Loading the latest scan…
npm · registry.npmjs.org
Credential file access
Early detection
PkgRadar flagged this 13.0 days before public disclosure
Detected 2026-07-25 · disclosed as MAL-2026-13622 on 2026-08-07
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
7.1.3-depup.2 | High risk | 3 | 2026-08-29 |
7.2.9-depup.1 | Review | 3 | 2026-08-28 |
7.2.8-depup.0 | Review | 5 | 2026-08-28 |
7.2.9-depup.0 | Review | 5 | 2026-08-28 |
7.2.7-depup.0 | Review | 5 | 2026-08-26 |
7.2.6-depup.1 | Review | 5 | 2026-08-25 |
7.2.6-depup.0 | Review | 5 | 2026-08-25 |
7.2.5-depup.0 | Review | 5 | 2026-08-24 |
7.2.4-depup.1 | Review | 5 | 2026-08-22 |
7.2.4-depup.0 | Review | 5 | 2026-08-19 |
7.2.3-depup.0 | Review | 5 | 2026-08-18 |
7.2.2-depup.1 | Review | 5 | 2026-08-14 |
7.2.2-depup.0 | Review | 5 | 2026-08-14 |
7.2.1-depup.1 | Review | 5 | 2026-08-13 |
7.2.1-depup.0 |
Related campaigns
Block this in CI
pkgradar gate --ecosystem npm @depup/[email protected]| 5 |
| 2026-08-12 |
7.2.0-depup.1 | Review | 5 | 2026-08-11 |
7.2.0-depup.0 | Review | 5 | 2026-08-07 |
7.1.6-depup.4 | Review | 5 | 2026-08-01 |
7.1.6-depup.3 | Review | 5 | 2026-07-31 |
7.1.6-depup.2 | Review | 5 | 2026-07-31 |
7.1.6-depup.1 | Review | 5 | 2026-07-30 |
7.1.6-depup.0 | Review | 4 | 2026-07-29 |
7.1.5-depup.0 | Review | 3 | 2026-07-29 |
7.1.4-depup.0 | Review | 2 | 2026-07-27 |
7.1.3-depup.1 | Low risk | 0 | 2026-07-25 |
6.1.4-depup.2 | Low risk | 0 | 2026-07-21 |
7.1.3-depup.0 | Low risk | 0 | 2026-07-21 |
6.1.5-depup.0 | Low risk | 0 | 2026-07-21 |
6.1.4-depup.1 | Low risk | 0 | 2026-07-21 |