Package evidence

@azure/[email protected]

Credential file access: matched ".azure"

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@azure/[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@azure/[email protected]"],"fail_on":"high"}'

Publishermicrosoft1es

Artifact bytes884,970

Previous version25.1.0

Published2026-05-18T01:24:27.827Z

SHA-25605a9c0b47d3dbf28aaa592acea61a8e2c3988b087bb9234c1f7f7cd454225933

Why flagged

What the scanner saw

Credential file access: matched ".azure"

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high

19d agoLast checked

highRisk

402Score

25.2.0Version

Status history (1 event)

new → available19d ago · risk high · score 402 · status changed

Evidence

Static findings

17 static · 0 from release diff · showing high-signal first.

Severity	Kind	Path	Detail	Points
high	Credential file access	package/dist/browser/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/esm/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/react-native/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/browser/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/esm/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/react-native/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/index.js	matched ".Azure"	30
high	Credential file access	package/dist/browser/models/models.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/models/models.js	matched "kubeConfig"	30
high	Credential file access	package/dist/esm/models/models.js	matched ".azure"	30
high	Credential file access	package/dist/react-native/models/models.js	matched ".azure"	30

Show all 17 findings (low-signal and informational)

Severity	Kind	Path	Detail	Points
high	Credential file access	package/dist/browser/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/esm/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/react-native/static-helpers/cloudSettingHelpers.js	matched ".azure"	30
high	Credential file access	package/dist/browser/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/esm/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/react-native/api/containerServiceContext.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/index.js	matched ".Azure"	30
high	Credential file access	package/dist/browser/models/models.js	matched ".azure"	30
high	Credential file access	package/dist/commonjs/models/models.js	matched "kubeConfig"	30
high	Credential file access	package/dist/esm/models/models.js	matched ".azure"	30
high	Credential file access	package/dist/react-native/models/models.js	matched ".azure"	30
low	Obfuscation	package/dist/browser/static-helpers/urlTemplate.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/commonjs/static-helpers/urlTemplate.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/esm/static-helpers/urlTemplate.js	matched "fromCharCode"	3
low	Obfuscation	package/dist/react-native/static-helpers/urlTemplate.js	matched "fromCharCode"	3

Manifest

Package metadata

Scripts16

buildnpm run clean && dev-tool run build-package && dev-tool run extract-api
build:samplestsc -p tsconfig.samples.json && dev-tool samples publish -f
check-formatprettier --list-different --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore "src/**/*.{ts,cts,mts}" "test/**/*.{ts,cts,mts}" "*.{js,cjs,mjs,json}" "samples-dev/*.ts"
cleanrimraf --glob dist dist-browser dist-esm test-dist temp types *.tgz *.log
execute:samplesdev-tool samples run samples-dev
extract-apirimraf review && dev-tool run extract-api
formatprettier --write --config ../../../.prettierrc.json --ignore-path ../../../.prettierignore "src/**/*.{ts,cts,mts}" "test/**/*.{ts,cts,mts}" "*.{js,cjs,mjs,json}" "samples-dev/*.ts"
generate:clientecho skipped
lintecho skipped
lint:fixecho skipped
packpnpm pack 2>&1
testnpm run test:node && npm run test:browser
test:browserecho skipped
test:nodedev-tool run test:vitest
test:node:esmdev-tool run test:vitest --esm
update-snippetsdev-tool run update-snippets

Dependencies8

@azure-rest/core-client^2.3.1
@azure/abort-controller^2.1.2
@azure/core-auth^1.9.0
@azure/core-lro^3.1.0
@azure/core-rest-pipeline^1.20.0
@azure/core-util^1.12.0
@azure/logger^1.2.0
tslib^2.8.1