PkgRadar

npm · registry.npmjs.org

paperclipai

Credential file access: matched "AWS_ACCESS_KEY"

Why PkgRadar flagged 2026.613.0-canary.0

SeveritySignalEvidence
mediumCredential file accessmatched "AWS_ACCESS_KEY" · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.613.0-canary.0Review32026-06-13
2026.612.0-canary.13Review32026-06-12
2026.612.0-canary.12Review32026-06-12
2026.612.0-canary.11Review32026-06-12
2026.612.0-canary.10Review32026-06-12
2026.612.0-canary.9Review32026-06-12
2026.612.0-canary.8Review32026-06-12
2026.612.0-canary.7Review32026-06-12
2026.612.0-canary.6Review32026-06-12
2026.612.0-canary.5Review32026-06-12
2026.612.0-canary.4Review32026-06-12
2026.612.0-canary.3Review32026-06-12
2026.612.0-canary.2Review32026-06-12
2026.612.0-canary.1Review32026-06-12
2026.612.0-canary.0Review32026-06-12
2026.611.0-canary.6Review32026-06-11
2026.611.0-canary.5Review32026-06-11
2026.611.0-canary.4Review32026-06-11
2026.611.0-canary.3Review32026-06-11
2026.611.0-canary.2Review32026-06-11
2026.611.0-canary.1Review32026-06-11
2026.611.0-canary.0Review32026-06-11
2026.610.0-canary.9Review32026-06-10
2026.610.0-canary.8Review32026-06-10
2026.610.0-canary.7Review32026-06-10
2026.610.0-canary.6Review32026-06-10
2026.610.0-canary.5Review32026-06-10
2026.610.0-canary.4Review32026-06-10
2026.610.0-canary.3Review32026-06-10
2026.610.0-canary.2Review32026-06-10
2026.610.0-canary.1Review32026-06-10
2026.610.0-canary.0Review32026-06-10
2026.609.1-canary.2Review32026-06-09
2026.609.1-canary.1Review32026-06-09
2026.609.1-canary.0Review32026-06-09
2026.609.0Review32026-06-09
2026.609.0-canary.3Review32026-06-09
2026.609.0-canary.2Review32026-06-09
2026.608.0-canary.1Review32026-06-08
2026.608.0-canary.0Review32026-06-08
2026.607.0-canary.7Review32026-06-07
2026.607.0-canary.6Review32026-06-07
2026.607.0-canary.5Review32026-06-07
2026.607.0-canary.4Review32026-06-07
2026.607.0-canary.3Review32026-06-07
2026.607.0-canary.2Review32026-06-07
2026.607.0-canary.1Review32026-06-07
2026.607.0-canary.0Review32026-06-07
2026.606.0-canary.12Review32026-06-06
2026.606.0-canary.11Review32026-06-06
2026.606.0-canary.10Review32026-06-06
2026.606.0-canary.9Review32026-06-06
2026.606.0-canary.8Review32026-06-06
2026.606.0-canary.7Review32026-06-06
2026.606.0-canary.6Review32026-06-06
2026.606.0-canary.5Review32026-06-06
2026.606.0-canary.4Review32026-06-06
2026.606.0-canary.3Review32026-06-06
2026.606.0-canary.2Review32026-06-06
2026.606.0-canary.1Review32026-06-06
2026.606.0-canary.0Review32026-06-06
2026.605.0-canary.10Review32026-06-05
2026.605.0-canary.9Review32026-06-05
2026.605.0-canary.8Review32026-06-05
2026.605.0-canary.7Review32026-06-05
2026.605.0-canary.5Review32026-06-05
2026.605.0-canary.6Review32026-06-05
2026.605.0-canary.4Review32026-06-05
2026.605.0-canary.3Review32026-06-05
2026.605.0-canary.2Review32026-06-05
2026.605.0-canary.1Review32026-06-05
2026.605.0-canary.0Review32026-06-05
2026.604.0-canary.6Review32026-06-04
2026.604.0-canary.7Review32026-06-04
2026.604.0-canary.4Review32026-06-04
2026.604.0-canary.3Review32026-06-04
2026.604.0-canary.2Review32026-06-04
2026.604.0-canary.1Review32026-06-04
2026.604.0-canary.0Review32026-06-04
2026.603.0-canary.3Review32026-06-03
2026.603.0-canary.2Review32026-06-03
2026.603.0-canary.1Review32026-06-03
2026.603.0-canary.0Review32026-06-03
2026.602.0-canary.2Review32026-06-02
2026.602.0-canary.1Review32026-06-02
2026.602.0-canary.0Review32026-06-02
2026.601.0-canary.1Review32026-06-01
2026.601.0-canary.0Review32026-06-01
2026.531.0-canary.0Review32026-05-31
2026.529.0Review32026-05-30
2026.530.0-canary.1Review32026-05-30
2026.530.0-canary.0Review32026-05-30
2026.529.0-canary.4Review32026-05-29
2026.529.0-canary.3Review32026-05-29
2026.529.0-canary.1Review162026-05-29
2026.529.0-canary.0Review162026-05-29
2026.528.0-canary.2Review152026-05-28
2026.528.0-canary.1Review152026-05-28
2026.527.0-canary.0Review152026-05-28
2026.528.0-canary.0Review152026-05-28
2026.526.0-canary.0Review12026-05-26
2026.526.0-canary.1Review12026-05-26
2026.525.1-canary.0Review12026-05-25
2026.525.0-canary.1Review12026-05-25
2026.525.0Review12026-05-25
2026.523.0-canary.1Review12026-05-25
2026.525.0-canary.0Review12026-05-25

Block this in CI

PkgRadar gates paperclipai (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]