registry / @electerm/electerm-react / 3.15.121

@electerm/electerm-react@3.15.121

react components src for electerm

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 440 file(s), 1.32 MB of source, external domains: 127.0.0.1, api.atlascloud.ai, atlascloud.ai, cloud.electerm.org, electerm.org, gitee.com, github.com, proxy-server-over-tcp.com, proxy-server-over-tls.com, proxy.example.com, sync.electerm.org, xx.com, your-webdav-server.com

Source & flagged code

6 flagged

client/components/bookmark-form/bookmark-schema.jsView file

Lines 1-27javascript

1const bookmarkSchema = {

2 ssh: {

3 type: 'ssh',

4 host: 'string (required) - hostname or IP address',

5 port: 'number (default: 22) - SSH port',

6 username: 'string (required) - SSH username',

7 password: 'string - password for authentication',

Medium

Secret Pattern

Package contains a possible secret pattern.

client/components/bookmark-form/bookmark-schema.jsView on unpkg · L7

8 privateKey: 'string - private key content or path for key-based auth',

9 passphrase: 'string - passphrase for private key/certificate',

10 certificate: 'string - certificate content',

11 authType: 'string - auth type (password|privateKey|profiles), when have profile, should be profiles',

12 profile: 'string - profile id to reuse saved auth',

13 title: 'string - bookmark title',

14 description: 'string - bookmark description',

15 startDirectoryRemote: 'string - remote starting directory',

16 startDirectoryLocal: 'string - local starting directory',

17 enableSsh: 'boolean - enable ssh, default is true',

18 enableSftp: 'boolean - enable sftp, default is true',

19 sshTunnels: 'array - ssh tunnel definitions (see sshTunnels items)',

20 connectionHoppings: 'array - connection hopping definitions',

21 useSshAgent: 'boolean - use SSH agent, default is true',

22 sshAgent: 'string - ssh agent path',

23 serverHostKey: 'array - server host key algorithms',

24 cipher: 'array - cipher list',

25 compress: 'array - compression algorithms (zlib@openssh.com, zlib, none)',

26 runScripts: 'array - run scripts after connected ({delay,script})',

27 quickCommands: 'array - quick commands ({name,command})',

Lines 42-175javascript

42 sshTunnelRemoteHost: 'string',

43 sshTunnelRemotePort: 'number',

44 name: 'string - optional tunnel name'

45 },

46 connectionHoppingsItem: {

47 host: 'string',

48 port: 'number',

49 username:

Source & flagged code

6 flagged · loading source

client/components/bookmark-form/bookmark-schema.jsView file

7patternName = generic_password severity = medium line = 7 matchedText = password...on',

Medium

Secret Pattern

Package contains a possible secret pattern.

client/components/bookmark-form/bookmark-schema.jsView on unpkg · L7

62patternName = generic_password severity = medium line = 62 matchedText = password...rd',

Medium

Secret Pattern