PkgRadar

npm · registry.npmjs.org

firstname_lastname_national_practical_exam_2025

Credential file access: matched ".aws"

Why PkgRadar flagged 1.0.0

SeveritySignalEvidence
highCredential file accessmatched ".aws" · package/backend-project/node_modules/aws-ssl-profiles/lib/profiles/ca/defaults.js
highCredential file accessmatched ".aws" · package/backend-project/node_modules/aws-ssl-profiles/lib/profiles/ca/proxies.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/backend-project/node_modules/mysql2/lib/constants/errors.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/backend-project/node_modules/is-property/is-property.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/backend-project/node_modules/iconv-lite/encodings/sbcs-data-generated.js
mediumRemote Payloadmatched "curl " · package/backend-project/server.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/backend-project/node_modules/.package-lock.json
mediumObfuscation Densityhigh encoded/escaped-token density · package/backend-project/package-lock.json
mediumObfuscation Densityhigh encoded/escaped-token density · package/frontend-project/package-lock.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.0Review742026-05-24

Block this in CI

PkgRadar gates firstname_lastname_national_practical_exam_2025 (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]