PkgRadar

npm · registry.npmjs.org

autotel-cli

Credential file access: matched "GOOGLE_APPLICATION_CREDENTIALS"

Early detection

PkgRadar flagged this 1.0 days before public disclosure

Detected 2026-06-04 · disclosed as MAL-2026-5216 on 2026-06-05

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.0Review12026-06-12
0.8.15Review52026-06-06
0.8.14Review12026-06-04
0.8.13Review12026-06-02
0.8.12Review12026-06-02
0.8.10Review12026-05-29
0.8.11Review12026-05-29

Block this in CI

PkgRadar gates autotel-cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]