PkgRadar

npm · registry.npmjs.org

studiograph

Known Indicator Filename: package/dist/core/secrets/bundle.js

Why PkgRadar flagged 1.3.48-next.169

SeveritySignalEvidence
highKnown Indicator Filenamepackage/dist/core/secrets/bundle.js · package/dist/core/secrets/bundle.js
highCredential file accessmatched ".azure" · package/dist/web/_app/immutable/chunks/ByUx3gj7.js
highCredential file accessmatched "GITHUB_TOKEN" · package/dist/utils/git.js
highCredential file accessmatched ".ssh" · package/dist/agent/tools/graph-tools.js
mediumRemote Payloadmatched "cUrl " · package/dist/server/routes/r2-api.js
mediumRemote Payloadmatched "cUrl " · package/dist/services/assets/r2-sync.js
mediumRemote Payloadmatched "cUrl " · package/dist/cli/commands/r2.js
mediumRemote Payloadmatched "cUrl " · package/dist/services/assets/r2.js
mediumRemote Payloadmatched "curl " · package/dist/mcp/server.js
mediumRemote Payloadmatched "cUrl " · package/dist/core/workspace-manager.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.48-next.249Low risk02026-06-16
1.3.48-next.248Low risk02026-06-15
1.3.48-next.247Low risk02026-06-15
1.3.48-next.246Low risk02026-06-15
1.3.48-next.244Low risk02026-06-15
1.3.48-next.245Low risk02026-06-15
1.3.48-next.243Low risk02026-06-15
1.3.48-next.242Low risk02026-06-14
1.3.48-next.241Low risk02026-06-14
1.3.48-next.240Low risk02026-06-14
1.3.48-next.239Low risk02026-06-13
1.3.48-next.238Low risk02026-06-13
1.3.48-next.237Low risk02026-06-13
1.3.48-next.236Low risk02026-06-12
1.3.48-next.235Low risk02026-06-12
1.3.48-next.234Low risk02026-06-12
1.3.48-next.233Low risk02026-06-12
1.3.48-next.232Low risk02026-06-12
1.3.48-next.231Low risk02026-06-12
1.3.48-next.230Low risk02026-06-11
1.3.48-next.229Low risk02026-06-11
1.3.48-next.228Low risk02026-06-11
1.3.48-next.227Low risk02026-06-11
1.3.48-next.226Low risk02026-06-11
1.3.48-next.225Low risk02026-06-11
1.3.48-next.224Low risk02026-06-11
1.3.48-next.223Low risk02026-06-11
1.3.48-next.222Low risk02026-06-11
1.3.48-next.221Low risk02026-06-11
1.3.48-next.219Low risk02026-06-11
1.3.48-next.220Low risk02026-06-11
1.3.48-next.218Low risk02026-06-10
1.3.48-next.217Low risk02026-06-10
1.3.48-next.216Low risk02026-06-10
1.3.47Low risk02026-06-10
1.3.48-next.215Low risk02026-06-10
1.3.48-next.214Low risk02026-06-09
1.3.48-next.213Low risk02026-06-09
1.3.48-next.212Low risk02026-06-09
1.3.48-next.211Low risk02026-06-09
1.3.48-next.210Low risk02026-06-09
1.3.48-next.209Low risk02026-06-08
1.3.48-next.208Low risk02026-06-07
1.3.48-next.207Low risk02026-06-06
1.3.48-next.206Low risk02026-06-05
1.3.48-next.205Low risk02026-06-04
1.3.48-next.204Low risk02026-06-04
1.3.48-next.203Low risk02026-06-03
1.3.48-next.202Low risk02026-06-03
1.3.48-next.201Low risk02026-06-02
1.3.48-next.200Low risk02026-06-02
1.3.48-next.199Low risk02026-06-02
1.3.48-next.198Low risk02026-06-02
1.3.48-next.197Low risk02026-06-02
1.3.48-next.196Low risk02026-06-02
1.3.48-next.195Low risk02026-06-02
1.3.48-next.193Low risk02026-06-01
1.3.48-next.194Low risk02026-06-01
1.3.48-next.191Low risk02026-06-01
1.3.48-next.192Low risk02026-06-01
1.3.48-next.190Low risk02026-05-31
1.3.48-next.189Low risk02026-05-31
1.3.48-next.188Low risk02026-05-30
1.3.48-next.187Low risk02026-05-30
1.3.48-beta.2Low risk02026-05-30
1.3.48-beta.0Low risk02026-05-30
1.3.48-next.179Low risk02026-05-30
1.3.48-next.178Low risk02026-05-30
1.3.48-next.177Low risk02026-05-30
1.3.48-next.176Low risk02026-05-30
1.3.48-next.175Low risk02026-05-30
1.3.48-next.174Low risk02026-05-30
1.3.48-next.173Low risk02026-05-30
1.3.48-next.172Low risk02026-05-30
1.3.48-next.169Review1972026-05-24
1.3.48-next.170Review1972026-05-24

Related campaigns

Block this in CI

PkgRadar gates studiograph (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence