PkgRadar

npm · registry.npmjs.org

payload

Credential File Packaged: package/examples/multi-tenant/.npmrc

Why PkgRadar flagged 1.15.11

SeveritySignalEvidence
highCredential File Packagedpackage/examples/multi-tenant/.npmrc · package/examples/multi-tenant/.npmrc
highCredential File Packagedpackage/examples/virtual-fields/.npmrc · package/examples/virtual-fields/.npmrc
highCredential File Packagedpackage/examples/whitelabel/.npmrc · package/examples/whitelabel/.npmrc
highCredential File Packagedpackage/examples/form-builder/cms/.npmrc · package/examples/form-builder/cms/.npmrc
highCredential File Packagedpackage/examples/redirects/cms/.npmrc · package/examples/redirects/cms/.npmrc

Scanned versions

VersionVerdictScoreScanned (UTC)
1.15.11Review302026-06-11
1.15.9Review302026-06-11
4.0.0-internal.40de3ecLow risk02026-06-11
4.0.0-internal.a0ef1b8Low risk02026-06-09
4.0.0-internal.183b315Low risk02026-06-09
3.62.0-internal.2a2d1e1Low risk02026-06-09
4.0.0-internal.5d5a2b2Low risk02026-06-09
3.85.1Low risk02026-06-09
3.86.0-internal.8bd478eLow risk02026-06-08
4.0.0-canary.0Low risk02026-06-04
4.0.0-internal.1f9ae9aLow risk02026-06-03
4.0.0-internal.5f0cd13Low risk02026-06-03
3.86.0-internal.ac46214Low risk02026-05-29
4.0.0-internal.c2b57ceLow risk02026-05-28
3.85.0Low risk02026-05-26
4.0.0-internal.38b7f1dLow risk02026-05-26

Block this in CI

PkgRadar gates payload (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence