PkgRadar

npm · registry.npmjs.org

@theia/remote

Credential file access: matched "id_rsa"

Why PkgRadar flagged 1.73.0-next.24

SeveritySignalEvidence
mediumCredential file accessmatched "id_rsa" · package/lib/electron-node/ssh/ssh-identity-file-collector.js
mediumCredential file accessmatched "id_rsa" · package/src/electron-node/ssh/ssh-identity-file-collector.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
1.73.0-next.24Review92026-06-12
1.73.0-next.20Review92026-06-11
1.72.3Review92026-06-10
1.73.0-next.16Review92026-06-10
1.73.0-next.15Review92026-06-09
1.73.0-next.14Review92026-06-08
1.72.2Review92026-06-05
1.73.0-next.10Review92026-06-05
1.73.0-next.9Review92026-06-04
1.73.0-next.7Review92026-06-03
1.73.0-next.3Review92026-06-02
1.73.0-next.2Review152026-06-01
1.73.0-next.1Review92026-06-01
1.72.1Review92026-05-29
1.73.0-next.0Review92026-05-29
1.72.0Review92026-05-28
1.72.0-next.59Review92026-05-28
1.71.2Review122026-05-27
1.72.0-next.52Review122026-05-27
1.72.0-next.50Review122026-05-26
1.72.0-next.46Review122026-05-26
1.72.0-next.45Review122026-05-26

Block this in CI

PkgRadar gates @theia/remote (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @theia/[email protected]