registry / @alicloud/gpdb20160503 / 3.10.0

@alicloud/gpdb20160503@3.10.0

English | [简体中文](README-CN.md) ![](https://aliyunsdk-pages.alicdn.com/icons/AlibabaCloud.svg)

AI Security Review

scanned 14d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Runtime network behavior is user-invoked Alibaba Cloud GPDB API calls.

Static reason

One or more suspicious static signals were detected.

Trigger

User imports the SDK and calls client methods with request objects.

Impact

User-provided request parameters, including credential-like fields for legitimate API operations, may be sent to Alibaba Cloud endpoints.

Mechanism

Generated OpenAPI client request construction and dispatch

Rationale

Static source inspection shows a generated Alibaba Cloud SDK with package-aligned API calls and no install-time execution or covert credential/file exfiltration. Scanner secret hits are model/request field names and examples, not malicious payloads.

Evidence

package.jsondist/client.jssrc/client.tsdist/models/CreateStreamingJobRequest.jssrc/models/CreateStreamingJobRequest.ts

Network endpoints5

gpdb.aliyuncs.comgpdb.me-east-1.aliyuncs.comgpdb.me-central-1.aliyuncs.comgpdb.eu-west-1.aliyuncs.comgpdb.eu-central-1.aliyuncs.com

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json includes prepublishOnly script, but it is only "tsc".
dist/client.js forwards user-supplied password/secret/token fields into API query parameters.
dist/models/CreateStreamingJobRequest.js defines a password field and example config text, not an embedded secret.

Evidence against

package.json has no install/postinstall/import-time lifecycle hook; main is dist/client.js.
dist/client.js is auto-generated Alibaba Cloud OpenAPI client code using @alicloud/openapi-core callApi/doAction.
src/client.ts and dist/client.js define GPDB endpoint maps under aliyuncs.com and package-aligned API actions.
No child_process, eval/Function, filesystem writes, persistence, destructive behavior, or AI-agent control-surface writes found.
Secret-like fields are request/response model properties for legitimate GPDB/Supabase/API operations, not hardcoded credentials or harvesting.

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,754 file(s), 5.71 MB of source, external domains: help.aliyun.com

Source & flagged code

16 flagged

dist/models/CreateStreamingJobRequest.jsView file

Lines 38-78javascript

38const $dara = __importStar(require("@darabonba/typescript"));

39class CreateStreamingJobRequest extends $dara.Model {

40 static names() {

41 return {

42 account: 'Account',

43 consistency: 'Consistency',

44 DBInstanceId: 'DBInstanceId',

45 dataSourceId: 'DataSourceId',

46 destColumns: 'DestColumns',

47 destDatabase: 'DestDatabase',

48 destSchema: 'DestSchema',

49 destTable: 'DestTable',

50 errorLimitCount: 'ErrorLimitCount',

51 fallbackOffset: 'FallbackOffset',

52 groupName: 'GroupName',

53 jobConfig: 'JobConfig',

54 jobDescription: 'JobDescription',

55 jobName: 'JobName',

56 matchColumns: 'MatchColumns',

57 mode: 'Mode',

58 password: 'Password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/models/CreateStreamingJobRequest.jsView on unpkg · L58

59 regionId: 'RegionId',

60 srcColumns: 'SrcColumns',

61 tryRun: 'TryRun',

62 updateColumns: 'UpdateColumns',

63 writeMode: 'WriteMode',

64 };

65 }

66 static types() {

67 return {

68 account: 'string',

69 consistency: 'string',

70 DBInstanceId: 'string',

71 dataSourceId: 'string',

72 destColumns: { 'type': 'array', 'itemType': 'string' },

73 destDatabase: 'string',

74 destSchema: 'string',

75 destTable: 'string',

76 errorLimitCount: 'number',

77 fallbackOffset: 'string',

78 groupName: 'string',

dist/models/GetSecretValueResponseBody.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k

dist/models/ModifyStreamingJobRequest.jsView file

Lines 36-76javascript

36exports.ModifyStreamingJobRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39class ModifyStreamingJobRequest extends $dara.Model {

dist/models/CreateStreamingJobShrinkRequest.jsView file

Lines 38-78javascript

38const $dara = __importStar(require("@darabonba/typescript"));

39class CreateStreamingJobShrinkRequest extends $dara.Model {

40 static names() {

41 return {

dist/models/ListStreamingJobsResponseBody.jsView file

Lines 39-79javascript

39class ListStreamingJobsResponseBodyJobItems extends $dara.Model {

40 static names() {

41 return {

42 account: 'Account',

43 consistency: 'Consistency',

44 createTime: 'CreateTime',

dist/models/CreateSecretRequest.jsView file

Lines 25-65javascript

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod !=

dist/models/DescribeStreamingJobResponseBody.jsView file

Lines 42-82javascript

42 account: 'Account',

43 consistency: 'Consistency',

44 createTime: 'CreateTime',

45 dataSourceId: 'DataSourceId',

46 dataSourceName: 'DataSourceName',

47 destColumns

dist/models/ModifyStreamingJobShrinkRequest.jsView file

Lines 36-76javascript

36exports.ModifyStreamingJobShrinkRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39class ModifyStreamingJobShrinkRequest extends $dara.Model {

src/models/CreateSecretRequest.tsView file

84patternName = generic_password severity = medium line = 84 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateSecretRequest.ts

src/models/CreateSecretRequest.tsView on unpkg · L84

src/models/ListStreamingJobsResponseBody.tsView file

201patternName = generic_password severity = medium line = 201 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ListStreamingJobsResponseBody.ts

src/models/ListStreamingJobsResponseBody.tsView on unpkg · L201

src/models/ModifyStreamingJobShrinkRequest.tsView file

312patternName = generic_password severity = medium line = 312 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ModifyStreamingJobShrinkRequest.ts

src/models/ModifyStreamingJobShrinkRequest.tsView on unpkg · L312

src/models/DescribeStreamingJobResponseBody.tsView file

359patternName = generic_password severity = medium line = 359 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/DescribeStreamingJobResponseBody.ts

src/models/DescribeStreamingJobResponseBody.tsView on unpkg · L359

src/models/ModifyStreamingJobRequest.tsView file

312patternName = generic_password severity = medium line = 312 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ModifyStreamingJobRequest.ts

src/models/ModifyStreamingJobRequest.tsView on unpkg · L312

src/models/CreateStreamingJobShrinkRequest.tsView file

325patternName = generic_password severity = medium line = 325 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateStreamingJobShrinkRequest.ts

src/models/CreateStreamingJobShrinkRequest.tsView on unpkg · L325

src/models/CreateStreamingJobRequest.tsView file

325patternName = generic_password severity = medium line = 325 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateStreamingJobRequest.ts

src/models/CreateStreamingJobRequest.tsView on unpkg · L325

src/models/GetSecretValueResponseBody.tsView file

95patternName = generic_password severity = medium line = 95 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GetSecretValueResponseBody.ts

src/models/GetSecretValueResponseBody.tsView on unpkg · L95

Source & flagged code

16 flagged · loading source

dist/models/CreateStreamingJobRequest.jsView file

58patternName = generic_password severity = medium line = 58 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/models/CreateStreamingJobRequest.jsView on unpkg · L58

dist/models/GetSecretValueResponseBody.jsView file

46patternName = generic_password severity = medium line = 46 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/GetSecretValueResponseBody.js

dist/models/GetSecretValueResponseBody.jsView on unpkg · L46

dist/models/ModifyStreamingJobRequest.jsView file

56patternName = generic_password severity = medium line = 56 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/ModifyStreamingJobRequest.js

dist/models/ModifyStreamingJobRequest.jsView on unpkg · L56

dist/models/CreateStreamingJobShrinkRequest.jsView file

58patternName = generic_password severity = medium line = 58 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateStreamingJobShrinkRequest.js

dist/models/CreateStreamingJobShrinkRequest.jsView on unpkg · L58

dist/models/ListStreamingJobsResponseBody.jsView file

59patternName = generic_password severity = medium line = 59 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/ListStreamingJobsResponseBody.js

dist/models/ListStreamingJobsResponseBody.jsView on unpkg · L59

dist/models/CreateSecretRequest.jsView file

45patternName = generic_password severity = medium line = 45 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateSecretRequest.js

dist/models/CreateSecretRequest.jsView on unpkg · L45

dist/models/DescribeStreamingJobResponseBody.jsView file

62patternName = generic_password severity = medium line = 62 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/DescribeStreamingJobResponseBody.js

dist/models/DescribeStreamingJobResponseBody.jsView on unpkg · L62

dist/models/ModifyStreamingJobShrinkRequest.jsView file

56patternName = generic_password severity = medium line = 56 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/ModifyStreamingJobShrinkRequest.js

dist/models/ModifyStreamingJobShrinkRequest.jsView on unpkg · L56

src/models/CreateSecretRequest.tsView file

84patternName = generic_password severity = medium line = 84 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateSecretRequest.ts

src/models/CreateSecretRequest.tsView on unpkg · L84

src/models/ListStreamingJobsResponseBody.tsView file

201patternName = generic_password severity = medium line = 201 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ListStreamingJobsResponseBody.ts

src/models/ListStreamingJobsResponseBody.tsView on unpkg · L201

src/models/ModifyStreamingJobShrinkRequest.tsView file

312patternName = generic_password severity = medium line = 312 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ModifyStreamingJobShrinkRequest.ts

src/models/ModifyStreamingJobShrinkRequest.tsView on unpkg · L312

src/models/DescribeStreamingJobResponseBody.tsView file

359patternName = generic_password severity = medium line = 359 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/DescribeStreamingJobResponseBody.ts

src/models/DescribeStreamingJobResponseBody.tsView on unpkg · L359

src/models/ModifyStreamingJobRequest.tsView file

312patternName = generic_password severity = medium line = 312 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ModifyStreamingJobRequest.ts

src/models/ModifyStreamingJobRequest.tsView on unpkg · L312

src/models/CreateStreamingJobShrinkRequest.tsView file

325patternName = generic_password severity = medium line = 325 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateStreamingJobShrinkRequest.ts

src/models/CreateStreamingJobShrinkRequest.tsView on unpkg · L325

src/models/CreateStreamingJobRequest.tsView file

325patternName = generic_password severity = medium line = 325 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateStreamingJobRequest.ts

src/models/CreateStreamingJobRequest.tsView on unpkg · L325

src/models/GetSecretValueResponseBody.tsView file

95patternName = generic_password severity = medium line = 95 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GetSecretValueResponseBody.ts

src/models/GetSecretValueResponseBody.tsView on unpkg · L95

Findings

16 Medium4 Low

MediumSecret Patterndist/models/CreateStreamingJobRequest.js

MediumSecret Patterndist/models/GetSecretValueResponseBody.js

MediumSecret Patterndist/models/ModifyStreamingJobRequest.js

MediumSecret Patterndist/models/CreateStreamingJobShrinkRequest.js

MediumSecret Patterndist/models/ListStreamingJobsResponseBody.js

MediumSecret Patterndist/models/CreateSecretRequest.js

MediumSecret Patterndist/models/DescribeStreamingJobResponseBody.js

MediumSecret Patterndist/models/ModifyStreamingJobShrinkRequest.js

MediumSecret Patternsrc/models/CreateSecretRequest.ts

MediumSecret Patternsrc/models/ListStreamingJobsResponseBody.ts

MediumSecret Patternsrc/models/ModifyStreamingJobShrinkRequest.ts

MediumSecret Patternsrc/models/DescribeStreamingJobResponseBody.ts

MediumSecret Patternsrc/models/ModifyStreamingJobRequest.ts

MediumSecret Patternsrc/models/CreateStreamingJobShrinkRequest.ts

MediumSecret Patternsrc/models/CreateStreamingJobRequest.ts

MediumSecret Patternsrc/models/GetSecretValueResponseBody.ts

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

16 flagged

dist/models/CreateStreamingJobRequest.jsView file

Lines 38-78javascript

38const $dara = __importStar(require("@darabonba/typescript"));

39class CreateStreamingJobRequest extends $dara.Model {

40 static names() {

41 return {

42 account: 'Account',

43 consistency: 'Consistency',

44 DBInstanceId: 'DBInstanceId',

45 dataSourceId: 'DataSourceId',

46 destColumns: 'DestColumns',

47 destDatabase: 'DestDatabase',

48 destSchema: 'DestSchema',

49 destTable: 'DestTable',

50 errorLimitCount: 'ErrorLimitCount',

51 fallbackOffset: 'FallbackOffset',

52 groupName: 'GroupName',

53 jobConfig: 'JobConfig',

54 jobDescription: 'JobDescription',

55 jobName: 'JobName',

56 matchColumns: 'MatchColumns',

57 mode: 'Mode',

58 password: 'Password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/models/CreateStreamingJobRequest.jsView on unpkg · L58

59 regionId: 'RegionId',

60 srcColumns: 'SrcColumns',

61 tryRun: 'TryRun',

62 updateColumns: 'UpdateColumns',

63 writeMode: 'WriteMode',

64 };

65 }

66 static types() {

67 return {

68 account: 'string',

69 consistency: 'string',

70 DBInstanceId: 'string',

71 dataSourceId: 'string',

72 destColumns: { 'type': 'array', 'itemType': 'string' },

73 destDatabase: 'string',

74 destSchema: 'string',

75 destTable: 'string',

76 errorLimitCount: 'number',

77 fallbackOffset: 'string',

78 groupName: 'string',

dist/models/GetSecretValueResponseBody.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k

dist/models/ModifyStreamingJobRequest.jsView file

Lines 36-76javascript

36exports.ModifyStreamingJobRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39class ModifyStreamingJobRequest extends $dara.Model {

dist/models/CreateStreamingJobShrinkRequest.jsView file

Lines 38-78javascript

38const $dara = __importStar(require("@darabonba/typescript"));

39class CreateStreamingJobShrinkRequest extends $dara.Model {

40 static names() {

41 return {

dist/models/ListStreamingJobsResponseBody.jsView file

Lines 39-79javascript

39class ListStreamingJobsResponseBodyJobItems extends $dara.Model {

40 static names() {

41 return {

42 account: 'Account',

43 consistency: 'Consistency',

44 createTime: 'CreateTime',

dist/models/CreateSecretRequest.jsView file

Lines 25-65javascript

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod !=

dist/models/DescribeStreamingJobResponseBody.jsView file

Lines 42-82javascript

42 account: 'Account',

43 consistency: 'Consistency',

44 createTime: 'CreateTime',

45 dataSourceId: 'DataSourceId',

46 dataSourceName: 'DataSourceName',

47 destColumns

dist/models/ModifyStreamingJobShrinkRequest.jsView file

Lines 36-76javascript

36exports.ModifyStreamingJobShrinkRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39class ModifyStreamingJobShrinkRequest extends $dara.Model {

src/models/CreateSecretRequest.tsView file

84patternName = generic_password severity = medium line = 84 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateSecretRequest.ts

src/models/CreateSecretRequest.tsView on unpkg · L84

src/models/ListStreamingJobsResponseBody.tsView file

201patternName = generic_password severity = medium line = 201 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ListStreamingJobsResponseBody.ts

src/models/ListStreamingJobsResponseBody.tsView on unpkg · L201

src/models/ModifyStreamingJobShrinkRequest.tsView file

312patternName = generic_password severity = medium line = 312 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ModifyStreamingJobShrinkRequest.ts

src/models/ModifyStreamingJobShrinkRequest.tsView on unpkg · L312

src/models/DescribeStreamingJobResponseBody.tsView file

359patternName = generic_password severity = medium line = 359 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/DescribeStreamingJobResponseBody.ts

src/models/DescribeStreamingJobResponseBody.tsView on unpkg · L359

src/models/ModifyStreamingJobRequest.tsView file

312patternName = generic_password severity = medium line = 312 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/ModifyStreamingJobRequest.ts

src/models/ModifyStreamingJobRequest.tsView on unpkg · L312

src/models/CreateStreamingJobShrinkRequest.tsView file

325patternName = generic_password severity = medium line = 325 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateStreamingJobShrinkRequest.ts

src/models/CreateStreamingJobShrinkRequest.tsView on unpkg · L325

src/models/CreateStreamingJobRequest.tsView file

325patternName = generic_password severity = medium line = 325 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateStreamingJobRequest.ts

src/models/CreateStreamingJobRequest.tsView on unpkg · L325

src/models/GetSecretValueResponseBody.tsView file

95patternName = generic_password severity = medium line = 95 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GetSecretValueResponseBody.ts

src/models/GetSecretValueResponseBody.tsView on unpkg · L95