npm · registry.npmjs.org
@venturekit/cli
Credential file access: matched ".aws"
Why PkgRadar flagged 0.0.0-dev.20260522121047
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched ".aws" · package/dist/utils/config-loader.js |
| high | Credential file access | matched ".AWS" · package/dist/commands/gha.js |
| high | Credential file access | matched ".AWS" · package/dist/commands/logs.js |
| high | Credential file access | matched ".AWS" · package/dist/commands/status.js |
| medium | Remote Payload | matched "curl\n " · package/dist/commands/open.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.0.0-dev.20260609102541 | Low risk | 0 | 2026-06-09 |
0.0.0-dev.20260609102440 | Low risk | 0 | 2026-06-09 |
0.0.0-dev.20260608102325 | Low risk | 0 | 2026-06-08 |
0.0.0-dev.20260608102211 | Low risk | 0 | 2026-06-08 |
0.0.0-dev.20260602210502 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260602210431 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260602193331 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260602192622 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260522121047 | Review | 92 | 2026-05-25 |
0.0.0-dev.20260525024212 | Review | 92 | 2026-05-25 |
Related campaigns
- venturekit-dev — 14 releases, max score 112
Block this in CI
pkgradar gate --ecosystem npm @venturekit/[email protected]