@geekmidas/cli@1.12.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@geekmidas/cli@1.12.0: Suspicious npm security report (Warn) | LPM Firewall

src/secrets/__tests__/storage.spec.tsView file

76patternName = generic_password severity = medium line = 76 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L76

273patternName = generic_password severity = medium line = 273 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L273

300patternName = generic_password severity = medium line = 300 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L300

324patternName = generic_password severity = medium line = 324 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L324

351patternName = generic_password severity = medium line = 351 matchedText = password...ey',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L351

388patternName = generic_password severity = medium line = 388 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L388

527patternName = generic_password severity = medium line = 527 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L527

594patternName = generic_password severity = medium line = 594 matchedText = password...et',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L594

601patternName = generic_password severity = medium line = 601 matchedText = password...et',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L601

src/secrets/__tests__/generator.spec.tsView file

112patternName = generic_password severity = medium line = 112 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L112

125patternName = generic_password severity = medium line = 125 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L125

140patternName = generic_password severity = medium line = 140 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L140

152patternName = generic_password severity = medium line = 152 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L152

166patternName = generic_password severity = medium line = 166 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L166

193patternName = generic_password severity = medium line = 193 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L193

206patternName = generic_password severity = medium line = 206 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L206

245patternName = generic_password severity = medium line = 245 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L245

251patternName = generic_password severity = medium line = 251 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L251

258patternName = generic_password severity = medium line = 258 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L258

347patternName = generic_password severity = medium line = 347 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L347

432patternName = generic_password severity = medium line = 432 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L432

Findings

3 High38 Medium5 Low

HighChild Processbin/gkm.mjs

HighShelldist/openapi-react-query-C4iIvpPf.mjs

HighRuntime Package Installdist/index.cjs

MediumDynamic Requiredist/credentials-C8DWtnMY.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternsrc/init/__tests__/generators.spec.ts

MediumSecret Patternsrc/init/__tests__/generators.spec.ts

MediumSecret Patternsrc/deploy/__tests__/env-resolver.spec.ts

MediumSecret Patternsrc/deploy/__tests__/env-resolver.spec.ts

MediumSecret Patternsrc/deploy/__tests__/env-resolver.spec.ts

MediumSecret Patternsrc/deploy/__tests__/env-resolver.spec.ts

MediumSecret Patternsrc/deploy/__tests__/env-resolver.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/storage.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/secrets/__tests__/generator.spec.ts

MediumSecret Patternsrc/setup/__tests__/reconcile-secrets.spec.ts

MediumSecret Patternsrc/setup/__tests__/reconcile-secrets.spec.ts

MediumSecret Patternsrc/setup/__tests__/reconcile-secrets.spec.ts

MediumSecret Patternsrc/setup/__tests__/reconcile-secrets.spec.ts

MediumSecret Patternsrc/dev/__tests__/index.spec.ts

MediumSecret Patternsrc/dev/__tests__/index.spec.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

src/deploy/__tests__/env-resolver.spec.tsView file

Lines 118-177typescript

118

119 const url = buildDatabaseUrl(credentials, postgres);

120

121 expect(url).toBe(

122 'postgresql://user%40test:pass%23word!123@db.example.com:5432/app',

123 );

124 });

125

126 it('should handle different port numbers', () => {

127 const credentials = { dbUser: 'user', dbPassword: 'pass' };

128 const postgres = { host: 'localhost', port: 5433, database: 'testdb' };

129

130 const url = buildDatabaseUrl(credentials, postgres);

131

132 expect(url).toBe('postgresql://user:pass@localhost:5433/testdb');

133 });

134});

135

136describe('buildRedisUrl', () => {

137 it('should build URL with password', () => {

138 const redis = { host: 'localhost', port: 6379, password: 'redispass' };

Medium

Secret Pattern

Hardcoded password in src/deploy/__tests__/env-resolver.spec.ts

src/deploy/__tests__/env-resolver.spec.tsView on unpkg · L138

139

140 const url = buildRedisUrl(redis);

141

142 expect(url).toBe('redis://:redispass@localhost:6379');

143 });

144

145 it('should build URL without password', () => {

146 const redis = { host: 'localhost', port: 6379 };

147

148 const url = buildRedisUrl(redis);

149

150 expect(url).toBe('redis://localhost:6379');

151 });

152

153 it('should encode special characters in password', () => {

154 const redis = {

155 host: 'redis.example.com',

156 port: 6380,

157 password: 'p@ss:word',

Medium

Secret Pattern

Hardcoded password in src/deploy/__tests__/env-resolver.spec.ts

src/deploy/__tests__/env-resolver.spec.tsView on unpkg · L157

158 };

159

160 const url = buildRedisUrl(redis);

161

162 expect(url).toBe('redis://:p%40ss%3Aword@redis.example.com:6380');

163 });

164});

165

166describe('resolveEnvVar', () => {

167 const createApp = (

168 overrides: Partial<NormalizedAppConfig> = {},

169 ): NormalizedAppConfig => ({

170 type: 'backend',

171 path: 'apps/api',

172 port: 3000,

173 dependencies: [],

174 resolvedDeployTarget: 'dokploy',

175 ...overrides,

176 });

177

233patternName = generic_password severity = medium line = 233 matchedText = redis: {...' },

Medium

Secret Pattern

Hardcoded password in src/deploy/__tests__/env-resolver.spec.ts

src/deploy/__tests__/env-resolver.spec.tsView on unpkg · L233

340patternName = generic_password severity = medium line = 340 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/deploy/__tests__/env-resolver.spec.ts

src/deploy/__tests__/env-resolver.spec.tsView on unpkg · L340

362patternName = generic_password severity = medium line = 362 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/deploy/__tests__/env-resolver.spec.ts

src/deploy/__tests__/env-resolver.spec.tsView on unpkg · L362

src/secrets/__tests__/storage.spec.tsView file

76patternName = generic_password severity = medium line = 76 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L76

273patternName = generic_password severity = medium line = 273 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L273

300patternName = generic_password severity = medium line = 300 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L300

324patternName = generic_password severity = medium line = 324 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L324

351patternName = generic_password severity = medium line = 351 matchedText = password...ey',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L351

388patternName = generic_password severity = medium line = 388 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L388

527patternName = generic_password severity = medium line = 527 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L527

594patternName = generic_password severity = medium line = 594 matchedText = password...et',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L594

601patternName = generic_password severity = medium line = 601 matchedText = password...et',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/storage.spec.ts

src/secrets/__tests__/storage.spec.tsView on unpkg · L601

src/secrets/__tests__/generator.spec.tsView file

112patternName = generic_password severity = medium line = 112 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L112

125patternName = generic_password severity = medium line = 125 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L125

140patternName = generic_password severity = medium line = 140 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L140

152patternName = generic_password severity = medium line = 152 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L152

166patternName = generic_password severity = medium line = 166 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L166

193patternName = generic_password severity = medium line = 193 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L193

206patternName = generic_password severity = medium line = 206 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L206

245patternName = generic_password severity = medium line = 245 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L245

251patternName = generic_password severity = medium line = 251 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L251

258patternName = generic_password severity = medium line = 258 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L258

347patternName = generic_password severity = medium line = 347 matchedText = password...ss',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L347

432patternName = generic_password severity = medium line = 432 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in src/secrets/__tests__/generator.spec.ts

src/secrets/__tests__/generator.spec.tsView on unpkg · L432