registry / @itentialopensource/adapter-vmware_virtual_infrastructure / 1.0.5

@itentialopensource/adapter-vmware_virtual_infrastructure@1.0.5

This adapter integrates with system described as: Virtual Infrastructure.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 398 KB of source, external domains: adapters.itential.io, registry.npmjs.org

Oversized source lightweight scan

adapter.js7.57 MB file, sampled 256 KB

DynamicRequireHighEntropyStrings

Source & flagged code

9 flagged

package.jsonView file

Lines 1-31json

2 "name": "@itentialopensource/adapter-vmware_virtual_infrastructure",

3 "version": "1.0.5",

4 "description": "This adapter integrates with system described as: Virtual Infrastructure.",

5 "main": "adapter.js",

6 "systemName": "Vmware_virtual_infrastructure",

7 "wizardVersion": "3.12.1",

8 "engineVersion": "1.82.5",

9 "adapterType": "http",

10 "scripts": {

11 "preinstall": "node utils/setup.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

12 "deinstall": "node utils/removeHooks.js",

13 "lint": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js",

14 "lint:errors": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js --quiet",

15 "test:baseunit": "mocha test/unit/adapterBaseTestUnit.js --LOG=error",

16 "test:unit": "mocha test/unit/adapterTestUnit.js --LOG=error",

17 "test:integration": "mocha test/integration/adapterTestIntegration.js --LOG=error",

18 "test": "npm run test:baseunit && npm run test:unit && npm run test:integration",

19 "adapter:checkMigrate": "node utils/checkMigrate.js",

20 "adapter:findPath": "node utils/findPath.js",

21 "adapter:migrate": "node utils/modify.js -m",

22 "adapter:update": "node utils/modify.js -u",

23 "adapter:revert": "node utils/modify.js -r",

24 "troubleshoot": "node utils/tbScript.js troubleshoot",

25 "healthcheck": "node utils/tbScript.js healthcheck",

26 "basicget": "node utils/tbScript.js basicget",

27 "connectivity": "node utils/tbScript.js connectivity"

28 },

29 "keywords": [

30 "Itential",

31 "Itential Platform",

test/unit/adapterBaseTestUnit.jsView file

Lines 10-50javascript

10const mocha = require('mocha');

11const winston = require('winston');

12const { expect } = require('chai');

13const { use

utils/checkMigrate.jsView file

Lines 1-31javascript

1/* @copyright Itential, LLC 2025 */

3/**

4 * This script will determine if the adapter needs to be upgraded, a migration is needed or

5 * a remediation is needed. This is self contained and depends on accessing GitLab repos as well as

6 * finding files within the adapter to gather and compare information.

7 *

8 * This utility is executed from a script in the package.json by `npm run adapter:checkMigrate`. As a result,

9 * this utility is exposed and available to customers but exclusively through the CLI.

10 */

utils/pre-commit.shView file

•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg

test/unit/adapterTestUnit.jsView file

•path = test/unit/adapterTestUnit.js kind = payload_in_excluded_dir sizeBytes = 2902858 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/unit/adapterTestUnit.jsView on unpkg

adapter.jsView file

•path = adapter.js kind = oversized_source_file sizeBytes = 7936566 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

adapter.jsView on unpkg

utils/testRunner.jsView file

Lines 1-49javascript

1#!/usr/bin/env node

2/* @copyright Itential, LLC 2019 */

4const execute = require('child_process').exec;

5const fs = require('fs-extra');

6const rl = require(

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.preinstall = node utils/setup.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

test/unit/adapterBaseTestUnit.jsView file

30patternName = generic_password severity = medium line = 30 matchedText = const pa...rd';

Medium

Secret Pattern

Package contains a possible secret pattern.

test/unit/adapterBaseTestUnit.jsView on unpkg · L30

utils/checkMigrate.jsView file

11L12: const { execSync } = require('child_process'); L13: const semver = require('semver');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

utils/checkMigrate.jsView on unpkg · L11

utils/pre-commit.shView file

•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg

test/unit/adapterTestUnit.jsView file

•path = test/unit/adapterTestUnit.js kind = payload_in_excluded_dir sizeBytes = 2902858 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/unit/adapterTestUnit.jsView on unpkg

adapter.jsView file

•path = adapter.js kind = oversized_source_file sizeBytes = 7936566 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

adapter.jsView on unpkg

utils/testRunner.jsView file

19patternName = generic_password severity = medium line = 19 matchedText = let pass...rd';

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L19

29patternName = generic_password severity = medium line = 29 matchedText = const dp...rd';

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L29

89patternName = generic_password severity = medium line = 89 matchedText = intTest ...;`);

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L89

Findings

3 High9 Medium4 Low

HighInstall Time Lifecycle Scriptspackage.json

HighPayload In Excluded Dirtest/unit/adapterTestUnit.js

HighOversized Source Fileadapter.js

MediumSecret Patterntest/unit/adapterBaseTestUnit.js

MediumDynamic Requireutils/checkMigrate.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperutils/pre-commit.sh

MediumStructural Risk Force Deep Review

MediumSecret Patternutils/testRunner.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

package.jsonView file

Lines 1-31json

2 "name": "@itentialopensource/adapter-vmware_virtual_infrastructure",

3 "version": "1.0.5",

4 "description": "This adapter integrates with system described as: Virtual Infrastructure.",

5 "main": "adapter.js",

6 "systemName": "Vmware_virtual_infrastructure",

7 "wizardVersion": "3.12.1",

8 "engineVersion": "1.82.5",

9 "adapterType": "http",

10 "scripts": {

11 "preinstall": "node utils/setup.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L11

12 "deinstall": "node utils/removeHooks.js",

13 "lint": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js",

14 "lint:errors": "node --max_old_space_size=4096 ./node_modules/eslint/bin/eslint.js . --ext .json --ext .js --quiet",

15 "test:baseunit": "mocha test/unit/adapterBaseTestUnit.js --LOG=error",

16 "test:unit": "mocha test/unit/adapterTestUnit.js --LOG=error",

17 "test:integration": "mocha test/integration/adapterTestIntegration.js --LOG=error",

18 "test": "npm run test:baseunit && npm run test:unit && npm run test:integration",

19 "adapter:checkMigrate": "node utils/checkMigrate.js",

20 "adapter:findPath": "node utils/findPath.js",

21 "adapter:migrate": "node utils/modify.js -m",

22 "adapter:update": "node utils/modify.js -u",

23 "adapter:revert": "node utils/modify.js -r",

24 "troubleshoot": "node utils/tbScript.js troubleshoot",

25 "healthcheck": "node utils/tbScript.js healthcheck",

26 "basicget": "node utils/tbScript.js basicget",

27 "connectivity": "node utils/tbScript.js connectivity"

28 },

29 "keywords": [

30 "Itential",

31 "Itential Platform",

test/unit/adapterBaseTestUnit.jsView file

Lines 10-50javascript

10const mocha = require('mocha');

11const winston = require('winston');

12const { expect } = require('chai');

13const { use

utils/checkMigrate.jsView file

Lines 1-31javascript

1/* @copyright Itential, LLC 2025 */

3/**

4 * This script will determine if the adapter needs to be upgraded, a migration is needed or

5 * a remediation is needed. This is self contained and depends on accessing GitLab repos as well as

6 * finding files within the adapter to gather and compare information.

7 *

8 * This utility is executed from a script in the package.json by `npm run adapter:checkMigrate`. As a result,

9 * this utility is exposed and available to customers but exclusively through the CLI.

10 */

utils/pre-commit.shView file

•path = utils/pre-commit.sh kind = build_helper sizeBytes = 824 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

utils/pre-commit.shView on unpkg

test/unit/adapterTestUnit.jsView file

•path = test/unit/adapterTestUnit.js kind = payload_in_excluded_dir sizeBytes = 2902858 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/unit/adapterTestUnit.jsView on unpkg

adapter.jsView file

•path = adapter.js kind = oversized_source_file sizeBytes = 7936566 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

adapter.jsView on unpkg

utils/testRunner.jsView file

Lines 1-49javascript

1#!/usr/bin/env node

2/* @copyright Itential, LLC 2019 */

4const execute = require('child_process').exec;

5const fs = require('fs-extra');

6const rl = require(

Lines 69-109javascript

69 if (sindex > -1) {

70 intTest = intTest.replace(replStr, `const isSaveMockData = ${isSaveMockData};`);

71 }

73 // replace host variable

74 sindex = intTest.indexOf('samProps.host');

75 eindex = intTest.indexOf(';', sindex);

76 replStr = intTest.substring(sindex, eindex + 1);

77 intTest = intTest.replace(replStr, `samProps.host = '${host}';`);

79 // replace username variable

80 sindex = intTest.indexOf('samProps.authentication.username');

81 eindex = intTest.indexOf(';', sindex);

82 replStr = intTest.substring(sindex, eindex + 1);

83 intTest = intTest.replace(replStr, `samProps.authentication.username = '${username}';`);

85 // replace password variable

86 sindex = intTest.indexOf('samProps.authentication.password');

87 eindex = intTest.indexOf(';', sindex);

88 replStr = intTest.substring(sindex, eindex + 1);

89 intTest = intTest.replace(replStr, `samProps.authentication.password = '${password}';`);

Medium

Secret Pattern

Hardcoded password in utils/testRunner.js

utils/testRunner.jsView on unpkg · L89

91 // replace protocol variable

92 sindex = intTest.indexOf('samProps.protocol');

93 eindex = intTest.indexOf(';', sindex);

94 replStr = intTest.substring(sindex, eindex + 1);

95 intTest = intTest.replace(replStr, `samProps.protocol = '${protocol}';`);

97 // replace port variable

98 sindex = intTest.indexOf('samProps.port');

99 eindex = intTest.indexOf(';', sindex);

100 replStr = intTest.substring(sindex, eindex + 1);

101 intTest = intTest.replace(replStr, `samProps.port = ${port};`);

102

103 // replace sslenable variable

104 sindex = intTest.indexOf('samProps.ssl.enabled');

105 eindex = intTest.indexOf(';', sindex);

106 replStr = intTest.substring(sindex, eindex + 1);

107 intTest = intTest.replace(replStr, `samProps.ssl.enabled = ${sslenable};`);

108

109 // replace sslinvalid variable