0-preview-20260609155904Low risk02026-06-09
2.16.0-preview-20260609070605Low risk02026-06-09
2.16.0-preview-20260609042303Low risk02026-06-09
2.16.0-preview-20260609002044Low risk02026-06-09
2.16.0-preview-20260608213159Low risk02026-06-08
2.16.0-preview-20260608184341Low risk02026-06-08
2.16.0-preview-20260608162220Low risk02026-06-08
2.16.0-preview-20260608131916Low risk02026-06-08
2.16.0-preview-20260608073039Low risk02026-06-08
2.16.0-preview-20260608042831Low risk02026-06-08
2.16.0-preview-20260608002445Low risk02026-06-08
2.16.0-preview-20260607212416Low risk02026-06-07
2.16.0-preview-20260607182150Low risk02026-06-07
2.16.0-preview-20260607152819Low risk02026-06-07
2.16.0-preview-20260607122607Low risk02026-06-07
2.16.0-preview-20260607095940Low risk02026-06-07
2.16.0-preview-20260607071642Low risk02026-06-07
2.16.0-preview-20260607042812Low risk02026-06-07
2.16.0-preview-20260607002242Low risk02026-06-07
2.16.0-preview-20260606212012Low risk02026-06-06
2.16.0-preview-20260606182205Low risk02026-06-06
2.16.0-preview-20260606152504Low risk02026-06-06
2.16.0-preview-20260606122110Low risk02026-06-06
2.16.0-preview-20260606093810Low risk02026-06-06
2.16.0-preview-20260606065808Low risk02026-06-06
2.16.0-preview-20260606042127Low risk02026-06-06
2.16.0-preview-20260606002314Low risk02026-06-06
2.16.0-preview-20260605212844Low risk02026-06-05
2.16.0-preview-20260605183356Low risk02026-06-05
2.16.0-preview-20260605155827Low risk02026-06-05
2.16.0-options-preview-20260605124754Low risk02026-06-05
2.15.6-preview-20260605072031Low risk02026-06-05
2.15.6-preview-20260605042754Low risk02026-06-05
2.15.6-preview-20260605002410Low risk02026-06-05
2.15.6-preview-20260604213006Low risk02026-06-04
2.15.6-preview-20260604184003Low risk02026-06-04
2.15.6-preview-20260604160619Low risk02026-06-04
2.15.6-preview-20260604125426Low risk02026-06-04
2.15.6-preview-20260604101553Low risk02026-06-04
2.15.6-preview-20260604072853Low risk02026-06-04
2.15.6-preview-20260604042824Low risk02026-06-04
2.15.6-preview-20260604003214Low risk02026-06-04
2.15.6-preview-20260603215704Low risk02026-06-03
2.15.6-preview-20260603191113Low risk02026-06-03
2.15.6-preview-20260603163110Low risk02026-06-03
2.16.0-snapshot-20260603131403Low risk02026-06-03
2.15.6-preview-20260603132452Low risk02026-06-03
2.15.6-preview-20260603103142Low risk02026-06-03
2.15.6-preview-20260603073149Low risk02026-06-03
2.15.6-preview-20260603042847Low risk02026-06-03
2.15.6-preview-20260603003142Low risk02026-06-03
2.15.6-preview-20260602215642Low risk02026-06-02
2.15.6-preview-20260602190553Low risk02026-06-02
2.15.6-preview-20260602163001Low risk02026-06-02
2.15.6-preview-20260602130418Low risk02026-06-02
2.15.6-preview-20260602102950Low risk02026-06-02
2.15.6-preview-20260602072904Low risk02026-06-02
2.15.6-preview-20260602042835Low risk02026-06-02
2.15.6-preview-20260602002651Low risk02026-06-02
2.15.6-preview-20260601215956Low risk02026-06-01
2.15.6-preview-20260601193424Low risk02026-06-01
2.15.6-preview-20260601164843Low risk02026-06-01
2.15.6-preview-20260601135003Low risk02026-06-01
2.15.6-preview-20260601104039Low risk02026-06-01
2.15.6-preview-20260601073416Low risk02026-06-01
2.15.5Low risk02026-05-29
2.15.5-preview-20260529071036Low risk02026-05-29
2.15.5-preview-20260529042707Low risk02026-05-29
2.15.5-preview-20260528213549Low risk02026-05-29
2.15.5-preview-20260529002348Low risk02026-05-29
2.15.5-preview-20260528102332Low risk02026-05-28
2.15.5-preview-20260528130220Low risk02026-05-28
2.15.5-preview-20260528071012Low risk02026-05-28
2.15.5-preview-20260528042528Low risk02026-05-28
2.15.5-preview-20260527213205Low risk02026-05-28
2.15.5-preview-20260528002022Low risk02026-05-28
2.15.5-snapshot-20260526085619Low risk02026-05-26
2.15.5-preview-20260526102049Low risk02026-05-26
2.15.5-preview-20260526070309Low risk02026-05-26
2.15.5-preview-20260526042351Low risk02026-05-26
2.15.5-preview-20260526002046Low risk02026-05-26
2.15.5-preview-20260525212304Low risk02026-05-25
2.15.5-preview-20260525182829Low risk02026-05-25
2.15.5-preview-20260525155625Low risk02026-05-25
2.15.5-preview-20260525130010Low risk02026-05-25
2.15.5-preview-20260525102758Low risk02026-05-25
2.15.5-preview-20260525072343Low risk02026-05-25
2.15.5-preview-20260525042800Review302026-05-25
2.15.5-preview-20260525002045Review302026-05-25
2.15.5-preview-20260524211621Review302026-05-24
2.15.5-preview-20260524181646Review302026-05-24
2.15.5-preview-20260524152218Review302026-05-24
2.15.5-preview-20260524121647Review302026-05-24
2.15.5-preview-20260524093424Review302026-05-24
2.15.5-preview-20260524065951Review302026-05-24
2.15.5-preview-20260524001925Review302026-05-24
2.15.5-preview-20260524042533Review302026-05-24

Block this in CI

PkgRadar gates @medusajs/file-s3 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @medusajs/[email protected]
Start free — 25 scans / moView full evidence