Static Scan Results
scanned 2h ago · by rust-scannerStatic analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Decision evidence
public snapshotSource & flagged code
9 flagged · loading sourcePackage contains a critical-looking secret pattern.
dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs
dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L9Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.umd.cjs
dist/gsc-players-and-teams-menu.umd.cjsView on unpkg · L14Package ships high-entropy non-source blobs.
dist/fonts/BebasNeue-Thin.woff2View on unpkgSupabase service role key (JWT) in dist/gsc-players-and-teams-menu.js
dist/gsc-players-and-teams-menu.jsView on unpkg · L2074Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js
dist/gsc-players-and-teams-menu.jsView on unpkg · L4322Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js
dist/gsc-players-and-teams-menu.jsView on unpkg · L5459Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js
dist/gsc-players-and-teams-menu.jsView on unpkg · L6520Supabase service role key (JWT) in dist/gsc-players-and-teams-menu.js
dist/gsc-players-and-teams-menu.jsView on unpkg · L6597