registry  /  @adaptware/eagles-db  /  0.4.36

@adaptware/eagles-db@0.4.36

A Prisma client package for Treadspace database operations

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsShell
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 19 file(s), 2.18 MB of source, external domains: dotenvx.com, github.com, pris.ly, unpkg.com, www.prisma.io

Source & flagged code

11 flagged · loading source
client/index.jsView file
985patternName = generic_password severity = medium line = 985 matchedText = password...rd',
Medium
Secret Pattern

Package contains a possible secret pattern.

client/index.jsView on unpkg · L985
1045patternName = generic_password severity = medium line = 1045 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/index.js

client/index.jsView on unpkg · L1045
client/client.jsView file
4// biome-ignore-all lint: generated file L5: module.exports = { ...require('.') }
Medium
Dynamic Require

Package source references dynamic require/import behavior.

client/client.jsView on unpkg · L4
client/libquery_engine-darwin-arm64.dylib.nodeView file
path = client/libquery_engine-darwin-arm64.dylib.node kind = native_binary sizeBytes = 19356128 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

client/libquery_engine-darwin-arm64.dylib.nodeView on unpkg
client/query_engine_bg.wasmView file
path = client/query_engine_bg.wasm kind = wasm_module sizeBytes = 2297601 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

client/query_engine_bg.wasmView on unpkg
client/edge.jsView file
984patternName = generic_password severity = medium line = 984 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/edge.js

client/edge.jsView on unpkg · L984
1044patternName = generic_password severity = medium line = 1044 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/edge.js

client/edge.jsView on unpkg · L1044
client/index-browser.jsView file
1012patternName = generic_password severity = medium line = 1012 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/index-browser.js

client/index-browser.jsView on unpkg · L1012
1072patternName = generic_password severity = medium line = 1072 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/index-browser.js

client/index-browser.jsView on unpkg · L1072
client/wasm.jsView file
984patternName = generic_password severity = medium line = 984 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/wasm.js

client/wasm.jsView on unpkg · L984
1044patternName = generic_password severity = medium line = 1044 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in client/wasm.js

client/wasm.jsView on unpkg · L1044

Findings

1 High14 Medium4 Low
HighObfuscated
MediumSecret Patternclient/index.js
MediumDynamic Requireclient/client.js
MediumEnvironment Vars
MediumProtestware
MediumShips Native Binaryclient/libquery_engine-darwin-arm64.dylib.node
MediumShips Wasm Moduleclient/query_engine_bg.wasm
MediumStructural Risk Force Deep Review
MediumSecret Patternclient/index.js
MediumSecret Patternclient/edge.js
MediumSecret Patternclient/edge.js
MediumSecret Patternclient/index-browser.js
MediumSecret Patternclient/index-browser.js
MediumSecret Patternclient/wasm.js
MediumSecret Patternclient/wasm.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings