registry  /  @futdevpro/fsm-dynamo  /  1.16.13

@futdevpro/fsm-dynamo@1.16.13

Full Stack Model Collection for Dynamic (NodeJS-Typescript) Framework called Dynamo, by Future Development Ltd.

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis flagged 22 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsWebSocket
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 717 file(s), 1.96 MB of source, external domains: example.com

Source & flagged code

16 flagged · loading source
build/_collections/utils/secret-mask.util.d.tsView file
20patternName = github_pat severity = critical line = 20 matchedText = * ...at]`
Critical
Critical Secret

Package contains a critical-looking secret pattern.

build/_collections/utils/secret-mask.util.d.tsView on unpkg · L20
20patternName = github_pat severity = critical line = 20 matchedText = * ...at]`
Critical
Secret Pattern

GitHub personal access token in build/_collections/utils/secret-mask.util.d.ts

build/_collections/utils/secret-mask.util.d.tsView on unpkg · L20
scripts/run-coverage-tests.jsView file
1const { execSync } = require('child_process'); L2: const path = require('path');
High
Child Process

Package source references child process execution.

scripts/run-coverage-tests.jsView on unpkg · L1
12try { L13: execSync(`npx jasmine --config="${configPath}"`, { L14: stdio: 'inherit',
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-coverage-tests.jsView on unpkg · L12
build/_modules/ngx-models/_enums/html/input-types.enum.d.tsView file
14patternName = generic_password severity = medium line = 14 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in build/_modules/ngx-models/_enums/html/input-types.enum.d.ts

build/_modules/ngx-models/_enums/html/input-types.enum.d.tsView on unpkg · L14
build/_modules/ngx-models/_enums/field-type.enum.d.tsView file
10patternName = generic_password severity = medium line = 10 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in build/_modules/ngx-models/_enums/field-type.enum.d.ts

build/_modules/ngx-models/_enums/field-type.enum.d.tsView on unpkg · L10
build/_collections/utils/secret-mask.util.jsView file
21patternName = github_pat severity = critical line = 21 matchedText = * ...at]`
Critical
Secret Pattern

GitHub personal access token in build/_collections/utils/secret-mask.util.js

build/_collections/utils/secret-mask.util.jsView on unpkg · L21
src/_modules/crypto/_collections/crypto.util.edge.spec.tsView file
459patternName = generic_password severity = medium line = 459 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in src/_modules/crypto/_collections/crypto.util.edge.spec.ts

src/_modules/crypto/_collections/crypto.util.edge.spec.tsView on unpkg · L459
src/_modules/security/_collections/stored-secret.util.spec.tsView file
9patternName = github_pat severity = critical line = 9 matchedText = const gi...90';
Critical
Secret Pattern

GitHub personal access token in src/_modules/security/_collections/stored-secret.util.spec.ts

src/_modules/security/_collections/stored-secret.util.spec.tsView on unpkg · L9
src/_modules/ngx-models/_enums/html/input-types.enum.tsView file
15patternName = generic_password severity = medium line = 15 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in src/_modules/ngx-models/_enums/html/input-types.enum.ts

src/_modules/ngx-models/_enums/html/input-types.enum.tsView on unpkg · L15
src/_modules/ngx-models/_enums/field-type.enum.tsView file
12patternName = generic_password severity = medium line = 12 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in src/_modules/ngx-models/_enums/field-type.enum.ts

src/_modules/ngx-models/_enums/field-type.enum.tsView on unpkg · L12
src/_collections/utils/secret-mask.util.tsView file
20patternName = github_pat severity = critical line = 20 matchedText = * ...at]`
Critical
Secret Pattern

GitHub personal access token in src/_collections/utils/secret-mask.util.ts

src/_collections/utils/secret-mask.util.tsView on unpkg · L20
src/_collections/utils/regex/password-regex.util.spec.tsView file
13patternName = generic_password severity = medium line = 13 matchedText = const pa...1!';
Medium
Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L13
19patternName = generic_password severity = medium line = 19 matchedText = const pa...1!';
Medium
Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L19
25patternName = generic_password severity = medium line = 25 matchedText = const pa...d!';
Medium
Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L25
31patternName = generic_password severity = medium line = 31 matchedText = const pa...d1';
Medium
Secret Pattern

Hardcoded password in src/_collections/utils/regex/password-regex.util.spec.ts

src/_collections/utils/regex/password-regex.util.spec.tsView on unpkg · L31

Findings

5 Critical2 High11 Medium4 Low
CriticalCritical Secretbuild/_collections/utils/secret-mask.util.d.ts
CriticalSecret Patternbuild/_collections/utils/secret-mask.util.d.ts
CriticalSecret Patternbuild/_collections/utils/secret-mask.util.js
CriticalSecret Patternsrc/_modules/security/_collections/stored-secret.util.spec.ts
CriticalSecret Patternsrc/_collections/utils/secret-mask.util.ts
HighChild Processscripts/run-coverage-tests.js
HighRuntime Package Installscripts/run-coverage-tests.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternbuild/_modules/ngx-models/_enums/html/input-types.enum.d.ts
MediumSecret Patternbuild/_modules/ngx-models/_enums/field-type.enum.d.ts
MediumSecret Patternsrc/_modules/crypto/_collections/crypto.util.edge.spec.ts
MediumSecret Patternsrc/_modules/ngx-models/_enums/html/input-types.enum.ts
MediumSecret Patternsrc/_modules/ngx-models/_enums/field-type.enum.ts
MediumSecret Patternsrc/_collections/utils/regex/password-regex.util.spec.ts
MediumSecret Patternsrc/_collections/utils/regex/password-regex.util.spec.ts
MediumSecret Patternsrc/_collections/utils/regex/password-regex.util.spec.ts
MediumSecret Patternsrc/_collections/utils/regex/password-regex.util.spec.ts
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings