npm · registry.npmjs.org
@venturekit/runtime
Credential file access: matched ".AWS"
Why PkgRadar flagged 0.0.0-dev.20260522121047
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential file access | matched ".AWS" · package/dist/handler/context.js |
| high | Credential file access | matched ".AWS" · package/dist/patterns/idempotency.js |
| high | Credential file access | matched ".AWS" · package/dist/security/internal-hmac.js |
| high | Credential file access | matched ".AWS" · package/dist/patterns/invoke.js |
| high | Credential file access | matched ".aws" · package/dist/logging/metrics.js |
| high | Credential file access | matched ".aws" · package/dist/handler/queue-batch.js |
| high | Credential file access | matched ".AWS" · package/dist/patterns/queue.js |
| high | Credential file access | matched ".AWS" · package/dist/middleware/rate-limit-store.js |
| high | Credential file access | matched ".AWS" · package/dist/patterns/saga.js |
| high | Credential file access | matched ".AWS" · package/dist/config/secrets.js |
| high | Credential file access | matched ".aws" · package/dist/handler/task-handler.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.0.0-dev.20260609102541 | Low risk | 0 | 2026-06-09 |
0.0.0-dev.20260609102440 | Low risk | 0 | 2026-06-09 |
0.0.0-dev.20260608102211 | Low risk | 0 | 2026-06-08 |
0.0.0-dev.20260608102325 | Low risk | 0 | 2026-06-08 |
0.0.0-dev.20260602210502 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260602210431 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260602193331 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260602192622 | Low risk | 0 | 2026-06-02 |
0.0.0-dev.20260522121047 | Review | 100 | 2026-05-25 |
0.0.0-dev.20260525024212 | Review | 100 | 2026-05-25 |
Block this in CI
pkgradar gate --ecosystem npm @venturekit/[email protected]