registry  /  @itentialopensource/adapter-cisco_firepowermanagementcenter  /  1.0.5

@itentialopensource/adapter-cisco_firepowermanagementcenter@1.0.5

This adapter integrates with system described as: ciscoFirepowerManagement

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 23 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 20 file(s), 1.72 MB of source, external domains: adapters.itential.io, registry.npmjs.org

Source & flagged code

16 flagged · loading source
package.jsonView file
•scripts.preinstall = node utils/setup.js
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
test/integration/adapterTestIntegration.jsView file
8063patternName = private_key_rsa severity = critical line = 8063 matchedText = assert.e...ey);
Critical
Critical Secret

Package contains a critical-looking secret pattern.

test/integration/adapterTestIntegration.jsView on unpkg · L8063
8063patternName = private_key_rsa severity = critical line = 8063 matchedText = assert.e...ey);
Critical
Secret Pattern

RSA private key in test/integration/adapterTestIntegration.js

test/integration/adapterTestIntegration.jsView on unpkg · L8063
43patternName = generic_password severity = medium line = 43 matchedText = // samPr...rd';
Medium
Secret Pattern

Hardcoded password in test/integration/adapterTestIntegration.js

test/integration/adapterTestIntegration.jsView on unpkg · L43
adapter.jsView file
9/* Required libraries. */ L10: const path = require('path'); L11:
Medium
Dynamic Require

Package source references dynamic require/import behavior.

adapter.jsView on unpkg · L9
utils/pre-commit.shView file
•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg
test/unit/adapterTestUnit.jsView file
43patternName = generic_password severity = medium line = 43 matchedText = // samPr...rd';
Medium
Secret Pattern

Hardcoded password in test/unit/adapterTestUnit.js

test/unit/adapterTestUnit.jsView on unpkg · L43
test/unit/adapterBaseTestUnit.jsView file
30patternName = generic_password severity = medium line = 30 matchedText = const pa...rd';
Medium
Secret Pattern

Hardcoded password in test/unit/adapterBaseTestUnit.js

test/unit/adapterBaseTestUnit.jsView on unpkg · L30
utils/testRunner.jsView file
19patternName = generic_password severity = medium line = 19 matchedText = let pass...rd';
Medium
Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L19
29patternName = generic_password severity = medium line = 29 matchedText = const dp...rd';
Medium
Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L29
89patternName = generic_password severity = medium line = 89 matchedText = intTest ...;`);
Medium
Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L89
report/FMC-swagger.json-OpenApi3JsonME.jsonView file
7999patternName = private_key_rsa severity = critical line = 7999 matchedText = "key": "...\n",
Critical
Secret Pattern

RSA private key in report/FMC-swagger.json-OpenApi3JsonME.json

report/FMC-swagger.json-OpenApi3JsonME.jsonView on unpkg · L7999
report/adapter-openapi.yamlView file
7093patternName = private_key_rsa severity = critical line = 7093 matchedText = -----BEG...----
Critical
Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L7093
7124patternName = private_key_rsa severity = critical line = 7124 matchedText = -----BEG...----
Critical
Secret Pattern

RSA private key in report/adapter-openapi.yaml

report/adapter-openapi.yamlView on unpkg · L7124
report/adapter-openapi.jsonView file
7999patternName = private_key_rsa severity = critical line = 7999 matchedText = "key": "...\n",
Critical
Secret Pattern

RSA private key in report/adapter-openapi.json

report/adapter-openapi.jsonView on unpkg · L7999
entities/Intelligence/mockdatafiles/getRESTElement-default.jsonView file
11patternName = private_key_rsa severity = critical line = 11 matchedText = "key": "...\n",
Critical
Secret Pattern

RSA private key in entities/Intelligence/mockdatafiles/getRESTElement-default.json

entities/Intelligence/mockdatafiles/getRESTElement-default.jsonView on unpkg · L11

Findings

7 Critical1 High11 Medium4 Low
CriticalCritical Secrettest/integration/adapterTestIntegration.js
CriticalSecret Patterntest/integration/adapterTestIntegration.js
CriticalSecret Patternreport/FMC-swagger.json-OpenApi3JsonME.json
CriticalSecret Patternreport/adapter-openapi.yaml
CriticalSecret Patternreport/adapter-openapi.yaml
CriticalSecret Patternreport/adapter-openapi.json
CriticalSecret Patternentities/Intelligence/mockdatafiles/getRESTElement-default.json
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requireadapter.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperutils/pre-commit.sh
MediumStructural Risk Force Deep Review
MediumSecret Patterntest/unit/adapterTestUnit.js
MediumSecret Patterntest/unit/adapterBaseTestUnit.js
MediumSecret Patterntest/integration/adapterTestIntegration.js
MediumSecret Patternutils/testRunner.js
MediumSecret Patternutils/testRunner.js
MediumSecret Patternutils/testRunner.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings