registry  /  @golstats/gsc-summary  /  1.1.13

@golstats/gsc-summary@1.1.13

Componente resumen jugador /equipo

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 29 file(s), 2.19 MB of source, external domains: 8tvo5bp9ai.execute-api.us-west-2.amazonaws.com, apis.golstats.com, d2oco6mqmc.execute-api.us-west-2.amazonaws.com, dev-apis.golstats.com, dtcf4s9tapfr0.cloudfront.net, fxtcaw9tw6.execute-api.us-east-2.amazonaws.com, golstatsimages.blob.core.windows.net, ikhibrrvce.execute-api.us-east-2.amazonaws.com, img1.wallspic.com, qxk21vj1q7.execute-api.us-east-2.amazonaws.com, s8i5bvi7ej.execute-api.us-east-2.amazonaws.com, ts7thxzaik.execute-api.us-west-2.amazonaws.com, uof4tt5l46.execute-api.us-west-2.amazonaws.com, wlduw4woy3.execute-api.us-east-2.amazonaws.com, ws8d8ye2ii.execute-api.us-west-2.amazonaws.com, www.w3.org, xqkvd3q4q2.execute-api.us-east-2.amazonaws.com

Source & flagged code

12 flagged · loading source
dist/index-6c5462aa.jsView file
7256patternName = supabase_service_key severity = critical line = 7256 matchedText = }, bg = ... = {
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/index-6c5462aa.jsView on unpkg · L7256
7256patternName = supabase_service_key severity = critical line = 7256 matchedText = }, bg = ... = {
Critical
Secret Pattern

Supabase service role key (JWT) in dist/index-6c5462aa.js

dist/index-6c5462aa.jsView on unpkg · L7256
7805patternName = supabase_service_key severity = critical line = 7805 matchedText = token: "...YE",
Critical
Secret Pattern

Supabase service role key (JWT) in dist/index-6c5462aa.js

dist/index-6c5462aa.jsView on unpkg · L7805
9127patternName = supabase_service_key severity = critical line = 9127 matchedText = token: "...4YE"
Critical
Secret Pattern

Supabase service role key (JWT) in dist/index-6c5462aa.js

dist/index-6c5462aa.jsView on unpkg · L9127
12334patternName = supabase_service_key severity = critical line = 12334 matchedText = token: "...YE",
Critical
Secret Pattern

Supabase service role key (JWT) in dist/index-6c5462aa.js

dist/index-6c5462aa.jsView on unpkg · L12334
16646patternName = supabase_service_key severity = critical line = 16646 matchedText = token: "...YE",
Critical
Secret Pattern

Supabase service role key (JWT) in dist/index-6c5462aa.js

dist/index-6c5462aa.jsView on unpkg · L16646
22541patternName = supabase_service_key severity = critical line = 22541 matchedText = default:...4YE"
Critical
Secret Pattern

Supabase service role key (JWT) in dist/index-6c5462aa.js

dist/index-6c5462aa.jsView on unpkg · L22541
dist/fonts/BebasNeue-Thin.woff2View file
•path = dist/fonts/BebasNeue-Thin.woff2 kind = high_entropy_blob sizeBytes = 24124 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/fonts/BebasNeue-Thin.woff2View on unpkg
dist/gsc-summary.umd.cjsView file
17patternName = supabase_service_key severity = critical line = 17 matchedText = `+r)}}ca...it(`
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-summary.umd.cjs

dist/gsc-summary.umd.cjsView on unpkg · L17
26patternName = supabase_service_key severity = critical line = 26 matchedText = */const ...it(`
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-summary.umd.cjs

dist/gsc-summary.umd.cjsView on unpkg · L26
31patternName = supabase_service_key severity = critical line = 31 matchedText = `+r):n.s...it(`
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-summary.umd.cjs

dist/gsc-summary.umd.cjsView on unpkg · L31
39patternName = supabase_service_key severity = critical line = 39 matchedText = `+r)}}ca...)});
Critical
Secret Pattern

Supabase service role key (JWT) in dist/gsc-summary.umd.cjs

dist/gsc-summary.umd.cjsView on unpkg · L39

Findings

11 Critical1 High2 Medium5 Low
CriticalCritical Secretdist/index-6c5462aa.js
CriticalSecret Patterndist/index-6c5462aa.js
CriticalSecret Patterndist/index-6c5462aa.js
CriticalSecret Patterndist/index-6c5462aa.js
CriticalSecret Patterndist/index-6c5462aa.js
CriticalSecret Patterndist/index-6c5462aa.js
CriticalSecret Patterndist/index-6c5462aa.js
CriticalSecret Patterndist/gsc-summary.umd.cjs
CriticalSecret Patterndist/gsc-summary.umd.cjs
CriticalSecret Patterndist/gsc-summary.umd.cjs
CriticalSecret Patterndist/gsc-summary.umd.cjs
HighShips High Entropy Blobdist/fonts/BebasNeue-Thin.woff2
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License