Loading the latest scan…
npm · registry.npmjs.org
Credential file access
Early detection
PkgRadar flagged this 17.0 days before public disclosure
Detected 2026-07-21 · disclosed as MAL-2026-13625 on 2026-08-07
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
4.5.2-depup.6 | Review | 7 | 2026-08-28 |
4.5.0-depup.0 | High risk | 7 | 2026-08-26 |
4.5.2-depup.5 | Review | 7 | 2026-08-25 |
4.5.2-depup.4 | Review | 7 | 2026-08-22 |
4.5.2-depup.3 | Review | 7 | 2026-08-19 |
4.5.2-depup.2 | Review | 7 | 2026-08-15 |
4.5.2-depup.1 | Review | 7 | 2026-08-13 |
4.5.2-depup.0 | Review | 7 | 2026-08-05 |
4.5.1-depup.4 | Review | 7 | 2026-08-03 |
4.5.1-depup.3 | Review | 5 | 2026-07-31 |
4.5.1-depup.2 | Review | 5 | 2026-07-31 |
4.5.1-depup.1 | Review | 4 | 2026-07-30 |
4.5.1-depup.0 | Review | 2 | 2026-07-27 |
4.5.0-depup.3 | Low risk | 0 | 2026-07-25 |
4.5.0-depup.2 |
Related campaigns
Block this in CI
pkgradar gate --ecosystem npm @depup/[email protected]| 0 |
| 2026-07-25 |
4.5.0-depup.1 | Low risk | 0 | 2026-07-23 |
4.4.2-depup.11 | Low risk | 0 | 2026-07-21 |
4.4.2-depup.10 | Low risk | 0 | 2026-07-21 |
4.4.2-depup.12 | Low risk | 0 | 2026-07-21 |