PkgRadar

npm · registry.npmjs.org

yuangs

Credential file access: matched "id_rsa"

Why PkgRadar flagged 6.9.22

SeveritySignalEvidence
mediumCredential file accessmatched "id_rsa" · package/dist/commands/ssh/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
6.9.22Review72026-05-31
6.9.21Review72026-05-29
6.9.19Review72026-05-29
6.9.20Review72026-05-29
6.9.14Review72026-05-29
6.9.15Review72026-05-29

Block this in CI

PkgRadar gates yuangs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence