GMS-2016-23: False Positive

April 18, 2016 (updated August 19, 2025)

This advisory has been marked as a False Positive and has been removed.

References

blog.npmjs.org/post/142036323955/fixing-a-bearer-token-vulnerability
nodejs.org/en/blog/vulnerability/npm-tokens-leak-march-2016/
www.npmjs.com/settings/tokens

Code Behaviors & Features

Detect and mitigate GMS-2016-23 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →