registry / @activepieces/piece-google-forms / 0.5.8
@activepieces/piece-google-forms@0.5.8
⚠ Under reviewStatic Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
5 flaggedsrc/index.jsView file
48${h}
L49: `+await t.crypto.sha256DigestHex(P),x=await R$(t.crypto,t.securityCredentials.secretAccessKey,c,t.region,n),E=await oa(t.crypto,x,v),A=`${sS} Credential=${t.securityCredentials.acc...
L50: To learn more about authentication and Google APIs, visit:
High
37`+x+"}":"{"+E.join(",")+"}",n=x,h}}o(p,"str"),typeof db.stringify!="function"&&(db.stringify=function(m,f,S){var P;if(n="",i="",typeof S=="number")for(P=0;P<S;P+=1)i+=" ";else type...
L38: `,r:"\r",t:" "},u,c=o(function(x){throw{name:"SyntaxError",message:x,at:r,text:u}},"error"),l=o(function(x){return x&&x!==n&&c("Expected '"+x+"' instead of '"+n+"'"),n=u.charAt(r),...
L39: Supported algorithms are:
...
L48: ${h}
L49: `+await t.crypto.sha256DigestHex(P),x=await R$(t.crypto,t.securityCredentials.secretAccessKey,c,t.region,n),E=await oa(t.crypto,x,v),A=`${sS} Credential=${t.securityCredentials.acc...
L50: To learn more about authentication and Google APIs, visit:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
src/index.jsView on unpkg · L3737
Findings
6 High3 Medium5 Low
HighChild Processsrc/index.js
HighShell
HighSame File Env Network Executionsrc/index.js
HighCommand Output Exfiltrationsrc/index.js
HighCloud Metadata Accesssrc/index.js
HighTrigger Reachable Command Output Exfiltrationsrc/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @activepieces/piece-google-forms@0.5.8.
See all versions of @activepieces/piece-google-forms for other recorded verdicts.
- Review the evidence and your use of @activepieces/piece-google-forms@0.5.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.