PkgRadar

npm · registry.npmjs.org

create-urateam

Credential file access: matched ".npmrc"

Why PkgRadar flagged 0.1.67

SeveritySignalEvidence
highCredential file accessmatched ".npmrc" · package/template/.urateam/pnpm-workspace.yaml

Scanned versions

VersionVerdictScoreScanned (UTC)
0.1.80Low risk02026-05-29
0.1.78Low risk02026-05-29
0.1.79Low risk02026-05-29
0.1.76Low risk02026-05-29
0.1.77Low risk02026-05-29
0.1.74Low risk02026-05-28
0.1.75Low risk02026-05-28
0.1.73Low risk02026-05-27
0.1.72Low risk02026-05-26
0.1.71Low risk02026-05-26
0.1.70Low risk02026-05-26
0.1.69Low risk02026-05-25
0.1.68Low risk02026-05-25
0.1.67Review302026-05-25
0.1.66Review302026-05-25
0.1.65Review302026-05-25
0.1.62Review302026-05-24
0.1.63Review302026-05-24

Block this in CI

PkgRadar gates create-urateam (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence