registry  /  @e-llm-studio/instant-learning  /  1.3.0-alpha.97

@e-llm-studio/instant-learning@1.3.0-alpha.97

The library exposes two independently consumable components:

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 494 file(s), 3.15 MB of source, external domains: dev-audacy-traffic-manager.techo.camp, dev-creative-workspace.techo.camp, dev-cw-appsec.techo.camp, dev.appmod.ai, devllmstudio.creativeworkspace.ai, fonts.googleapis.com, www.w3.org

Source & flagged code

5 flagged · loading source
dist/utils/agentGenieAPI.jsView file
1patternName = supabase_service_key severity = critical line = 1 matchedText = import{_...ts};
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/utils/agentGenieAPI.jsView on unpkg · L1
1patternName = supabase_service_key severity = critical line = 1 matchedText = import{_...ts};
Critical
Secret Pattern

Supabase service role key (JWT) in dist/utils/agentGenieAPI.js

dist/utils/agentGenieAPI.jsView on unpkg · L1
dist/utils/instantLearningAPI.jsView file
1patternName = supabase_service_key severity = critical line = 1 matchedText = import{_...es};
Critical
Secret Pattern

Supabase service role key (JWT) in dist/utils/instantLearningAPI.js

dist/utils/instantLearningAPI.jsView on unpkg · L1
dist/cjs/utils/agentGenieAPI.jsView file
1patternName = supabase_service_key severity = critical line = 1 matchedText = "use str...})};
Critical
Secret Pattern

Supabase service role key (JWT) in dist/cjs/utils/agentGenieAPI.js

dist/cjs/utils/agentGenieAPI.jsView on unpkg · L1
dist/cjs/utils/instantLearningAPI.jsView file
1patternName = supabase_service_key severity = critical line = 1 matchedText = "use str...})};
Critical
Secret Pattern

Supabase service role key (JWT) in dist/cjs/utils/instantLearningAPI.js

dist/cjs/utils/instantLearningAPI.jsView on unpkg · L1

Findings

5 Critical2 Medium3 Low
CriticalCritical Secretdist/utils/agentGenieAPI.js
CriticalSecret Patterndist/utils/agentGenieAPI.js
CriticalSecret Patterndist/utils/instantLearningAPI.js
CriticalSecret Patterndist/cjs/utils/agentGenieAPI.js
CriticalSecret Patterndist/cjs/utils/instantLearningAPI.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings