registry / @alicloud/imm20200930 / 5.0.0

@alicloud/imm20200930@5.0.0

English | [简体中文](README-CN.md) ![](https://aliyunsdk-pages.alicdn.com/icons/AlibabaCloud.svg)

AI Security Review

scanned 14d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package exposes user-invoked Alibaba Cloud IMM API client methods and generated request/response models.

Static reason

One or more suspicious static signals were detected.

Trigger

Importing the module loads generated SDK classes; network calls occur only when consumer code invokes client methods.

Impact

Package-aligned API requests to Alibaba Cloud IMM; no credential harvesting, persistence, destructive local behavior, or unconsented execution found.

Mechanism

Generated OpenAPI RPC client for Alibaba Cloud IMM

Rationale

Static source inspection shows a generated Alibaba Cloud IMM SDK with package-aligned HTTPS RPC endpoints and no install-time execution or malicious primitives. The scanner's secret finding is a model property for a user-supplied archive password, not a hardcoded credential.

Evidence

package.jsonREADME.mddist/client.jssrc/client.tsdist/models/CreateFileUncompressionTaskRequest.jsdist/models/model.js

Network endpoints6

imm.us-west-1.aliyuncs.comimm.us-east-1.aliyuncs.comimm.eu-west-1.aliyuncs.comimm.eu-central-1.aliyuncs.comimm.cn-hangzhou.aliyuncs.comimm.ap-southeast-1.aliyuncs.com

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no install/postinstall/prepare hooks; prepublishOnly only runs tsc before publishing
dist/client.js is generated Alibaba Cloud SDK code extending @alicloud/openapi-core
dist/client.js sends user-invoked RPC calls via callApi with authType AK to IMM endpoints
dist/models/CreateFileUncompressionTaskRequest.js secret hit is a request field named password, not an embedded secret
No child_process, fs writes, eval/vm, native binaries, or AI-agent control-surface writes found
README.md describes Alibaba Cloud IMM SDK usage and repository links

Behavioral surface

SourceNo risky source behavior triggered.

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1,040 file(s), 3.32 MB of source

Source & flagged code

16 flagged

dist/models/CreateFileUncompressionTaskRequest.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.CreateFileUncompressionTaskRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39const CredentialConfig_1 = require("./CredentialConfig");

40const Notification_1 = require("./Notification");

41class CreateFileUncompressionTaskRequest extends $dara.Model {

42 static names() {

43 return {

44 credentialConfig: 'CredentialConfig',

45 notification: 'Notification',

46 password: 'Password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/models/CreateFileUncompressionTaskRequest.jsView on unpkg · L46

47 projectName: 'ProjectName',

48 selectedFiles: 'SelectedFiles',

49 sourceURI: 'SourceURI',

50 targetURI: 'TargetURI',

51 userData: 'UserData',

52 };

53 }

54 static types() {

55 return {

56 credentialConfig: CredentialConfig_1.CredentialConfig,

57 notification: Notification_1.Notification,

58 password: 'string',

59 projectName: 'string',

60 selectedFiles: { 'type': 'array', 'itemType': 'string' },

61 sourceURI: 'string',

62 targetURI: 'string',

63 userData: 'string',

64 };

65 }

66 validate() {

dist/models/CreateOfficeConversionTaskRequest.jsView file

Lines 61-101javascript

61}

62exports.CreateOfficeConversionTaskRequestSources = CreateOfficeConversionTaskRequestSources;

63class CreateOfficeConversionTaskRequest extends $dara.Model {

64 static names() {

65 return {

66 credentialConfig: 'CredentialConfig',

dist/models/CreateArchiveFileInspectionTaskRequest.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var

dist/models/CreateArchiveFileInspectionTaskShrinkRequest.jsView file

Lines 24-64javascript

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

dist/models/CreateFileUncompressionTaskShrinkRequest.jsView file

Lines 24-64javascript

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

dist/models/GenerateWebofficeTokenShrinkRequest.jsView file

Lines 29-69javascript

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding

dist/models/CreateOfficeConversionTaskShrinkRequest.jsView file

Lines 37-77javascript

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39class CreateOfficeConversionTaskShrinkRequest extends $dara.Model {

40 static names() {

dist/models/GenerateWebofficeTokenRequest.jsView file

Lines 34-74javascript

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.GenerateWebofficeTokenRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"

src/models/CreateOfficeConversionTaskShrinkRequest.tsView file

371patternName = generic_password severity = medium line = 371 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateOfficeConversionTaskShrinkRequest.ts

src/models/CreateOfficeConversionTaskShrinkRequest.tsView on unpkg · L371

src/models/GenerateWebofficeTokenShrinkRequest.tsView file

196patternName = generic_password severity = medium line = 196 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GenerateWebofficeTokenShrinkRequest.ts

src/models/GenerateWebofficeTokenShrinkRequest.tsView on unpkg · L196

src/models/GenerateWebofficeTokenRequest.tsView file

201patternName = generic_password severity = medium line = 201 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GenerateWebofficeTokenRequest.ts

src/models/GenerateWebofficeTokenRequest.tsView on unpkg · L201

src/models/CreateArchiveFileInspectionTaskShrinkRequest.tsView file

60patternName = generic_password severity = medium line = 60 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateArchiveFileInspectionTaskShrinkRequest.ts

src/models/CreateArchiveFileInspectionTaskShrinkRequest.tsView on unpkg · L60

src/models/CreateFileUncompressionTaskShrinkRequest.tsView file

77patternName = generic_password severity = medium line = 77 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateFileUncompressionTaskShrinkRequest.ts

src/models/CreateFileUncompressionTaskShrinkRequest.tsView on unpkg · L77

src/models/CreateOfficeConversionTaskRequest.tsView file

426patternName = generic_password severity = medium line = 426 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateOfficeConversionTaskRequest.ts

src/models/CreateOfficeConversionTaskRequest.tsView on unpkg · L426

src/models/CreateFileUncompressionTaskRequest.tsView file

79patternName = generic_password severity = medium line = 79 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateFileUncompressionTaskRequest.ts

src/models/CreateFileUncompressionTaskRequest.tsView on unpkg · L79

src/models/CreateArchiveFileInspectionTaskRequest.tsView file

62patternName = generic_password severity = medium line = 62 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateArchiveFileInspectionTaskRequest.ts

src/models/CreateArchiveFileInspectionTaskRequest.tsView on unpkg · L62

Source & flagged code

16 flagged · loading source

dist/models/CreateFileUncompressionTaskRequest.jsView file

46patternName = generic_password severity = medium line = 46 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/models/CreateFileUncompressionTaskRequest.jsView on unpkg · L46

dist/models/CreateOfficeConversionTaskRequest.jsView file

81patternName = generic_password severity = medium line = 81 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateOfficeConversionTaskRequest.js

dist/models/CreateOfficeConversionTaskRequest.jsView on unpkg · L81

dist/models/CreateArchiveFileInspectionTaskRequest.jsView file

46patternName = generic_password severity = medium line = 46 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateArchiveFileInspectionTaskRequest.js

dist/models/CreateArchiveFileInspectionTaskRequest.jsView on unpkg · L46

dist/models/CreateArchiveFileInspectionTaskShrinkRequest.jsView file

44patternName = generic_password severity = medium line = 44 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateArchiveFileInspectionTaskShrinkRequest.js

dist/models/CreateArchiveFileInspectionTaskShrinkRequest.jsView on unpkg · L44

dist/models/CreateFileUncompressionTaskShrinkRequest.jsView file

44patternName = generic_password severity = medium line = 44 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateFileUncompressionTaskShrinkRequest.js

dist/models/CreateFileUncompressionTaskShrinkRequest.jsView on unpkg · L44

dist/models/GenerateWebofficeTokenShrinkRequest.jsView file

49patternName = generic_password severity = medium line = 49 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/GenerateWebofficeTokenShrinkRequest.js

dist/models/GenerateWebofficeTokenShrinkRequest.jsView on unpkg · L49

dist/models/CreateOfficeConversionTaskShrinkRequest.jsView file

57patternName = generic_password severity = medium line = 57 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/CreateOfficeConversionTaskShrinkRequest.js

dist/models/CreateOfficeConversionTaskShrinkRequest.jsView on unpkg · L57

dist/models/GenerateWebofficeTokenRequest.jsView file

54patternName = generic_password severity = medium line = 54 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/models/GenerateWebofficeTokenRequest.js

dist/models/GenerateWebofficeTokenRequest.jsView on unpkg · L54

src/models/CreateOfficeConversionTaskShrinkRequest.tsView file

371patternName = generic_password severity = medium line = 371 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateOfficeConversionTaskShrinkRequest.ts

src/models/CreateOfficeConversionTaskShrinkRequest.tsView on unpkg · L371

src/models/GenerateWebofficeTokenShrinkRequest.tsView file

196patternName = generic_password severity = medium line = 196 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GenerateWebofficeTokenShrinkRequest.ts

src/models/GenerateWebofficeTokenShrinkRequest.tsView on unpkg · L196

src/models/GenerateWebofficeTokenRequest.tsView file

201patternName = generic_password severity = medium line = 201 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GenerateWebofficeTokenRequest.ts

src/models/GenerateWebofficeTokenRequest.tsView on unpkg · L201

src/models/CreateArchiveFileInspectionTaskShrinkRequest.tsView file

60patternName = generic_password severity = medium line = 60 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateArchiveFileInspectionTaskShrinkRequest.ts

src/models/CreateArchiveFileInspectionTaskShrinkRequest.tsView on unpkg · L60

src/models/CreateFileUncompressionTaskShrinkRequest.tsView file

77patternName = generic_password severity = medium line = 77 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateFileUncompressionTaskShrinkRequest.ts

src/models/CreateFileUncompressionTaskShrinkRequest.tsView on unpkg · L77

src/models/CreateOfficeConversionTaskRequest.tsView file

426patternName = generic_password severity = medium line = 426 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateOfficeConversionTaskRequest.ts

src/models/CreateOfficeConversionTaskRequest.tsView on unpkg · L426

src/models/CreateFileUncompressionTaskRequest.tsView file

79patternName = generic_password severity = medium line = 79 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateFileUncompressionTaskRequest.ts

src/models/CreateFileUncompressionTaskRequest.tsView on unpkg · L79

src/models/CreateArchiveFileInspectionTaskRequest.tsView file

62patternName = generic_password severity = medium line = 62 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateArchiveFileInspectionTaskRequest.ts

src/models/CreateArchiveFileInspectionTaskRequest.tsView on unpkg · L62

Findings

16 Medium2 Low

MediumSecret Patterndist/models/CreateFileUncompressionTaskRequest.js

MediumSecret Patterndist/models/CreateOfficeConversionTaskRequest.js

MediumSecret Patterndist/models/CreateArchiveFileInspectionTaskRequest.js

MediumSecret Patterndist/models/CreateArchiveFileInspectionTaskShrinkRequest.js

MediumSecret Patterndist/models/CreateFileUncompressionTaskShrinkRequest.js

MediumSecret Patterndist/models/GenerateWebofficeTokenShrinkRequest.js

MediumSecret Patterndist/models/CreateOfficeConversionTaskShrinkRequest.js

MediumSecret Patterndist/models/GenerateWebofficeTokenRequest.js

MediumSecret Patternsrc/models/CreateOfficeConversionTaskShrinkRequest.ts

MediumSecret Patternsrc/models/GenerateWebofficeTokenShrinkRequest.ts

MediumSecret Patternsrc/models/GenerateWebofficeTokenRequest.ts

MediumSecret Patternsrc/models/CreateArchiveFileInspectionTaskShrinkRequest.ts

MediumSecret Patternsrc/models/CreateFileUncompressionTaskShrinkRequest.ts

MediumSecret Patternsrc/models/CreateOfficeConversionTaskRequest.ts

MediumSecret Patternsrc/models/CreateFileUncompressionTaskRequest.ts

MediumSecret Patternsrc/models/CreateArchiveFileInspectionTaskRequest.ts

LowNon Install Lifecycle Scripts

LowScripts Present

Source & flagged code

16 flagged

dist/models/CreateFileUncompressionTaskRequest.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);

31 __setModuleDefault(result, mod);

32 return result;

33 };

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.CreateFileUncompressionTaskRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39const CredentialConfig_1 = require("./CredentialConfig");

40const Notification_1 = require("./Notification");

41class CreateFileUncompressionTaskRequest extends $dara.Model {

42 static names() {

43 return {

44 credentialConfig: 'CredentialConfig',

45 notification: 'Notification',

46 password: 'Password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/models/CreateFileUncompressionTaskRequest.jsView on unpkg · L46

47 projectName: 'ProjectName',

48 selectedFiles: 'SelectedFiles',

49 sourceURI: 'SourceURI',

50 targetURI: 'TargetURI',

51 userData: 'UserData',

52 };

53 }

54 static types() {

55 return {

56 credentialConfig: CredentialConfig_1.CredentialConfig,

57 notification: Notification_1.Notification,

58 password: 'string',

59 projectName: 'string',

60 selectedFiles: { 'type': 'array', 'itemType': 'string' },

61 sourceURI: 'string',

62 targetURI: 'string',

63 userData: 'string',

64 };

65 }

66 validate() {

dist/models/CreateOfficeConversionTaskRequest.jsView file

Lines 61-101javascript

61}

62exports.CreateOfficeConversionTaskRequestSources = CreateOfficeConversionTaskRequestSources;

63class CreateOfficeConversionTaskRequest extends $dara.Model {

64 static names() {

65 return {

66 credentialConfig: 'CredentialConfig',

dist/models/CreateArchiveFileInspectionTaskRequest.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if (mod != null) for (var

dist/models/CreateArchiveFileInspectionTaskShrinkRequest.jsView file

Lines 24-64javascript

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

dist/models/CreateFileUncompressionTaskShrinkRequest.jsView file

Lines 24-64javascript

24 };

25 return ownKeys(o);

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

dist/models/GenerateWebofficeTokenShrinkRequest.jsView file

Lines 29-69javascript

29 var result = {};

30 if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding

dist/models/CreateOfficeConversionTaskShrinkRequest.jsView file

Lines 37-77javascript

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"));

39class CreateOfficeConversionTaskShrinkRequest extends $dara.Model {

40 static names() {

dist/models/GenerateWebofficeTokenRequest.jsView file

Lines 34-74javascript

34})();

35Object.defineProperty(exports, "__esModule", { value: true });

36exports.GenerateWebofficeTokenRequest = void 0;

37// This file is auto-generated, don't edit it

38const $dara = __importStar(require("@darabonba/typescript"

src/models/CreateOfficeConversionTaskShrinkRequest.tsView file

371patternName = generic_password severity = medium line = 371 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateOfficeConversionTaskShrinkRequest.ts

src/models/CreateOfficeConversionTaskShrinkRequest.tsView on unpkg · L371

src/models/GenerateWebofficeTokenShrinkRequest.tsView file

196patternName = generic_password severity = medium line = 196 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GenerateWebofficeTokenShrinkRequest.ts

src/models/GenerateWebofficeTokenShrinkRequest.tsView on unpkg · L196

src/models/GenerateWebofficeTokenRequest.tsView file

201patternName = generic_password severity = medium line = 201 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/GenerateWebofficeTokenRequest.ts

src/models/GenerateWebofficeTokenRequest.tsView on unpkg · L201

src/models/CreateArchiveFileInspectionTaskShrinkRequest.tsView file

60patternName = generic_password severity = medium line = 60 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateArchiveFileInspectionTaskShrinkRequest.ts

src/models/CreateArchiveFileInspectionTaskShrinkRequest.tsView on unpkg · L60

src/models/CreateFileUncompressionTaskShrinkRequest.tsView file

77patternName = generic_password severity = medium line = 77 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateFileUncompressionTaskShrinkRequest.ts

src/models/CreateFileUncompressionTaskShrinkRequest.tsView on unpkg · L77

src/models/CreateOfficeConversionTaskRequest.tsView file

426patternName = generic_password severity = medium line = 426 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateOfficeConversionTaskRequest.ts

src/models/CreateOfficeConversionTaskRequest.tsView on unpkg · L426

src/models/CreateFileUncompressionTaskRequest.tsView file

79patternName = generic_password severity = medium line = 79 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateFileUncompressionTaskRequest.ts

src/models/CreateFileUncompressionTaskRequest.tsView on unpkg · L79

src/models/CreateArchiveFileInspectionTaskRequest.tsView file

62patternName = generic_password severity = medium line = 62 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/models/CreateArchiveFileInspectionTaskRequest.ts

src/models/CreateArchiveFileInspectionTaskRequest.tsView on unpkg · L62