registry / @golstats/gsc-players-and-teams-menu / 1.1.6

@golstats/gsc-players-and-teams-menu@1.1.6

| Nombre de la propiedad | Descripción | Type | Default | | ------------- | ------------------------------ | ------ | ------ | | type | tipo de funcionalidad opciones ('teams', 'players') | string | "players" | | token | token por defecto para que cons

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 2 file(s), 371 KB of source, external domains: apis.golstats.com, dev-apis.golstats.com, g0hl6blgha.execute-api.us-east-2.amazonaws.com, golstatsimages.blob.core.windows.net, kefloixzy1.execute-api.us-west-2.amazonaws.com, pa3kubpuhg.execute-api.us-west-2.amazonaws.com, www.w3.org, yjeig444bb.execute-api.us-west-2.amazonaws.com

Source & flagged code

9 flagged

dist/gsc-players-and-teams-menu.umd.cjsView file

Lines 1-15javascript

1(function(me,a){typeof exports=="object"&&typeof module<"u"?a(exports,require("vue")):typeof define=="function"&&define.amd?define(["exports","vue"],a):(me=typeof globalThis<"u"?globalThis:me||self,a(me.GSCPlayersAndTeamsMenu={},me.Vue))})(this,function(me,a){"use strict";const fd="",hd="",yd="",gd="",bd="",wd="",De=(e,t)=>{const o=e.__vccOpts||e;for(const[n,s]of t)o[n]=s;return o},Ea={class:"player-card"},Sa={class:"player-card__image"},ka=["src"],Ca={class:"player-card__number"},_a={class:"player-card__right-data"},Na={class:"player-card__age"},Ba={class:"player-card__flag"},xa={class:"playe ...

2`).forEach(function(i){s=i.indexOf(":"),o=i.substring(0,s).trim().toLowerCase(),n=i.substring(s+1).trim(),!(!o||t[o]&&Un[o])&&(o==="set-cookie"?t[o

3`)}getSetCookie(){return this.get("set-cookie")||[]}get[Symbol.toStringTag](){return"AxiosHeaders"}static from(t){return t instanceof this?t:new this(t)}static concat(t,...o){const n=new this(t);return o.forEach(s=>n.set(s)),n}static accessor(t){const o=(this[Qt]=this[Qt]={accessors:{}}).accessors,n=this.prototype;function s(i){const r=Ve(i);o[r]||(Zn(n,i),o[r]=!0)}return h.isArray(t)?t.forEach(s):s(t),this}};Q.accessor(["Content-Type","Content-Length","Accept","Accept-Encoding","User-Agent","Authorization"]),h.reduceDescriptors(Q.prototype,({value:e},t)=>{let o=t[0].toUpperCase()+t.slice(1);r ...

4`+r.map(ho).join(`

5`):" "+ho(r[0]):"as no adapter specified";throw new V("There is no suitable adapter to dispatch the request "+l,"ERR_NOT_SUPPORT")}return s}const yo={getAdapter:mr,adapters:ht};function yt(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),

6`);return r===-1?"":s.stack.slice(r+1)})();try{if(!n.stack)n.stack=i;else if(i){const r=i.indexOf(`

7`),l=r===-1?-1:i.indexOf(`

8`,r+1),f=l===-1?"":i.slice(l+1);String(n.stack).endsWith(f)||(n.stack+=`

9`+i)}}catch{}}throw n}}_request(t,o){typeof t=="string"?(o=o||{},o.url=t):o=t||{},o=fe(this.defaults,o);const{transitional:n,paramsSerializer:s,headers:i}=o;n!==void 0&&qe.assertOptions(n,{silentJSONParsing:re.transitional(re.boolean),forcedJSONParsing:re.transitional(re.boolean),clarifyTimeoutError:re.transitional(re.boolean),legacyInterceptorReqResOrdering:re.transitional(re.boolean)},!1),s!=null&&(h.isFunction(s)?o.paramsSerializer={serialize:s}:qe.assertOptions(s,{encode:re.function,serialize:re.function},!0)),o.allowAbsoluteUrls!==void 0||(this.defaults.allowAbsoluteUrls!==void 0?o.allowA ...

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9

10`).forEach(function(i){s=i.indexOf(":"),o=i.substring(0,s).trim().toLowerCase(),n=i.substring(s+1).trim(),!(!o||t[o]&&ti[o])&&(o==="set-cookie"?t[o]?t[o].push(n)

11`)}get[Symbol.toStringTag](){return"AxiosHeaders"}static from(t){return t instanceof this?t:new this(t)}static concat(t,...o){const n=new this(t);return o.forEach(s=>n.set(s)),n}static accessor(t){const o=(this[Uo]=this[Uo]={accessors:{}}).accessors,n=this.prototype;function s(i){const r=Ie(i);o[r]||(si(n,i),o[r]=!0)}return y.isArray(t)?t.forEach(s):s(t),this}};ee.accessor(["Content-Type","Content-Length","Accept","Accept-Encoding","User-Agent","Authorization"]),y.reduceDescriptors(ee.prototype,({value:e},t)=>{let o=t[0].toUpperCase()+t.slice(1);return{get:()=>e,set(n){this[o]=n}}}),y.freezeMe ...

12`+i.map(Qo).join(`

13`):" "+Qo(i[0]):"as no adapter specified";throw new T("There is no suitable adapter to dispatch the request "+r,"ERR_NOT_SUPPORT")}return n},adapters:Vt};function Rt(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),e.signal&&e.signal.aborted)throw new ke(null,e)}function ta(e){return

14`+i):n.stack=i}catch{}}throw n}}_request(t,o){typeof t=="string"?(o=o||{},o.url=t):o=t||{},o=ge(this.defaults,o);const{transitional:n,paramsSerializer:s,headers:i}=o;n!==void 0&&at.assertOptions(n,{silentJSONParsing:ce.transitional(ce.boolean),forcedJSONParsing:ce.transitional(ce.boolean),clarifyTimeoutError:ce.transitional(ce.boolean)},!1),s!=null&&(y.isFunction(s)?o.paramsSerializer={serialize:s}:at.assertOptions(s,{encode:ce.function,serialize:ce.function},!0)),at.assertOptions(o,{baseUrl:ce.spelling("baseURL"),withXsrfToken:ce.spelling("withXSRFToken")},!0),o.method=(o.method||this.default ...

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L14

Long lines were clipped for display.

dist/fonts/BebasNeue-Thin.woff2View file

•path = dist/fonts/BebasNeue-Thin.woff2 kind = high_entropy_blob sizeBytes = 24124 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/BebasNeue-Thin.woff2View on unpkg

dist/gsc-players-and-teams-menu.jsView file

Lines 2054-2094javascript

2054 a[o] = r;

2055 return a;

2056}, ts = { class: "modal-body" }, as = {

2057 key: 0,

2058 class: "estadisticas"

2059}, os = { class: "radio-group"

Source & flagged code

9 flagged · loading source

dist/gsc-players-and-teams-menu.umd.cjsView file

9patternName = supabase_service_key severity = critical line = 9 matchedText = `+i)}}ca...it(`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9

9patternName = supabase_service_key severity = critical line = 9 matchedText = `+i)}}ca...it(`

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9

14patternName = supabase_service_key severity = critical line = 14 matchedText = `+i):n.s...)});

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L14

dist/fonts/BebasNeue-Thin.woff2View file

•path = dist/fonts/BebasNeue-Thin.woff2 kind = high_entropy_blob sizeBytes = 24124 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/BebasNeue-Thin.woff2View on unpkg

dist/gsc-players-and-teams-menu.jsView file

2074patternName = supabase_service_key severity = critical line = 2074 matchedText = }, Cs = ... = {

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L2074

4322patternName = supabase_service_key severity = critical line = 4322 matchedText = }, o = $...=> {

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L4322

5459patternName = supabase_service_key severity = critical line = 5459 matchedText = default:...4YE"

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L5459

6520patternName = supabase_service_key severity = critical line = 6520 matchedText = ]), Zo =...YE";

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L6520

6597patternName = supabase_service_key severity = critical line = 6597 matchedText = default:...4YE"

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L6597

Findings

8 Critical1 High2 Medium4 Low

CriticalCritical Secretdist/gsc-players-and-teams-menu.umd.cjs

CriticalSecret Patterndist/gsc-players-and-teams-menu.umd.cjs

CriticalSecret Patterndist/gsc-players-and-teams-menu.js

HighShips High Entropy Blobdist/fonts/BebasNeue-Thin.woff2

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

dist/gsc-players-and-teams-menu.umd.cjsView file

Lines 1-15javascript

2`).forEach(function(i){s=i.indexOf(":"),o=i.substring(0,s).trim().toLowerCase(),n=i.substring(s+1).trim(),!(!o||t[o]&&Un[o])&&(o==="set-cookie"?t[o

4`+r.map(ho).join(`

6`);return r===-1?"":s.stack.slice(r+1)})();try{if(!n.stack)n.stack=i;else if(i){const r=i.indexOf(`

7`),l=r===-1?-1:i.indexOf(`

8`,r+1),f=l===-1?"":i.slice(l+1);String(n.stack).endsWith(f)||(n.stack+=`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9

10`).forEach(function(i){s=i.indexOf(":"),o=i.substring(0,s).trim().toLowerCase(),n=i.substring(s+1).trim(),!(!o||t[o]&&ti[o])&&(o==="set-cookie"?t[o]?t[o].push(n)

12`+i.map(Qo).join(`

Critical

Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L14

Long lines were clipped for display.

dist/fonts/BebasNeue-Thin.woff2View file

•path = dist/fonts/BebasNeue-Thin.woff2 kind = high_entropy_blob sizeBytes = 24124 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/BebasNeue-Thin.woff2View on unpkg

dist/gsc-players-and-teams-menu.jsView file

Lines 2054-2094javascript

2054 a[o] = r;

2055 return a;

2056}, ts = { class: "modal-body" }, as = {

2057 key: 0,

2058 class: "estadisticas"

2059}, os = { class: "radio-group"