PkgRadar

npm · registry.npmjs.org

@pulumi/azuread

Credential file access: matched ".Azure"

Why PkgRadar flagged 6.10.0-alpha.1779511671

SeveritySignalEvidence
highCredential file accessmatched ".Azure" · package/getGroupRoleManagementPolicy.js
highCredential file accessmatched ".Azure" · package/groupRoleManagementPolicy.js
highCredential file accessmatched ".azure" · package/invitation.js
highCredential file accessmatched ".Azure" · package/privilegedAccessGroupAssignmentSchedule.js
highCredential file accessmatched ".Azure" · package/privilegedAccessGroupEligibilitySchedule.js
highCredential file accessmatched ".azure" · package/synchronizationJob.js
highCredential file accessmatched ".azure" · package/synchronizationJobProvisionOnDemand.js

Scanned versions

VersionVerdictScoreScanned (UTC)
6.10.0-alpha.1781252973Low risk02026-06-12
6.10.0-alpha.1781096923Low risk02026-06-10
6.9.1Low risk02026-06-10
6.10.0-alpha.1781074261Low risk02026-06-10
6.10.0-alpha.1780987296Low risk02026-06-09
6.10.0-alpha.1780943685Low risk02026-06-08
6.10.0-alpha.1780919031Low risk02026-06-08
6.10.0-alpha.1780907046Low risk02026-06-08
6.10.0-alpha.1780901452Low risk02026-06-08
6.10.0-alpha.1780814949Low risk02026-06-07
6.10.0-alpha.1780727418Low risk02026-06-06
6.10.0-alpha.1780642138Low risk02026-06-05
6.10.0-alpha.1780605897Low risk02026-06-04
5.53.9Low risk02026-06-03
6.10.0-alpha.1780122109Low risk02026-05-30
6.10.0-alpha.1780006941Low risk02026-05-29
6.10.0-alpha.1780007829Low risk02026-05-29
6.10.0-alpha.1779950543Low risk02026-05-28
6.10.0-alpha.1779924360Low risk02026-05-28
6.10.0-alpha.1779864372Low risk02026-05-27
6.10.0-alpha.1779777402Low risk02026-05-26
6.10.0-alpha.1779691601Low risk02026-05-25
6.10.0-alpha.1779511671Review1002026-05-24
6.10.0-alpha.1779604370Review1002026-05-24

Related campaigns

Block this in CI

PkgRadar gates @pulumi/azuread (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pulumi/[email protected]