registry  /  @getcredify/credify-insurance-widget  /  1.31.5

@getcredify/credify-insurance-widget@1.31.5

Credify Insurance Widget - Embeddable React widget for insurance quotes

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 5 file(s), 1.45 MB of source, external domains: browser.sentry-cdn.com, developers.facebook.com, docs.sentry.io, fonts.googleapis.com, getcredify.com, github.com, issuetracker.google.com, js.cobrowse.io, json-schema.org, maps.googleapis.com, react.dev, tailwindcss.com, widget.intercom.io, www.example.com, www.w3.org

Source & flagged code

4 flagged · loading source
dist/iframe/assets/iframe-DXUe5bUy.jsView file
71patternName = google_api_key severity = high line = 71 matchedText = */var Gg...it(`
High
High Secret

Package contains a high-severity secret pattern.

dist/iframe/assets/iframe-DXUe5bUy.jsView on unpkg · L71
71patternName = google_api_key severity = high line = 71 matchedText = */var Gg...it(`
High
Secret Pattern

Google API key in dist/iframe/assets/iframe-DXUe5bUy.js

dist/iframe/assets/iframe-DXUe5bUy.jsView on unpkg · L71
dist/index.es.jsView file
4799patternName = google_api_key severity = high line = 4799 matchedText = const sm...kw";
High
Secret Pattern

Google API key in dist/index.es.js

dist/index.es.jsView on unpkg · L4799
dist/index.umd.jsView file
24patternName = google_api_key severity = high line = 24 matchedText = */var Ns...it(`
High
Secret Pattern

Google API key in dist/index.umd.js

dist/index.umd.jsView on unpkg · L24

Findings

4 High2 Medium4 Low
HighHigh Secretdist/iframe/assets/iframe-DXUe5bUy.js
HighSecret Patterndist/iframe/assets/iframe-DXUe5bUy.js
HighSecret Patterndist/index.es.js
HighSecret Patterndist/index.umd.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings