PkgRadar

npm · registry.npmjs.org

@qwen-code/qwen-code

Credential file access: matched "AWS_ACCESS_KEY"

Why PkgRadar flagged 0.18.3-preview.0

SeveritySignalEvidence
mediumCredential file accessmatched "AWS_ACCESS_KEY" · package/chunks/chunk-55ZMG67I.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.18.3-preview.0Review72026-06-17
0.18.2Review72026-06-17
0.18.1-preview.1Review32026-06-17
0.18.1-preview.0Review32026-06-16
0.18.1-nightly.20260616.a68b2e1e7Review72026-06-16
0.18.1Review72026-06-15
0.18.0Review72026-06-12
0.18.0-preview.2Review72026-06-11
0.18.0-preview.1Review72026-06-09
0.18.0-preview.0Review52026-06-09
0.17.1-nightly.20260608.aea34fa2cReview52026-06-08
0.17.1-nightly.20260607.cef26a86aReview52026-06-07
0.17.1-nightly.20260606.16c1d9a5aReview52026-06-06
0.17.1-nightly.20260605.715266537Review52026-06-05
0.17.1-nightly.20260604.16dd99fa3Review52026-06-04
0.17.1Review52026-06-03
0.17.0-preview.0Review22026-06-03
0.17.0-nightly.20260602.cea15a118Review22026-06-03
0.17.0-nightly.20260603.68408c30cReview22026-06-03
0.17.0-nightly.20260601.1c48e4121Review22026-06-01
0.17.0-nightly.20260531.c699738f9Review22026-05-31
0.17.0-nightly.20260530.c699738f9Review22026-05-30
0.17.0Review22026-05-29
0.16.1-nightly.20260529.7bed56b9bReview22026-05-29
0.16.1-nightly.20260528.34b7d472eReview292026-05-28
0.16.2Review412026-05-27
0.16.1-nightly.20260527.641a1a739Review292026-05-27
0.16.1-preview.0Review292026-05-27
0.16.1-nightly.20260526.e8b79d772Review292026-05-26
0.16.1-nightly.20260524.84f408017Review1742026-05-25
0.16.1-nightly.20260525.84f408017Review1742026-05-25

Block this in CI

PkgRadar gates @qwen-code/qwen-code (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @qwen-code/[email protected]
Start free — 25 scans / moView full evidence