registry / @hypequery/cli / 1.14.0
@hypequery/cli@1.14.0
Command-line interface for hypequery
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 11 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/commands/init.jsView file
343patternName = generic_password
severity = medium
line = 343
matchedText = password...RD',
Medium
dist/utils/load-api.jsView file
79? await importOverride(moduleUrl)
L80: : await import(/* @vite-ignore */ moduleUrl);
L81: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/utils/load-api.jsView on unpkg · L79dist/commands/dev.jsView file
117package = @hypequery/cli; repositoryIdentity = hypequery; dependency = open
L117: try {
L118: const open = (await import('open')).default;
L119: await open(baseUrl);
Findings
2 High5 Medium4 Low
HighCopied Package Dependency Bridgedist/commands/dev.js
HighPrevious Version Dangerous Deltadist/utils/dependency-installer.js
MediumSecret Patterndist/commands/init.js
MediumDynamic Requiredist/utils/load-api.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hypequery/cli@1.14.0.
See all versions of @hypequery/cli for other recorded verdicts.
- Review the evidence and your use of @hypequery/cli@1.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.