PkgRadar

npm · registry.npmjs.org

tylor-mcp

Credential file access: matched "aws_access_key"

Why PkgRadar flagged 1.1.4

SeveritySignalEvidence
mediumCredential file accessmatched "aws_access_key" · package/server/config.py

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.4Review102026-06-02
1.1.3Review102026-05-26
1.1.2Review802026-05-24
1.1.1Review802026-05-24
1.0.0Review802026-05-24
1.1.0Review802026-05-24

Block this in CI

PkgRadar gates tylor-mcp (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]