registry  /  @adaptware/eagles-db  /  0.4.37

@adaptware/eagles-db@0.4.37

A Prisma client package for Treadspace database operations

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsShell
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 19 file(s), 2.80 MB of source, external domains: dotenvx.com, github.com, pris.ly, unpkg.com, www.prisma.io

Source & flagged code

11 flagged · loading source
client/index.jsView file
1705patternName = generic_password severity = medium line = 1705 matchedText = password...rd',
Medium
Secret Pattern

Package contains a possible secret pattern.

client/index.jsView on unpkg · L1705
1767patternName = generic_password severity = medium line = 1767 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/index.js

client/index.jsView on unpkg · L1767
client/client.jsView file
4// biome-ignore-all lint: generated file L5: module.exports = { ...require('.') }
Medium
Dynamic Require

Package source references dynamic require/import behavior.

client/client.jsView on unpkg · L4
client/libquery_engine-darwin-arm64.dylib.nodeView file
•path = client/libquery_engine-darwin-arm64.dylib.node kind = native_binary sizeBytes = 19356128 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

client/libquery_engine-darwin-arm64.dylib.nodeView on unpkg
client/query_engine_bg.wasmView file
•path = client/query_engine_bg.wasm kind = wasm_module sizeBytes = 2297601 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

client/query_engine_bg.wasmView on unpkg
client/edge.jsView file
1704patternName = generic_password severity = medium line = 1704 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/edge.js

client/edge.jsView on unpkg · L1704
1766patternName = generic_password severity = medium line = 1766 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/edge.js

client/edge.jsView on unpkg · L1766
client/index-browser.jsView file
1732patternName = generic_password severity = medium line = 1732 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/index-browser.js

client/index-browser.jsView on unpkg · L1732
1794patternName = generic_password severity = medium line = 1794 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/index-browser.js

client/index-browser.jsView on unpkg · L1794
client/wasm.jsView file
1704patternName = generic_password severity = medium line = 1704 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/wasm.js

client/wasm.jsView on unpkg · L1704
1766patternName = generic_password severity = medium line = 1766 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/wasm.js

client/wasm.jsView on unpkg · L1766

Findings

1 High14 Medium4 Low
HighObfuscated
MediumSecret Patternclient/index.js
MediumDynamic Requireclient/client.js
MediumEnvironment Vars
MediumProtestware
MediumShips Native Binaryclient/libquery_engine-darwin-arm64.dylib.node
MediumShips Wasm Moduleclient/query_engine_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patternclient/index.js
MediumSecret Patternclient/edge.js
MediumSecret Patternclient/edge.js
MediumSecret Patternclient/index-browser.js
MediumSecret Patternclient/index-browser.js
MediumSecret Patternclient/wasm.js
MediumSecret Patternclient/wasm.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings