registry  /  @golstats/gsc-players-and-teams-menu  /  1.1.6

@golstats/gsc-players-and-teams-menu@1.1.6

| Nombre de la propiedad | Descripción | Type | Default | | ------------- | ------------------------------ | ------ | ------ | | type | tipo de funcionalidad opciones ('teams', 'players') | string | "players" | | token | token por defecto para que cons

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 371 KB of source, external domains: apis.golstats.com, dev-apis.golstats.com, g0hl6blgha.execute-api.us-east-2.amazonaws.com, golstatsimages.blob.core.windows.net, kefloixzy1.execute-api.us-west-2.amazonaws.com, pa3kubpuhg.execute-api.us-west-2.amazonaws.com, www.w3.org, yjeig444bb.execute-api.us-west-2.amazonaws.com

Source & flagged code

9 flagged · loading source
dist/gsc-players-and-teams-menu.umd.cjsView file
9patternName = supabase_service_key severity = critical line = 9 matchedText = `+i)}}ca...it(`
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9
9patternName = supabase_service_key severity = critical line = 9 matchedText = `+i)}}ca...it(`
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9
14patternName = supabase_service_key severity = critical line = 14 matchedText = `+i):n.s...)});
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs

dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L14
dist/fonts/BebasNeue-Thin.woff2View file
path = dist/fonts/BebasNeue-Thin.woff2 kind = high_entropy_blob sizeBytes = 24124 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/BebasNeue-Thin.woff2View on unpkg
dist/gsc-players-and-teams-menu.jsView file
2074patternName = supabase_service_key severity = critical line = 2074 matchedText = }, Cs = ... = {
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L2074
4322patternName = supabase_service_key severity = critical line = 4322 matchedText = }, o = $...=> {
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L4322
5459patternName = supabase_service_key severity = critical line = 5459 matchedText = default:...4YE"
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L5459
6520patternName = supabase_service_key severity = critical line = 6520 matchedText = ]), Zo =...YE";
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L6520
6597patternName = supabase_service_key severity = critical line = 6597 matchedText = default:...4YE"
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js

dist/gsc-players-and-teams-menu.jsView on unpkg · L6597

Findings

8 Critical1 High2 Medium4 Low
CriticalCritical Secretdist/gsc-players-and-teams-menu.umd.cjs
CriticalSecret Patterndist/gsc-players-and-teams-menu.umd.cjs
CriticalSecret Patterndist/gsc-players-and-teams-menu.umd.cjs
CriticalSecret Patterndist/gsc-players-and-teams-menu.js
CriticalSecret Patterndist/gsc-players-and-teams-menu.js
CriticalSecret Patterndist/gsc-players-and-teams-menu.js
CriticalSecret Patterndist/gsc-players-and-teams-menu.js
CriticalSecret Patterndist/gsc-players-and-teams-menu.js
HighShips High Entropy Blobdist/fonts/BebasNeue-Thin.woff2
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License