/LOLPaths
Package manager

Maven Settings

Maven settings files can contain server credentials for package repositories.

Metadata

  • id: package-manager.maven-settings
  • category: package-manager
  • sensitivity: high
  • subcategory: maven
  • artifact types: configuration, credential
  • tags: maven, java

Path Matchers

PathKindPlatforms
%USERPROFILE%\.m2\settings.xmlfilewindows
$HOME/.m2/settings.xmlfilelinux, macos

Content Indicators

Literal strings:

  • <servers>
  • <password>

Credential Types

  • password

Impact

  • credential_access

References

Cargo Registry Credentials

Cargo registry credential files can contain tokens for publishing Rust crates or authenticating to private registries.

npm Configuration

npm configuration files may contain registry tokens or scoped registry credentials.

On this page

MetadataPath MatchersContent IndicatorsCredential TypesImpactReferences