PyPI · pypi.org
ytp-dl
Credential file access: matched "aws_access_key"
Why PkgRadar flagged 2026.5.26.5
| Severity | Signal | Evidence |
|---|---|---|
| medium | Credential file access | matched "aws_access_key" · ytp_dl-2026.5.26.5/scripts/api.py |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2026.6.12 | Low risk | 0 | 2026-06-12 |
2026.6.9 | Low risk | 0 | 2026-06-09 |
2026.5.28 | Low risk | 0 | 2026-05-28 |
2026.5.26.5 | Review | 10 | 2026-05-27 |
2026.5.26.4 | Review | 10 | 2026-05-27 |
2026.5.26.3 | Review | 10 | 2026-05-27 |
2026.5.26.2 | Review | 10 | 2026-05-27 |
2026.5.26.1 | Review | 10 | 2026-05-26 |
2026.5.26 | Review | 10 | 2026-05-26 |
Block this in CI
pkgradar gate --ecosystem pypi ytp-dl==2026.5.26.5