registry / @flotic/minitok / 1.3.4

@flotic/minitok@1.3.4

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 92 file(s), 445 KB of source, external domains: api.anthropic.com, api.minitok.dev, api.openai.com, cognitiveservices.azure.com, console.anthropic.com, generativelanguage.googleapis.com, github.com, login.microsoftonline.com, oauth2.googleapis.com, openrouter.ai, registry.npmjs.org, www.googleapis.com

Source & flagged code

6 flagged

README.mdView file

•Run `npm run readiness:all` for all three deterministic, local-only customer-facing checks. The authoritative generated VSIX is `extension/artifacts/minitok-extension-<extension-version>.vsix`; stale or unrelated VSIX candidates remain diagnostic only and are never deleted. `npm run readiness:checks` remains an alias. Use `node scripts/readiness-checks.mjs --target extension|cli|mcp --json` to run one surface. Stage 3 checks include versioned VSIX presence and manifest consistency, npm dry-run runtime files, bin and Node engine metadata, CLI help and non-TTY behavior, the packaged MCP stdio entrypoint and token-file session binding, plus localhost HTTP authentication, per-session isolation, and authenticated non-secret `/metrics` monitoring. `PASS` means local evidence was found, `BLOCKED`

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

src/cli/commands/auth.jsView file

63patternName = generic_password severity = medium line = 63

Medium

Secret Pattern

Package contains a possible secret pattern.

src/cli/commands/auth.jsView on unpkg · L63

74patternName = generic_password severity = medium line = 74

Medium

Secret Pattern

Hardcoded password in src/cli/commands/auth.js

src/cli/commands/auth.jsView on unpkg · L74

src/llm/provider.jsView file

5L6: const dns = require("dns").promises; L7: const net = require("net"); ... L115: pinned.hostname = address.includes(":") ? `[${address}]` : address; L116: return { dispatcher: require("undici").ProxyAgent ? new (require("undici").ProxyAgent)({ uri: process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || proces... L117: } ... L143: } L144: chunks.push(Buffer.from(value)); L145: } ... L337: const headers = { "Content-Type": "application/json", "x-api-key": apiKey, "anthropic-version": "2023-06-01" }; L338: const res = await fetchWithTimeout(`${endpointTransport.url}/v1/messages`, { method: "POST", headers, body: JSON.stringify(body), signal: options.signal, ...(endpointTransport.disp... L339: if (!res.ok) throw providerError("Anthropic", res.status);

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/llm/provider.jsView on unpkg · L5

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

src/runtime/stdio.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @flotic/minitok@1.3.6 matchedIdentity = npm:QGZsb3RpYy9taW5pdG9r:1.3.6 similarity = 0.892 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/runtime/stdio.jsView on unpkg

Source & flagged code

6 flagged · loading source

README.mdView file

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

src/cli/commands/auth.jsView file

63patternName = generic_password severity = medium line = 63

Medium

Secret Pattern

Package contains a possible secret pattern.

src/cli/commands/auth.jsView on unpkg · L63

Findings

4 High5 Medium5 Low

HighAi Reviewer ManipulationREADME.md

HighCloud Metadata Accesssrc/llm/provider.js

HighSemantic Analysis Limitedpackage.json

HighPrevious Version Dangerous Deltasrc/runtime/stdio.js

MediumSecret Patternsrc/cli/commands/auth.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternsrc/cli/commands/auth.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @flotic/minitok@1.3.4.

See version security history for other recorded verdicts.

Review the evidence and your use of @flotic/minitok@1.3.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-07 21:52:04.919Z (UTC).