registry  /  @getcredify/credify-insurance-widget  /  1.31.6

@getcredify/credify-insurance-widget@1.31.6

Credify Insurance Widget - Embeddable React widget for insurance quotes

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 5 file(s), 1.46 MB of source, external domains: browser.sentry-cdn.com, developers.facebook.com, docs.sentry.io, fonts.googleapis.com, getcredify.com, github.com, issuetracker.google.com, js.cobrowse.io, json-schema.org, maps.googleapis.com, react.dev, tailwindcss.com, widget.intercom.io, www.example.com, www.w3.org

Source & flagged code

4 flagged · loading source
dist/iframe/assets/iframe-MX4eLVwP.jsView file
71patternName = google_api_key severity = high line = 71 matchedText = */var Yg...it(`
High
High Secret

Package contains a high-severity secret pattern.

dist/iframe/assets/iframe-MX4eLVwP.jsView on unpkg · L71
71patternName = google_api_key severity = high line = 71 matchedText = */var Yg...it(`
High
Secret Pattern

Google API key in dist/iframe/assets/iframe-MX4eLVwP.js

dist/iframe/assets/iframe-MX4eLVwP.jsView on unpkg · L71
dist/index.es.jsView file
4800patternName = google_api_key severity = high line = 4800 matchedText = const cm...kw";
High
Secret Pattern

Google API key in dist/index.es.js

dist/index.es.jsView on unpkg · L4800
dist/index.umd.jsView file
24patternName = google_api_key severity = high line = 24 matchedText = */var Os...it(`
High
Secret Pattern

Google API key in dist/index.umd.js

dist/index.umd.jsView on unpkg · L24

Findings

4 High2 Medium4 Low
HighHigh Secretdist/iframe/assets/iframe-MX4eLVwP.js
HighSecret Patterndist/iframe/assets/iframe-MX4eLVwP.js
HighSecret Patterndist/index.es.js
HighSecret Patterndist/index.umd.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings