// Source control / registries

Static pattern: reads-gitlab-tokens

pattern: reads-gitlab-tokens

Packages whose static analysis matched this pattern. See the per-package detail pages for the offending code excerpt.

4 packages flagged with this pattern (8 total publish events, collapsed by publisher+name). Newest first.

• AUTO-PUBLISHED/npm/2026-06-06

  @phi-code-admin/phi-code2 versions·0.76.8→0.76.13

  by phi-code-admin

  Coding agent CLI with persistent memory, sub-agents, intelligent routing, and orchestration

  steals →GitLab PATAI API keysChromium logins

  public-github-pushclipboard-accessreads-env-varsreads-homedirreads-ai-api-keysreads-chromium-creds
• AUTO-PUBLISHED/npm/2026-06-06

  berta-pulse@0.1.0

  by rondanini

  Local-first, BYOK multi-host ops + SEO control plane — scan, diagnose and fix across 12 hosts from your own machine.

  steals →GCP credsAWS keysGitHub PATGitLab PATAI API keys→ sends tohttps://${branchName}.${app.defaultDomain}

  reads-github-tokensreads-gitlab-tokens
• AUTO-PUBLISHED/npm/2026-06-05

  @fleetagent/pi-coding-agent@0.0.8

  by tiith

  Coding agent CLI with read, bash, edit, write tools and session management

  steals →GitLab PATAI API keys→ sends tohttps://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.91.1.tgz

  clipboard-accesschild-process-spawnreads-env-varsreads-homedirreads-system-infofunction-constructor
• AUTO-PUBLISHED/kitchen-sink · 8/npm/2026-06-05

  @yuechou/pi-ai4 versions·15.8.3-patched.1→15.8.3-patched.6

  by yuechou

  Unified LLM API with automatic model discovery and provider configuration

  steals →AWS keysGCP credsGitHub PATGitLab PATAI API keys→ sends tohttps://omp.sh