// Cloud credentials

Static pattern: reads-apple-cloudkit

pattern: reads-apple-cloudkit

Packages whose static analysis matched this pattern. See the per-package detail pages for the offending code excerpt.

2 packages flagged with this pattern. Newest first.

• AUTO-PUBLISHED/npm/2026-06-04

  youtube-downloader-web@1.0.0

  by ragha02

  A professional full-stack YouTube Downloader powered by yt-dlp.

  steals →Apple/CloudKitChromium loginsFirefox logins

  py-pip-install-runtimereads-chromium-credsreads-env-varspy-sys-platform-branchbase64-decodereads-firefox-credsreads-homedir
• AUTO-PUBLISHED/npm/2023-01-18/MAL-2026-3907

  @antv/f6-wx@0.0.7

  by openwayne

  微信小程序f6组件

  steals →Apple/CloudKit

  reads-apple-cloudkitchild-process-spawnfunction-constructor

  → No suspicious destination, no remote-exec shape — 1 known-vendor host(s), 1 other host(s).

  weekly

  —

  /wk

  llm verdict

  benign 0.85