npm · registry.npmjs.org
@agility/cli
Credential File Packaged: package/.env
Why PkgRadar flagged 1.0.0-beta.13.5
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/.env · package/.env |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.0.0-beta.13.5 | High risk | 17 | 2026-06-11 |
1.0.0-beta.13.6 | High risk | 25 | 2026-06-11 |
1.0.0-beta.13.17 | Low risk | 0 | 2026-06-11 |
1.0.0-beta.13.16 | Low risk | 0 | 2026-06-09 |
1.0.0-beta.13.15 | Low risk | 0 | 2026-06-04 |
1.0.0-beta.13.14 | Low risk | 0 | 2026-05-29 |
1.0.0-beta.13.13 | Low risk | 0 | 2026-05-28 |
1.0.0-beta.13.12 | Review | 1 | 2026-05-27 |
1.0.0-beta.13.10 | Review | 1 | 2026-05-25 |
1.0.0-beta.13.11 | Review | 1 | 2026-05-25 |
Related campaigns
- credential_file_packaged:package/.env — 1079 releases, max score 109
Block this in CI
pkgradar gate --ecosystem npm @agility/[email protected]