PkgRadar

npm · registry.npmjs.org

@kuaidi100-user/cli

Credential File Packaged: package/dist/.env

Why PkgRadar flagged 1.2.4

SeveritySignalEvidence
highCredential File Packagedpackage/dist/.env · package/dist/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.4High risk352026-06-15
1.2.5High risk352026-06-15
1.2.3High risk352026-06-15
1.1.0Low risk02026-06-15
1.2.2Low risk02026-06-15
1.2.0Low risk02026-06-15
1.2.1Low risk02026-06-15

Block this in CI

PkgRadar gates @kuaidi100-user/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @kuaidi100-user/[email protected]
Start free — 25 scans / moView full evidence