@ansstory/hias@1.0.25: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@ansstory/hias@1.0.25: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

4 flagged · loading source

dist/index.jsView file

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}zY.suggestSimilar=xHe});var XY=h(Y4=>{var gHe=require("node:events").EventEmitter,V4=require("node:child_process"),ao=require("node:path"),gw=require("n... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L13

16Expecting one of '${n.join("', '")}'`);return this._lifeCycleHooks[t]?this._lifeCycleHooks[t].push(r):this._lifeCycleHooks[t]=[r],this}exitOverride(t){return t?this._exitCallback=t... L17: - already used by option '${r.flags}'`)}this._initOptionGroup(t),this.options.push(t)}_registerCommand(t){let r=i=>[i.name()].concat(i.aliases()),n=r(t).find(i=>this._findCommand(... L18: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,s=>{let a;typeof r=="function"?a=r({error:s.error,command:s.command}):a=r,a&&s.write(`${a} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelp

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L16

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}zY.suggestSimilar=xHe});var XY=h(Y4=>{var gHe=require("node:events").EventEmitter,V4=require("node:child_process"),ao=require("node:path"),gw=require("n... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,s=>{let a;typeof r=="function"?a=r({error:s.error,command:s.command}):a=r,a&&s.write(`${a} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelpOption();r&&t.find(i=>r.is(i))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function GY(e){r...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L13

1#! /usr/bin/env node L2: var Dze=Object.create;var uw=Object.defineProperty;var kze=Object.getOwnPropertyDescriptor;var Fze=Object.getOwnPropertyNames;var qze=Object.getPrototypeOf,Pze=Object.prototype.has... L3: `)}displayWidth(t){return $Y(t).length}styleTitle(t){return t}styleUsage(t){return t.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT... ... L13: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}zY.suggestSimilar=xHe});var XY=h(Y4=>{var gHe=require("node:events").EventEmitter,V4=require("node:child_process"),ao=require("node:path"),gw=require("n... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidd

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

Source & flagged code

4 flagged

dist/index.jsView file

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}zY.suggestSimilar=xHe});var XY=h(Y4=>{var gHe=require("node:events").EventEmitter,V4=require("node:child_process"),ao=require("node:path"),gw=require("n... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L13

16Expecting one of '${n.join("', '")}'`);return this._lifeCycleHooks[t]?this._lifeCycleHooks[t].push(r):this._lifeCycleHooks[t]=[r],this}exitOverride(t){return t?this._exitCallback=t... L17: - already used by option '${r.flags}'`)}this._initOptionGroup(t),this.options.push(t)}_registerCommand(t){let r=i=>[i.name()].concat(i.aliases()),n=r(t).find(i=>this._findCommand(... L18: - either make a new Command for each call to parse, or stop storing options as properties`);this._name=this._savedState._name,this._scriptPath=null,this.rawArgs=[],this._optionValu... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,s=>{let a;typeof r=="function"?a=r({error:s.error,command:s.command}):a=r,a&&s.write(`${a} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelp

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L16

13(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}zY.suggestSimilar=xHe});var XY=h(Y4=>{var gHe=require("node:events").EventEmitter,V4=require("node:child_process"),ao=require("node:path"),gw=require("n... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidden)&&(t._hidden=!0),this._registerComma... ... L26: Expecting one of '${n.join("', '")}'`);let i=`${t}Help`;return this.on(i,s=>{let a;typeof r=="function"?a=r({error:s.error,command:s.command}):a=r,a&&s.write(`${a} L27: `)}),this}_outputHelpIfRequested(t){let r=this._getHelpOption();r&&t.find(i=>r.is(i))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function GY(e){r...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L13

1#! /usr/bin/env node L2: var Dze=Object.create;var uw=Object.defineProperty;var kze=Object.getOwnPropertyDescriptor;var Fze=Object.getOwnPropertyNames;var qze=Object.getPrototypeOf,Pze=Object.prototype.has... L3: `)}displayWidth(t){return $Y(t).length}styleTitle(t){return t}styleUsage(t){return t.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT... ... L13: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L14: (Did you mean ${n[0]}?)`:""}zY.suggestSimilar=xHe});var XY=h(Y4=>{var gHe=require("node:events").EventEmitter,V4=require("node:child_process"),ao=require("node:path"),gw=require("n... L15: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=t._name),(r.noHelp||r.hidd

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1