PkgRadar

npm · registry.npmjs.org

@pentoshi/clai

Credential file access: matched ".aws/"

Why PkgRadar flagged 1.2.4

SeveritySignalEvidence
highCredential file accessmatched ".aws/" · package/dist/llm/aws-mantle.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.4Review352026-06-13
1.2.3Review352026-06-13
1.2.2Review352026-06-11
1.2.0Review352026-06-11
1.2.1Review352026-06-11
1.1.4Review352026-06-11
1.1.3Review242026-06-07
1.1.1Review32026-06-05
1.1.2Review32026-06-05
1.1.0Review32026-06-04
1.0.9Review52026-06-02
1.0.8Review32026-06-02
1.0.7Review32026-06-02
1.0.6Review52026-06-02
1.0.4Review52026-06-02
0.10.4Review52026-05-30
0.10.5Review32026-05-30
0.9.8Review32026-05-30
0.9.9Review32026-05-30
0.9.7Review52026-05-30
0.9.6Review52026-05-30
0.8.2Review32026-05-30
0.9.0Review52026-05-30
1.0.2Review52026-05-29
1.0.3Review32026-05-29
0.12.0Review32026-05-29
0.13.0Review32026-05-29
0.11.1Review52026-05-28
0.11.2Review52026-05-28
0.8.1Review742026-05-24
0.8.0Review742026-05-24
0.7.3Review742026-05-24
0.7.2Review742026-05-24
0.7.1Review742026-05-24
0.6.0Review742026-05-24

Block this in CI

PkgRadar gates @pentoshi/clai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pentoshi/[email protected]
Start free — 25 scans / moView full evidence