Loading the latest scan…
npm · registry.npmjs.org
Credential file access
Early detection
PkgRadar flagged this 17.1 days before public disclosure
Detected 2026-07-21 · disclosed as MAL-2026-13623 on 2026-08-07
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.972.62-depup.0 | High risk | 3 | 2026-08-29 |
3.972.59-depup.0 | High risk | 3 | 2026-08-23 |
3.972.70-depup.0 | Review | 3 | 2026-08-22 |
3.972.69-depup.0 | Review | 3 | 2026-08-15 |
3.972.68-depup.1 | Review | 3 | 2026-08-14 |
3.972.68-depup.0 | Review | 3 | 2026-08-12 |
3.972.67-depup.0 | Review | 3 | 2026-08-05 |
3.972.66-depup.0 | Review | 3 | 2026-08-04 |
3.972.65-depup.0 | Review | 3 | 2026-07-31 |
3.972.64-depup.0 | Review | 2 | 2026-07-30 |
3.972.63-depup.0 | Review | 1 | 2026-07-29 |
3.972.61-depup.0 | Low risk | 0 | 2026-07-25 |
3.972.60-depup.0 | Low risk | 0 | 2026-07-21 |
3.972.24-depup.0 | Low risk | 0 | 2026-07-21 |
Related campaigns
Block this in CI
pkgradar gate --ecosystem npm @depup/[email protected]3.972.25-depup.0 | Low risk | 0 | 2026-07-21 |
3.972.24-depup.1 | Low risk | 0 | 2026-07-21 |