npm · registry.npmjs.org
mobbdev
Credential File Packaged: package/.env
Why PkgRadar flagged 1.4.27
| Severity | Signal | Evidence |
|---|---|---|
| high | Credential File Packaged | package/.env · package/.env |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.4.27 | High risk | 25 | 2026-06-17 |
1.4.26 | High risk | 25 | 2026-06-11 |
1.4.25 | High risk | 25 | 2026-06-11 |
1.4.20 | High risk | 25 | 2026-06-10 |
1.4.19 | High risk | 25 | 2026-06-10 |
1.4.18 | High risk | 25 | 2026-06-10 |
1.4.16 | High risk | 25 | 2026-06-10 |
1.4.17 | High risk | 25 | 2026-06-10 |
1.4.23 | High risk | 25 | 2026-06-10 |
1.4.22 | High risk | 25 | 2026-06-10 |
1.4.21 | High risk | 25 | 2026-06-10 |
Block this in CI
pkgradar gate --ecosystem npm [email protected]