registry  /  @acorex/platform  /  20.9.2

@acorex/platform@20.9.2

This library was generated with [Nx](https://nx.dev).

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEvalNetwork
Supply chain
HighEntropyStringsUrlStrings
Manifest
NoLicense
scanned 43 file(s), 6.20 MB of source, external domains: avatar.iran.liara.run, discord.com, facebook.com, github.com, google.com, instagram.com, linkedin.com, t.me, twitter.com, wa.me, www.w3.org, youtube.com

Source & flagged code

5 flagged · loading source
fesm2022/acorex-platform-contracts.mjsView file
2091patternName = generic_password severity = medium line = 2091 matchedText = password...or',
Medium
Secret Pattern

Package contains a possible secret pattern.

fesm2022/acorex-platform-contracts.mjsView on unpkg · L2091
fesm2022/acorex-platform-workflow.mjsView file
333// Evaluating the expression within the created scope L334: const sandbox = new Function('scope', `return (async function() { with (scope) { return ${expression}; } })();`); L335: const result = await sandbox(scope);
Low
Eval

Package source references a known benign dynamic code generation pattern.

fesm2022/acorex-platform-workflow.mjsView on unpkg · L333
types/acorex-platform-layout-widget-core-contracts.d.tsView file
45patternName = generic_password severity = medium line = 45 matchedText = password...or';
Medium
Secret Pattern

Hardcoded password in types/acorex-platform-layout-widget-core-contracts.d.ts

types/acorex-platform-layout-widget-core-contracts.d.tsView on unpkg · L45
types/acorex-platform-layout-widgets.d.tsView file
1347patternName = generic_password severity = medium line = 1347 matchedText = password...or';
Medium
Secret Pattern

Hardcoded password in types/acorex-platform-layout-widgets.d.ts

types/acorex-platform-layout-widgets.d.tsView on unpkg · L1347
types/acorex-platform-contracts.d.tsView file
1661patternName = generic_password severity = medium line = 1661 matchedText = readonly...or";
Medium
Secret Pattern

Hardcoded password in types/acorex-platform-contracts.d.ts

types/acorex-platform-contracts.d.tsView on unpkg · L1661

Findings

5 Medium4 Low
MediumSecret Patternfesm2022/acorex-platform-contracts.mjs
MediumNetwork
MediumSecret Patterntypes/acorex-platform-layout-widget-core-contracts.d.ts
MediumSecret Patterntypes/acorex-platform-layout-widgets.d.ts
MediumSecret Patterntypes/acorex-platform-contracts.d.ts
LowEvalfesm2022/acorex-platform-workflow.mjs
LowHigh Entropy Strings
LowUrl Strings
LowNo License