PkgRadar

npm · registry.npmjs.org

sure-app

Credential File Packaged: package/epms-app/.env

Why PkgRadar flagged 1.2.0

SeveritySignalEvidence
highCredential File Packagedpackage/epms-app/.env · package/epms-app/.env
highCredential File Packagedpackage/epms-app/backend-mongodb/.env · package/epms-app/backend-mongodb/.env
highCredential File Packagedpackage/epms-app/backend-mysql/.env · package/epms-app/backend-mysql/.env
highCredential File Packagedpackage/help/node_modules/hospital-app/backend/.env · package/help/node_modules/hospital-app/backend/.env
highCredential File Packagedpackage/help/node_modules/hospital-managements/backend/.env · package/help/node_modules/hospital-managements/backend/.env
highCredential File Packagedpackage/help/node_modules/stock-management-backend/backend/.env · package/help/node_modules/stock-management-backend/backend/.env
highCredential File Packagedpackage/lms-app/.env · package/lms-app/.env
highCredential File Packagedpackage/lms-app/backend-mongodb/.env · package/lms-app/backend-mongodb/.env
highCredential File Packagedpackage/lms-app/backend-mysql/.env · package/lms-app/backend-mysql/.env
highCredential File Packagedpackage/scms-app/.env · package/scms-app/.env
highCredential File Packagedpackage/scms-app/backend-mongodb/.env · package/scms-app/backend-mongodb/.env
highCredential File Packagedpackage/scms-app/backend-mysql/.env · package/scms-app/backend-mysql/.env

Scanned versions

VersionVerdictScoreScanned (UTC)
1.2.0High risk1002026-06-10

Block this in CI

PkgRadar gates sure-app (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]