registry / @activepieces/piece-base44 / 0.1.8
@activepieces/piece-base44@0.1.8
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNativeBindingsNetwork
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
NoLicense
Source & flagged code
6 flaggedsrc/index.jsView file
12`;let g=ST.default(s);s.write(`${u}\r
L13: `);let{statusCode:p,buffered:h}=yield g;if(p===200){if(t.once("socket",TT),r.secureEndpoint){fo("Upgrading socket connection to TLS");let y=r.servername||r.host;return nh.default.c...
L14: `);return P.substr(0,P.length-2)},this.getRequestHeader=function(P){return typeof P=="string"&&d[P]?d[P]:""},this.send=function(P){if(this.readyState!=this.OPENED)throw new Error("...
High
1"use strict";var Y_=Object.create;var Cn=Object.defineProperty;var Q_=Object.getOwnPropertyDescriptor;var ev=Object.getOwnPropertyNames;var tv=Object.getPrototypeOf,rv=Object.proto...
L2: `;re.DEFAULT_CONTENT_TYPE="application/octet-stream";re.prototype.append=function(e,t,r){r=r||{},typeof r=="string"&&(r={filename:r});var n=wa.prototype.append.bind(this);if((typeo...
L3: `).join(`
...
L12: `;let g=ST.default(s);s.write(`${u}\r
L13: `);let{statusCode:p,buffered:h}=yield g;if(p===200){if(t.once("socket",TT),r.secureEndpoint){fo("Upgrading socket connection to TLS");let y=r.servername||r.host;return nh.default.c...
L14: `);return P.substr(0,P.length-2)},this.getRequestHeader=function(P){return typeof P=="string"&&d[P]?d[P]:""},this.send=function(P){if(this.readyState!=this.OPENED)throw
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/index.jsView on unpkg · L1Findings
5 High3 Medium6 Low
HighChild Processsrc/index.js
HighSame File Env Network Executionsrc/index.js
HighEntrypoint Foreign Package Code Overwritesrc/index.js
HighCommand Output Exfiltrationsrc/index.js
HighTrigger Reachable Command Output Exfiltrationsrc/index.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
LowWeak Cryptosrc/index.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @activepieces/piece-base44@0.1.8.
See all versions of @activepieces/piece-base44 for other recorded verdicts.
- Review the evidence and your use of @activepieces/piece-base44@0.1.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.