registry  /  @alicloud/dingtalk  /  2.2.41

@alicloud/dingtalk@2.2.41

English | [简体中文](README-CN.md) ![](https://aliyunsdk-pages.alicdn.com/icons/AlibabaCloud.svg)

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
Filesystem
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 374 file(s), 35.1 MB of source

Source & flagged code

4 flagged · loading source
dist/calendar_1_0/client.jsView file
980patternName = generic_password severity = medium line = 980 matchedText = password...rd',
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/calendar_1_0/client.jsView on unpkg · L980
dist/mail_1_0/client.jsView file
337patternName = generic_password severity = medium line = 337 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in dist/mail_1_0/client.js

dist/mail_1_0/client.jsView on unpkg · L337
src/calendar_1_0/client.tsView file
1259patternName = generic_password severity = medium line = 1259 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in src/calendar_1_0/client.ts

src/calendar_1_0/client.tsView on unpkg · L1259
src/mail_1_0/client.tsView file
624patternName = generic_password severity = medium line = 624 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in src/mail_1_0/client.ts

src/mail_1_0/client.tsView on unpkg · L624

Findings

4 Medium3 Low
MediumSecret Patterndist/calendar_1_0/client.js
MediumSecret Patterndist/mail_1_0/client.js
MediumSecret Patternsrc/calendar_1_0/client.ts
MediumSecret Patternsrc/mail_1_0/client.ts
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem