PkgRadar

npm · registry.npmjs.org

@commarket/loyaltyplus

Credential File Packaged: package/.env

Why PkgRadar flagged 1.1.66

SeveritySignalEvidence
highCredential File Packagedpackage/.env · package/.env
highCredential File Packagedpackage/dist/.env · package/dist/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
1.1.66High risk352026-06-08
2.0.0High risk352026-06-08
2.0.1High risk352026-06-08
2.0.2High risk352026-06-08

Related campaigns

Block this in CI

PkgRadar gates @commarket/loyaltyplus (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @commarket/[email protected]
Start free — 25 scans / moView full evidence
@commarket/loyaltyplus — npm security scan | PkgRadar