PkgRadar

npm · registry.npmjs.org

@payloadcms/plugin-cloud-storage

Credential File Packaged: package/dev/.env

Why PkgRadar flagged 1.1.0-beta.0

SeveritySignalEvidence
highCredential File Packagedpackage/dev/.env · package/dev/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
4.0.0-internal.293e026Low risk02026-06-11
1.1.0-beta.0High risk172026-06-11
1.1.0-beta.1High risk172026-06-11
4.0.0-internal.40de3ecLow risk02026-06-11
1.1.0High risk172026-06-11
4.0.0-internal.a0ef1b8Low risk02026-06-09
4.0.0-internal.183b315Low risk02026-06-09
3.62.0-internal.2a2d1e1Low risk02026-06-09
3.85.1Low risk02026-06-09
3.86.0-internal.8bd478eLow risk02026-06-08
4.0.0-canary.0Low risk02026-06-04
4.0.0-internal.1f9ae9aLow risk02026-06-03
4.0.0-internal.5f0cd13Low risk02026-06-03
3.86.0-internal.ac46214Low risk02026-05-29
4.0.0-internal.c2b57ceLow risk02026-05-28
4.0.0-internal.38b7f1dLow risk02026-05-26
3.85.0Low risk02026-05-26

Block this in CI

PkgRadar gates @payloadcms/plugin-cloud-storage (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @payloadcms/[email protected]
Start free — 25 scans / moView full evidence