PkgRadar

npm · registry.npmjs.org

create-payload-app

Credential file access: matched ".AZURE"

Scanned versions

VersionVerdictScoreScanned (UTC)
4.0.0-canary.3Low risk02026-06-17
4.0.0-canary.2Low risk02026-06-16
4.0.0-canary.1Low risk02026-06-12
4.0.0-internal.293e026Low risk02026-06-11
4.0.0-internal.40de3ecLow risk02026-06-11
4.0.0-internal.a0ef1b8Low risk02026-06-09
4.0.0-internal.183b315Low risk02026-06-09
3.62.0-internal.2a2d1e1Low risk02026-06-09
4.0.0-internal.5d5a2b2Low risk02026-06-09
3.85.1Low risk02026-06-09
3.86.0-internal.8bd478eLow risk02026-06-08
4.0.0-canary.0Low risk02026-06-04
4.0.0-internal.1f9ae9aLow risk02026-06-03
4.0.0-internal.5f0cd13Low risk02026-06-03
3.86.0-internal.ac46214Low risk02026-05-29
4.0.0-internal.c2b57ceLow risk02026-05-28
4.0.0-internal.38b7f1dReview12026-05-26
3.85.0Review12026-05-26

Block this in CI

PkgRadar gates create-payload-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence