registry / @goplusvn/core / 0.1.36

@goplusvn/core@0.1.36

GoPlusVN Platform Kit - ERP kernel: layout, RBAC, CRUD, multi-tenant, system pages

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 413 file(s), 1.85 MB of source, external domains: google.com, goplus.vn, purecatamphetamine.github.io, www.example.com, www.w3.org

Source & flagged code

2 flagged

src/user/components/unified-profile-dialog.tsxView file

Lines 263-303tsx

263 if (passwordData.password !== passwordData.confirm) {

264 setError("Mật khẩu xác nhận không khớp");

265 setIsSubmitting(false);

266 return;

267 }

268 if (passwordData.password.length < 6) {

269 setError("Mật khẩu phải có ít nhất 6 ký tự");

270 setIsSubmitting(false);

271 return;

272 }

273 payload.password = passwordData.password;

274 } else if (mode === "create") {

275 // If creating a customer account, password is required

276 setError("Mật khẩu là bắt buộc cho tài khoản khách hàng mới");

277 setIsSubmitting(false);

278 return;

279 }

280 } else {

281 // If account not enabled, default or clear

282 if (mode === "create") {

283 payload.password = "Goeat@123456";

Medium

Secret Pattern

Package contains a possible secret pattern.

src/user/components/unified-profile-dialog.tsxView on unpkg · L283

284 } else {

285 delete payload.password;

286 payload.roleCodes = [];

287 }

288 }

289 } else {

290 if (passwordData.password) {

291 if (passwordData.password !== passwordData.confirm) {

292 setError("Mật khẩu xác nhận không khớp");

293 setIsSubmitting(false);

294 return;

295 }

296 if (passwordData.password.length < 6) {

297 setError("Mật khẩu phải có ít nhất 6 ký tự");

298 setIsSubmitting(false);

299 return;

300 }

301 payload.password = passwordData.password;

302 } else if (mode === "create") {

303 setError("Mật khẩu là bắt buộc cho tài khoản mới");

src/ui/forms/update_search.pyView file

•path = src/ui/forms/update_search.py kind = build_helper sizeBytes = 1662 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/ui/forms/update_search.pyView on unpkg

Source & flagged code

2 flagged · loading source

src/user/components/unified-profile-dialog.tsxView file

283patternName = generic_password severity = medium line = 283 matchedText = payload....56";

Medium

Secret Pattern

Package contains a possible secret pattern.

src/user/components/unified-profile-dialog.tsxView on unpkg · L283

src/ui/forms/update_search.pyView file

•path = src/ui/forms/update_search.py kind = build_helper sizeBytes = 1662 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/ui/forms/update_search.pyView on unpkg

Findings

4 Medium4 Low

MediumSecret Patternsrc/user/components/unified-profile-dialog.tsx

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpersrc/ui/forms/update_search.py

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

src/user/components/unified-profile-dialog.tsxView file

Lines 263-303tsx

263 if (passwordData.password !== passwordData.confirm) {

264 setError("Mật khẩu xác nhận không khớp");

265 setIsSubmitting(false);

266 return;

267 }

268 if (passwordData.password.length < 6) {

269 setError("Mật khẩu phải có ít nhất 6 ký tự");

270 setIsSubmitting(false);

271 return;

272 }

273 payload.password = passwordData.password;

274 } else if (mode === "create") {

275 // If creating a customer account, password is required

276 setError("Mật khẩu là bắt buộc cho tài khoản khách hàng mới");

277 setIsSubmitting(false);

278 return;

279 }

280 } else {

281 // If account not enabled, default or clear

282 if (mode === "create") {

283 payload.password = "Goeat@123456";

Medium

Secret Pattern

Package contains a possible secret pattern.

src/user/components/unified-profile-dialog.tsxView on unpkg · L283

284 } else {

285 delete payload.password;

286 payload.roleCodes = [];

287 }

288 }

289 } else {

290 if (passwordData.password) {

291 if (passwordData.password !== passwordData.confirm) {

292 setError("Mật khẩu xác nhận không khớp");

293 setIsSubmitting(false);

294 return;

295 }

296 if (passwordData.password.length < 6) {

297 setError("Mật khẩu phải có ít nhất 6 ký tự");

298 setIsSubmitting(false);

299 return;

300 }

301 payload.password = passwordData.password;

302 } else if (mode === "create") {

303 setError("Mật khẩu là bắt buộc cho tài khoản mới");

src/ui/forms/update_search.pyView file

•path = src/ui/forms/update_search.py kind = build_helper sizeBytes = 1662 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/ui/forms/update_search.pyView on unpkg