registry / @ai-development-environment/server / 0.0.28

@ai-development-environment/server@0.0.28

AI-focused development environment (prebuilt Next.js standalone server)

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 106 KB of source, external domains: control.test

Source & flagged code

9 flagged

standalone/.next/server/chunks/_1_g2i-t._.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = module.e...ew=`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

standalone/.next/server/chunks/_1_g2i-t._.jsView on unpkg · L1

1patternName = private_key_rsa severity = critical line = 1 matchedText = module.e...ew=`

Critical

Secret Pattern

RSA private key in standalone/.next/server/chunks/_1_g2i-t._.js

standalone/.next/server/chunks/_1_g2i-t._.jsView on unpkg · L1

prisma-runtime/prisma.config.jsView file

Lines 1-8javascript

1const path = require("node:path");

2const { defineConfig } = require("prisma/config");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

prisma-runtime/prisma.config.jsView on unpkg · L1

4module.exports = defineConfig({

5 schema: path.join(__dirname, "prisma", "schema.prisma"),

6 datasource: { url: process.env.DATABASE_URL },

7});

standalone/.next/server/assets/emscripten-module.0vk4jof8ie0ry.wasmView file

•path = standalone/.next/server/assets/emscripten-module.0vk4jof8ie0ry.wasm kind = wasm_module sizeBytes = 1027523 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

standalone/.next/server/assets/emscripten-module.0vk4jof8ie0ry.wasmView on unpkg

standalone/.next/static/media/bbc41e54d2fcbd21-s.1rgnod-3esatf.woff2View file

•path = standalone/.[redacted]-s.1rgnod-3esatf.woff2 kind = high_entropy_blob sizeBytes = 14712 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

standalone/.next/static/media/bbc41e54d2fcbd21-s.1rgnod-3esatf.woff2View on unpkg

standalone/.next/server/chunks/_0tufgj0._.jsView file

•path = standalone/.next/server/chunks/_0tufgj0._.js kind = payload_in_excluded_dir sizeBytes = 2934295 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

standalone/.next/server/chunks/_0tufgj0._.jsView on unpkg

•path = standalone/.next/server/chunks/_0tufgj0._.js kind = oversized_source_file sizeBytes = 2934295 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

standalone/.next/server/chunks/_0tufgj0._.jsView on unpkg

standalone/.next/server/chunks/_00mzn-u._.jsView file

56patternName = private_key_rsa severity = critical line = 56 matchedText = ${t}`}sp...ew=`

Critical

Secret Pattern

RSA private key in standalone/.next/server/chunks/_00mzn-u._.js

standalone/.next/server/chunks/_00mzn-u._.jsView on unpkg · L56

standalone/.next/server/chunks/_0bru086._.jsView file

56patternName = private_key_rsa severity = critical line = 56 matchedText = ${t}`}sp...ew=`

Critical

Secret Pattern

RSA private key in standalone/.next/server/chunks/_0bru086._.js

standalone/.next/server/chunks/_0bru086._.jsView on unpkg · L56

Source & flagged code

9 flagged · loading source

standalone/.next/server/chunks/_1_g2i-t._.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code