Package manager
npm Configuration
npm configuration files may contain registry tokens or scoped registry credentials.
Metadata
- id:
package-manager.npmrc - category:
package-manager - sensitivity:
critical - subcategory:
npm - artifact types:
credential,configuration - tags:
npm,package-manager
Path Matchers
| Path | Kind | Platforms |
|---|---|---|
%USERPROFILE%\.npmrc | file | windows |
$HOME/.npmrc | file | linux, macos |
Content Indicators
Regular expressions:
(?i)_authToken\s*=(?i)//[^/]+/:_authToken=
Credential Types
access-token
Impact
credential_access