PkgRadar

npm · registry.npmjs.org

@superblocksteam/vite-plugin-file-sync

Credential file access: matched ".npmrc"

Why PkgRadar flagged 2.0.130-next.0

SeveritySignalEvidence
mediumCredential file accessmatched ".npmrc" · package/dist/ai-service/app-interface/npm-registry.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2.0.130-next.0Review72026-06-12
2.0.129Review72026-06-11
2.0.128Review72026-06-11
2.0.129-next.0Review72026-06-11
2.0.128-next.2Review72026-06-10
2.0.128-next.1Review72026-06-10
2.0.128-next.0Review72026-06-10
2.0.3-next.46Low risk02026-06-10
2.0.127Review72026-06-08
2.0.126Review72026-06-08
2.0.127-next.0Review72026-06-08
2.0.126-next.0Review72026-06-07
2.0.125Review72026-06-05
2.0.125-next.0Review72026-06-05
2.0.124Review72026-06-04
2.0.124-next.1Review72026-06-04
2.0.124-next.2Review72026-06-04
2.0.124-next.0Review72026-06-02
2.0.123-next.0Review382026-05-29
2.0.123Review382026-05-29
2.0.122-next.0Review382026-05-28
2.0.122Review382026-05-28
2.0.121-next.0Review142026-05-27
2.0.121Review142026-05-27
2.0.120-next.1Review142026-05-26
2.0.120-next.0Review142026-05-26
2.0.119Review72026-05-25
2.0.119-next.0Review142026-05-25
2.0.119-next.1Review72026-05-25

Block this in CI

PkgRadar gates @superblocksteam/vite-plugin-file-sync (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @superblocksteam/[email protected]
Start free — 25 scans / moView full evidence