PkgRadar

npm · registry.npmjs.org

penclip

Credential file access: matched "AWS_ACCESS_KEY"

Why PkgRadar flagged 2026.608.0

SeveritySignalEvidence
mediumCredential file accessmatched "AWS_ACCESS_KEY" · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
2026.608.0Review72026-06-08
2026.608.0-canary.1Review72026-06-08
2026.608.0-canary.0Review72026-06-08
2026.607.0Review102026-06-08
2026.607.0-canary.2Review72026-06-07
2026.607.0-canary.1Review72026-06-07
2026.607.0-canary.0Review72026-06-07
2026.606.0Review72026-06-06
2026.606.0-canary.3Review72026-06-06
2026.606.0-canary.2Review72026-06-06
2026.606.0-canary.1Review72026-06-06
2026.606.0-canary.0Review72026-06-06
2026.605.0Review72026-06-05
2026.605.0-canary.1Review72026-06-05
2026.605.0-canary.0Review102026-06-05
2026.604.0-canary.1Review72026-06-04
2026.604.0-canary.2Review72026-06-04
2026.604.0-canary.0Review72026-06-04
2026.602.3Review102026-06-02
2026.602.3-canary.0Review72026-06-02
2026.602.3-canary.1Review72026-06-02
2026.602.2Review102026-06-02
2026.602.2-canary.0Review72026-06-02
2026.602.1Review102026-06-02
2026.602.1-canary.1Review72026-06-02
2026.602.1-canary.0Review72026-06-02
2026.602.0Review72026-06-02
2026.602.0-canary.3Review72026-06-02
2026.602.0-canary.2Review72026-06-02
2026.602.0-canary.1Review72026-06-02
2026.602.0-canary.0Review72026-06-02
2026.531.0Review102026-05-31
2026.531.0-canary.4Review102026-05-31
2026.531.0-canary.3Review102026-05-31
2026.531.0-canary.2Review102026-05-31
2026.531.0-canary.1Review102026-05-31
2026.530.0Review102026-05-31
2026.531.0-canary.0Review102026-05-31
2026.530.0-canary.2Review102026-05-30
2026.530.0-canary.1Review102026-05-30
2026.522.0Review52026-05-30
2026.530.0-canary.0Review102026-05-30

Block this in CI

PkgRadar gates penclip (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]