PkgRadar

npm · registry.npmjs.org

talos-deploy

Credential file access: matched ".ssh/"

Why PkgRadar flagged 0.0.11

SeveritySignalEvidence
mediumCredential file accessmatched ".ssh/" · package/dist/config/index.js
mediumCredential file accessmatched ".ssh/" · package/dist/lib/ssh.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.11Review202026-06-11
0.0.10Review202026-06-11
0.0.9Review202026-06-11
0.0.8Review202026-06-11
0.0.7Review202026-06-11
0.0.6Review202026-06-11
0.0.5Review202026-06-11
0.0.4Review202026-06-11
0.0.3Review202026-06-11

Block this in CI

PkgRadar gates talos-deploy (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]