npm · registry.npmjs.org
@microsoft/create-rayfin
Credential File Packaged: package/templates/notes-app/.env
Why PkgRadar flagged 1.2.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/templates/notes-app/.env · package/templates/notes-app/.env |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.2.0 | High risk | 35 | 2026-06-12 |
1.2.1 | High risk | 35 | 2026-06-12 |
1.2.2 | High risk | 35 | 2026-06-12 |
1.33.2 | Low risk | 0 | 2026-06-12 |
1.33.1 | Low risk | 0 | 2026-06-02 |
1.33.0 | Low risk | 0 | 2026-06-01 |
1.33.0-beta.3 | Low risk | 0 | 2026-05-29 |
1.33.0-beta.2 | Low risk | 0 | 2026-05-29 |
1.33.0-beta.0 | Low risk | 0 | 2026-05-28 |
1.33.0-beta.1 | Low risk | 0 | 2026-05-28 |
Related campaigns
- microsoft1es — 21 releases, max score 45
Block this in CI
pkgradar gate --ecosystem npm @microsoft/[email protected]