PkgRadar

npm · registry.npmjs.org

@pulumi/dbtcloud

Credential file access: matched ".Azure"

Why PkgRadar flagged 1.10.0-alpha.1779517666

SeveritySignalEvidence
highCredential file accessmatched ".Azure" · package/index.js
highCredential file accessmatched ".azure" · package/repository.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.11.0Low risk02026-06-11
1.11.0-alpha.1781153298Low risk02026-06-11
1.11.0-alpha.1781074814Low risk02026-06-10
1.11.0-alpha.1780987862Low risk02026-06-09
1.11.0-alpha.1780902072Low risk02026-06-09
1.11.0-alpha.1780727991Low risk02026-06-07
1.11.0-alpha.1780815415Low risk02026-06-07
1.11.0-alpha.1780642677Low risk02026-06-05
1.11.0-alpha.1780556393Low risk02026-06-04
1.11.0-alpha.1780470111Low risk02026-06-03
1.11.0-alpha.1780122613Low risk02026-05-30
1.10.1Low risk02026-05-30
1.10.1-alpha.1780116017Low risk02026-05-30
1.10.0Low risk02026-05-29
1.10.0-alpha.1780030148Low risk02026-05-29
1.10.0-alpha.1780006970Low risk02026-05-29
1.10.0-alpha.1779951197Low risk02026-05-28
1.10.0-alpha.1779864965Low risk02026-05-27
1.10.0-alpha.1779777971Low risk02026-05-26
1.10.0-alpha.1779517666Review752026-05-25
1.10.0-alpha.1779692167Review752026-05-25

Block this in CI

PkgRadar gates @pulumi/dbtcloud (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pulumi/[email protected]
Start free — 25 scans / moView full evidence