Because your company doesn't do the same security update on testing server, thus creating difference between two services.

Npm is highly susceptible on this if you're using uncommon libraries, especially under 1 mil downloaded libraries. However the same can applies to any other toolings or languages that you use.