AWS SDK for JavaScript Payment Cryptography Data Client for Node.js, Browser and React Native
92%
Total Score
healthy
Frequent releases and active AWS-backed maintenance make this a strong dependency.
No build attestation or trusted-publisher provenance is present, leaving publication-to-source verification less transparent despite the otherwise strong repository and release evidence.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10161 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @aws-sdk/client-payment-cryptography-data is vulnerable to Insertion of Sensitive Information into Log File in versions 3.349.0 - 3.607.0. | 3.349.0 - 3.607.0 | Low |
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.6.2 | — | — |
@smithy/core Version ^3.35.2 | — | — |
@aws-sdk/core Version ^3.978.2 | — | — |
@smithy/types Version ^4.19.0 | — | — |
@aws-sdk/types Version ^3.974.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.