PkgRadar

npm · registry.npmjs.org

create-regoh-app

Credential File Packaged: package/templates/epms-app/.env

Why PkgRadar flagged 1.0.2

SeveritySignalEvidence
highCredential File Packagedpackage/templates/epms-app/.env · package/templates/epms-app/.env
highCredential File Packagedpackage/templates/epms-app/backend-mongodb/.env · package/templates/epms-app/backend-mongodb/.env
highCredential File Packagedpackage/templates/epms-app/backend-mysql/.env · package/templates/epms-app/backend-mysql/.env
highCredential File Packagedpackage/templates/lms-app/.env · package/templates/lms-app/.env
highCredential File Packagedpackage/templates/lms-app/backend-mongodb/.env · package/templates/lms-app/backend-mongodb/.env
highCredential File Packagedpackage/templates/lms-app/backend-mysql/.env · package/templates/lms-app/backend-mysql/.env
highCredential File Packagedpackage/templates/scms-app/.env · package/templates/scms-app/.env
highCredential File Packagedpackage/templates/scms-app/backend-mongodb/.env · package/templates/scms-app/backend-mongodb/.env
highCredential File Packagedpackage/templates/scms-app/backend-mysql/.env · package/templates/scms-app/backend-mysql/.env
highCredential File Packagedpackage/templates/sfms-app/.env · package/templates/sfms-app/.env
highCredential File Packagedpackage/templates/sfms-app/backend-mongodb/.env · package/templates/sfms-app/backend-mongodb/.env
highCredential File Packagedpackage/templates/sfms-app/backend-mysql/.env · package/templates/sfms-app/backend-mysql/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.2High risk1002026-06-10

Related campaigns

Block this in CI

PkgRadar gates create-regoh-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]