diff --git a/test/packages/npm-test-missing-bindir/package.json b/test/packages/npm-test-missing-bindir/package.json
new file mode 100644
index 0000000000000..49e26742df58f
--- /dev/null
+++ b/test/packages/npm-test-missing-bindir/package.json
@@ -0,0 +1,4 @@
+{ "name":"npm-test-missing-bindir"
+, "version" : "0.0.0"
+, "scripts" : { "test" : "node test.js" }
+, "directories": { "bin" : "./not-found" } }
diff --git a/test/packages/npm-test-missing-bindir/test.js b/test/packages/npm-test-missing-bindir/test.js
new file mode 100644
index 0000000000000..f548458ac042c
--- /dev/null
+++ b/test/packages/npm-test-missing-bindir/test.js
@@ -0,0 +1,5 @@
+
+var assert = require("assert")
+assert.equal(undefined, process.env.npm_config__password, "password exposed!")
+assert.equal(undefined, process.env.npm_config__auth, "auth exposed!")
+assert.equal(undefined, process.env.npm_config__authCrypt, "authCrypt exposed!")