npm · registry.npmjs.org

@rongcloud/electron

Credential file access: matched ".AWS"

Why PkgRadar flagged 5.30.0-enterprise-alpha.16

Severity	Signal	Evidence
high	Credential file access	matched ".AWS" · package/index.cjs
high	Credential file access	matched ".AWS" · package/index.cjs.js
high	Credential file access	matched ".AWS" · package/index.esm.js
high	Credential file access	matched ".AWS" · package/sub-process.cjs.js
high	Credential file access	matched ".AWS" · package/sub-process.esm.js
high	Credential file access	matched ".AWS" · package/index.mjs

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`5.40.0`	Low risk	0	2026-06-01
`5.30.0-enterprise-alpha.16`	Review	50	2026-05-25
`5.40.0-alpha.4`	Review	50	2026-05-25

Related campaigns

Block this in CI

PkgRadar gates @rongcloud/electron (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @rongcloud/[email protected]