registry / @bookolosystem/engine / 4.4.42

@bookolosystem/engine@4.4.42

A modern booking system for your hotel

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 38 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

NoLicense

scanned 622 file(s), 8.53 MB of source, external domains: api.bookoloengine.com, cdn.jsdelivr.net, docs.sentry.io, fonts.googleapis.com, i.ytimg.com, ibe.prod.co25.net, maps.google, maps.googleapis.com, plausible.newlogic.cz, player.vimeo.com, secure.ergo-cestovni.cz, static.sojern.com, tailwindcss.com, tracking.quicktext.im, v4.bookoloengine.com, www.bookoloengine.com, www.w3.org

Source & flagged code

31 flagged

assets/b52f8c2/chain.BFDg-eNz.jsView file

Lines 1-21javascript

1(function(){try{var e=typeof window<`u`?window:typeof global<`u`?global:typeof globalThis<`u`?globalThis:typeof self<`u`?self:{};e.SENTRY_RELEASE={id

Source & flagged code

31 flagged · loading source

assets/b52f8c2/chain.BFDg-eNz.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...ce?`

High

High Secret

Package contains a high-severity secret pattern.

assets/b52f8c2/chain.BFDg-eNz.jsView on unpkg · L1

1patternName = google_api_key severity = high line = 1 matchedText = (functio...ce?`

High

Secret Pattern

Google API key in assets/b52f8c2/chain.BFDg-eNz.js

assets/b52f8c2/chain.BFDg-eNz.jsView on unpkg · L1

assets/b52f8c2/CalendarFlexible.BIsQ_3DO.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/b52f8c2/CalendarFlexible.BIsQ_3DO.js

assets/b52f8c2/CalendarFlexible.BIsQ_3DO.jsView on unpkg · L1

assets/b52f8c2/Header.BjefCZwY.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/b52f8c2/Header.BjefCZwY.js

assets/b52f8c2/Header.BjefCZwY.jsView on unpkg · L1

assets/b52f8c2/app.ce.QXP33bnV.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...m */

High

Secret Pattern

Google API key in assets/b52f8c2/app.ce.QXP33bnV.js

assets/b52f8c2/app.ce.QXP33bnV.jsView on unpkg · L1

assets/b52f8c2/_uuid_.CgIuj5C1.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...lt};

High

Secret Pattern

Google API key in assets/b52f8c2/_uuid_.CgIuj5C1.js

assets/b52f8c2/_uuid_.CgIuj5C1.jsView on unpkg · L1

assets/b52f8c2/location.C85dqqlK.jsView file

15patternName = google_api_key severity = high line = 15 matchedText = </svg>`,...lt};

High

Secret Pattern

Google API key in assets/b52f8c2/location.C85dqqlK.js

assets/b52f8c2/location.C85dqqlK.jsView on unpkg · L15

assets/da51580/chain.CKnR0nDf.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...ce?`

High

Secret Pattern

Google API key in assets/da51580/chain.CKnR0nDf.js

assets/da51580/chain.CKnR0nDf.jsView on unpkg · L1

assets/da51580/Header.zL45lEOW.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/da51580/Header.zL45lEOW.js

assets/da51580/Header.zL45lEOW.jsView on unpkg · L1

assets/da51580/app.ce.P9J90JqJ.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...m */

High

Secret Pattern

Google API key in assets/da51580/app.ce.P9J90JqJ.js

assets/da51580/app.ce.P9J90JqJ.jsView on unpkg · L1

assets/da51580/location.DwXxQlS9.jsView file

15patternName = google_api_key severity = high line = 15 matchedText = </svg>`,...lt};

High

Secret Pattern

Google API key in assets/da51580/location.DwXxQlS9.js

assets/da51580/location.DwXxQlS9.jsView on unpkg · L15

assets/da51580/CalendarFlexible.DoM3A_pR.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/da51580/CalendarFlexible.DoM3A_pR.js

assets/da51580/CalendarFlexible.DoM3A_pR.jsView on unpkg · L1

assets/da51580/_uuid_.BQRj1VHm.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...lt};

High

Secret Pattern

Google API key in assets/da51580/_uuid_.BQRj1VHm.js

assets/da51580/_uuid_.BQRj1VHm.jsView on unpkg · L1

assets/5880307/Header.CbRgVohI.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/5880307/Header.CbRgVohI.js

assets/5880307/Header.CbRgVohI.jsView on unpkg · L1

assets/5880307/chain.xpkS8cQW.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...ce?`

High

Secret Pattern

Google API key in assets/5880307/chain.xpkS8cQW.js

assets/5880307/chain.xpkS8cQW.jsView on unpkg · L1

assets/5880307/app.ce.C_3iaAsB.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...m */

High

Secret Pattern

Google API key in assets/5880307/app.ce.C_3iaAsB.js

assets/5880307/app.ce.C_3iaAsB.jsView on unpkg · L1

assets/5880307/CalendarFlexible.BPvennoH.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/5880307/CalendarFlexible.BPvennoH.js

assets/5880307/CalendarFlexible.BPvennoH.jsView on unpkg · L1

assets/5880307/location.DFPAk0kj.jsView file

15patternName = google_api_key severity = high line = 15 matchedText = </svg>`,...lt};

High

Secret Pattern

Google API key in assets/5880307/location.DFPAk0kj.js

assets/5880307/location.DFPAk0kj.jsView on unpkg · L15

assets/5880307/_uuid_.Bp8DG7Yx.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...lt};

High

Secret Pattern

Google API key in assets/5880307/_uuid_.Bp8DG7Yx.js

assets/5880307/_uuid_.Bp8DG7Yx.jsView on unpkg · L1

assets/7fdfa89/Header.B2aO1HJ5.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/7fdfa89/Header.B2aO1HJ5.js

assets/7fdfa89/Header.B2aO1HJ5.jsView on unpkg · L1

assets/7fdfa89/app.ce.CXzIWU7B.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...m */

High

Secret Pattern

Google API key in assets/7fdfa89/app.ce.CXzIWU7B.js

assets/7fdfa89/app.ce.CXzIWU7B.jsView on unpkg · L1

assets/7fdfa89/location.ms2lppPj.jsView file

15patternName = google_api_key severity = high line = 15 matchedText = </svg>`,...lt};

High

Secret Pattern

Google API key in assets/7fdfa89/location.ms2lppPj.js

assets/7fdfa89/location.ms2lppPj.jsView on unpkg · L15

assets/7fdfa89/CalendarFlexible.CXXQ_g4R.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/7fdfa89/CalendarFlexible.CXXQ_g4R.js

assets/7fdfa89/CalendarFlexible.CXXQ_g4R.jsView on unpkg · L1

assets/7fdfa89/chain.ChHy6TXh.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...ce?`

High

Secret Pattern

Google API key in assets/7fdfa89/chain.ChHy6TXh.js

assets/7fdfa89/chain.ChHy6TXh.jsView on unpkg · L1

assets/7fdfa89/_uuid_.C6DPiwZz.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...lt};

High

Secret Pattern

Google API key in assets/7fdfa89/_uuid_.C6DPiwZz.js

assets/7fdfa89/_uuid_.C6DPiwZz.jsView on unpkg · L1

assets/f06a95c/chain.EdwzJ7xZ.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...ce?`

High

Secret Pattern

Google API key in assets/f06a95c/chain.EdwzJ7xZ.js

assets/f06a95c/chain.EdwzJ7xZ.jsView on unpkg · L1

assets/f06a95c/Header.DfQQRC-a.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/f06a95c/Header.DfQQRC-a.js

assets/f06a95c/Header.DfQQRC-a.jsView on unpkg · L1

assets/f06a95c/app.ce.-8RZa84d.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...m */

High

Secret Pattern

Google API key in assets/f06a95c/app.ce.-8RZa84d.js

assets/f06a95c/app.ce.-8RZa84d.jsView on unpkg · L1

assets/f06a95c/location.DXWi4HDX.jsView file

15patternName = google_api_key severity = high line = 15 matchedText = </svg>`,...lt};

High

Secret Pattern

Google API key in assets/f06a95c/location.DXWi4HDX.js

assets/f06a95c/location.DXWi4HDX.jsView on unpkg · L15

assets/f06a95c/_uuid_.D_vLoNf3.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...lt};

High

Secret Pattern

Google API key in assets/f06a95c/_uuid_.D_vLoNf3.js

assets/f06a95c/_uuid_.D_vLoNf3.jsView on unpkg · L1

assets/f06a95c/CalendarFlexible.DZiw_ya9.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio... t};

High

Secret Pattern

Google API key in assets/f06a95c/CalendarFlexible.DZiw_ya9.js

assets/f06a95c/CalendarFlexible.DZiw_ya9.jsView on unpkg · L1

Findings

31 High3 Medium4 Low

HighHigh Secretassets/b52f8c2/chain.BFDg-eNz.js

HighSecret Patternassets/b52f8c2/chain.BFDg-eNz.js

HighSecret Patternassets/b52f8c2/CalendarFlexible.BIsQ_3DO.js

HighSecret Patternassets/b52f8c2/Header.BjefCZwY.js

HighSecret Patternassets/b52f8c2/app.ce.QXP33bnV.js

HighSecret Patternassets/b52f8c2/_uuid_.CgIuj5C1.js

HighSecret Patternassets/b52f8c2/location.C85dqqlK.js

HighSecret Patternassets/da51580/chain.CKnR0nDf.js

HighSecret Patternassets/da51580/Header.zL45lEOW.js

HighSecret Patternassets/da51580/app.ce.P9J90JqJ.js

HighSecret Patternassets/da51580/location.DwXxQlS9.js

HighSecret Patternassets/da51580/CalendarFlexible.DoM3A_pR.js

HighSecret Patternassets/da51580/_uuid_.BQRj1VHm.js

HighSecret Patternassets/5880307/Header.CbRgVohI.js

HighSecret Patternassets/5880307/chain.xpkS8cQW.js

HighSecret Patternassets/5880307/app.ce.C_3iaAsB.js

HighSecret Patternassets/5880307/CalendarFlexible.BPvennoH.js

HighSecret Patternassets/5880307/location.DFPAk0kj.js

HighSecret Patternassets/5880307/_uuid_.Bp8DG7Yx.js

HighSecret Patternassets/7fdfa89/Header.B2aO1HJ5.js

HighSecret Patternassets/7fdfa89/app.ce.CXzIWU7B.js

HighSecret Patternassets/7fdfa89/location.ms2lppPj.js

HighSecret Patternassets/7fdfa89/CalendarFlexible.CXXQ_g4R.js

HighSecret Patternassets/7fdfa89/chain.ChHy6TXh.js

HighSecret Patternassets/7fdfa89/_uuid_.C6DPiwZz.js

HighSecret Patternassets/f06a95c/chain.EdwzJ7xZ.js

HighSecret Patternassets/f06a95c/Header.DfQQRC-a.js

HighSecret Patternassets/f06a95c/app.ce.-8RZa84d.js

HighSecret Patternassets/f06a95c/location.DXWi4HDX.js

HighSecret Patternassets/f06a95c/_uuid_.D_vLoNf3.js

HighSecret Patternassets/f06a95c/CalendarFlexible.DZiw_ya9.js

MediumNetwork

MediumProtestware

MediumStructural Risk Force Deep Review

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

assets/b52f8c2/location.C85dqqlK.jsView file

Lines 1-16javascript

1(function(){try{var e=typeof window<`u`?window:typeof global<`u`?global:typeof globalThis<`u`?globalThis:typeof self<`u`?self:{};e.SENTRY_RELEASE={id:`4.4.40`},e._sentryModuleMetadata=e._sentryModuleMetadata||{},e._sentryModuleMetadata[new e.Error().stack]=function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];if(n!=null)for(var r in n)n.hasOwnProperty(r)&&(e[r]=n[r])}return e}({},e._sentryModuleMetadata[new e.Error().stack],{"_sentryBundlerPluginAppKey:bookolosystem-engine":!0});var t=new e.Error().stack;t&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[t]=`f309417f-61 ...

2 <path fill="var(--color-accent)" fill-rule="evenodd" clip-rule="evenodd" d="M17.4634 0C8.30402 0 0.878906 7.42511 0.878906 16.5845C0.878906 24.0185 5.77014 30.31 12.5099 32.4165C12.7448 32.4899 12.9464 32.6459 13.0694 32.8589L16.5893 38.9554C16.9548 39.5886 17.8687 39.5886 18.2342 38.9554L21.7317 32.8976C21.856 32.6823 22.0605 32.5254 22.2983 32.4531C29.0992 30.3836 34.0478 24.0619 34.0478 16.5845C34.0478 7.42511 26.6227 0 17.4634 0Z" />

3 <path fill="var(--color-accent-foreground)" d="M10 16.5C10 12.3579 13.3579 9 17.5 9C21.6421 9 25 12.3579 25 16.5C25 20.6421 21.6421 24 17.5 24C13.3579 24 10 20.6421 10 16.5Z" />

4</svg>`,U=`<svg width="35" height="42" viewBox="0 0 35 42">

5 <path d="m6 0c-3.3137 0-6 2.6863-6 6v22.926c0 3.3137 2.6863 6 6 6h6.4467c0.3573 0 0.6874 0.1906 0.866 0.5l3.2289 5.5927c0.3849 0.6666 1.3472 0.6666 1.7321 0l3.2289-5.5927c0.1786-0.3094 0.5088-0.5 0.866-0.5h6.5573c3.3137 0 6-2.6863 6-6v-22.926c0-3.3137-2.6863-6-6-6h-22.926z" clip-rule="evenodd" fill="#31373E" fill-rule="evenodd"/>

6 <path d="m17 15.167c-0.8267 0-1.5-0.6733-1.5-1.5s0.6733-1.5 1.5-1.5 1.5 0.6733 1.5 1.5-0.6733 1.5-1.5 1.5zm0-2c-0.2733 0-0.5 0.2267-0.5 0.5s0.2267 0.5 0.5 0.5 0.5-0.2267 0.5-0.5-0.2267-0.5-0.5-0.5zm7.3337 11h-14.667c-0.27333 0-0.5-0.2267-0.5-0.5s0.22667-0.5 0.5-0.5h14.667c0.2733 0 0.5 0.2267 0.5 0.5s-0.2267 0.5-0.5 0.5zm-2.0007-2.6673c-0.2733 0-0.5-0.2267-0.5-0.5v-4.6667c0-0.2733 0.2267-0.5 0.5-0.5s0.5 0.2267 0.5 0.5v4.6667c0 0.2733-0.2267 0.5-0.5 0.5zm-2.666 0c-0.2733 0-0.5-0.2267-0.5-0.5v-4.6667c0-0.2733 0.2267-0.5 0.5-0.5s0.5 0.2267 0.5 0.5v4.6667c0 0.2733-0.2267 0.5-0.5 0.5zm-2.667 0c- ...

7</svg>`,W=`<svg width="49" height="58" viewBox="0 0 49 58" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">

8 <path fill-rule="evenodd" clip-rule="evenodd" d="M24.244 0C10.8544 0 0 10.8544 0 24.244C0 35.1203 7.16202 44.3238 17.0272 47.3957C17.3703 47.5025 17.6651 47.7302 17.8447 48.0414L22.9165 56.8259C23.4497 57.7495 24.7828 57.7495 25.316 56.8259L30.3334 48.1356C30.5162 47.8189 30.818 47.589 31.1685 47.4847C41.1842 44.505 48.488 35.2274 48.488 24.244C48.488 10.8544 37.6336 0 24.244 0Z" fill="var(--color-accent)"/>

9 <path d="M5.54102 24.2435C5.54102 13.9144 13.9144 5.54102 24.2435 5.54102C34.5726 5.54102 42.946 13.9144 42.946 24.2435C42.946 34.5726 34.5726 42.946 24.2435 42.946C13.9144 42.946 5.54102 34.5726 5.54102 24.2435Z" fill="url(#pattern0_6661_38508)"/>

10 <defs>

11 <pattern id="pattern0_6661_38508" width="1" height="1">

12 <image width="38" height="38" preserveAspectRatio="xMidYMid slice" xlink:href="%image%"/>

13 </pattern>

14 </defs>

15</svg>`,G=u({key:[`locations`],query:async()=>await x().GET(`/locations`).then(({data:e})=>e),staleTime:S.never,refetchOnWindowFocus:!1}),K={class:`x-location-map`},te

16//# sourceMappingURL=location.C85dqqlK.js.map

Long lines were clipped for display.