@leejungkiin/awkit@3.5.7: Malicious npm security report (Block)

Loading npm security reports…

@leejungkiin/awkit@3.5.7: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

32 flagged

symphony/multica-ref/server/pkg/redact/redact_test.goView file

Lines 1-30text

1package redact

3import (

4 "strings"

5 "testing"

8func TestRedactAWSAccessKey(t *testing.T) {

9 t.Parallel()

10 input := "Found key AKIAIOSFODNN7EXAMPLE in config"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L10

11 got := Text(input)

12 if strings.Contains(got, "AKIAIOSFODNN7EXAMPLE") {

13 t.Fatalf("AWS key not redacted: %s", got)

14 }

15 if !strings.Contains(got, "[REDACTED AWS KEY]") {

16 t.Fatalf("expected [REDACTED AWS KEY] placeholder, got: %s", got)

17 }

18}

20func TestRedactAWSSecretKey(t *testing.T) {

21 t.Parallel()

22 input := "aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"

23 got := Text(input)

24 if strings.Contains(got, "wJalrXUtnFEMI") {

25 t.Fatalf("AWS secret not redacted: %s", got)

26 }

27}

29func TestRedactPrivateKey(t *testing.T) {

30 t.Parallel()

10patternName = aws_access_key severity = critical line = 10 matchedText = input :=...fig"

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L10

12patternName = aws_access_key severity = critical line = 12 matchedText = if strin...") {

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L12

22patternName = aws_secret_key severity = critical line = 22 matchedText = input :=...KEY"

Critical

Secret Pattern

AWS secret access key in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L22

31patternName = private_key_rsa severity = critical line = 31 matchedText = input :=...ne."

Critical

Secret Pattern

RSA private key in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L31

43patternName = github_pat severity = critical line = 43 matchedText = input :=...lmn"

Critical

Secret Pattern

GitHub personal access token in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L43

208patternName = github_pat severity = critical line = 208 matchedText = input :=...lmn"

Critical

Secret Pattern

GitHub personal access token in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L208

208patternName = aws_access_key severity = critical line = 208 matchedText = input :=...lmn"

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L208

210patternName = aws_access_key severity = critical line = 210 matchedText = if strin...") {

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L210

bin/awk.jsView file

Lines 6-47javascript

6 *

7 * Usage:

8 * awkit install Install AWK into the active platform runtime

9 * awkit install --all Install AWK into every supported platform

10 * awkit uninstall Remove

core/GreetingEngine/test.jsView file

Lines 1-21javascript

1const { generateGreeting, getGreetingHistory, getGreetingStats } = require('./index');

2const fs = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

symphony/multica-ref/docker/entrypoint.shView file

•path = symphony/multica-ref/docker/entrypoint.sh kind = build_helper sizeBytes = 110 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

symphony/multica-ref/docker/entrypoint.shView on unpkg

symphony/multica-ref/apps/desktop/build/icon.icnsView file

•path = symphony/multica-ref/apps/desktop/build/icon.icns kind = high_entropy_blob sizeBytes = 1170743 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

symphony/multica-ref/apps/desktop/build/icon.icnsView on unpkg

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView file

6patternName = aws_access_key severity = critical line = 6 matchedText = const re...E");

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L6

7patternName = aws_access_key severity = critical line = 7 matchedText = expect(r...E");

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L7

12patternName = aws_secret_key severity = critical line = 12 matchedText = const re...Y");

Critical

Secret Pattern

AWS secret access key in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L12

docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.pyView file

719patternName = private_key_rsa severity = critical line = 719 matchedText = "key": "...--",

Critical

Secret Pattern

RSA private key in docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.py

docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.pyView on unpkg · L719

Source & flagged code

32 flagged · loading source

symphony/multica-ref/server/pkg/redact/redact_test.goView file

10patternName = aws_access_key severity = critical line = 10 matchedText = input :=...fig"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L10

10patternName = aws_access_key severity = critical line = 10 matchedText = input :=...fig"

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L10

12patternName = aws_access_key severity = critical line = 12 matchedText = if strin...") {

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L12

22patternName = aws_secret_key severity = critical line = 22 matchedText = input :=...KEY"

Critical

Secret Pattern

AWS secret access key in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L22

31patternName = private_key_rsa severity = critical line = 31 matchedText = input :=...ne."

Critical

Secret Pattern

RSA private key in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L31

43patternName = github_pat severity = critical line = 43 matchedText = input :=...lmn"

Critical

Secret Pattern

GitHub personal access token in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L43

208patternName = github_pat severity = critical line = 208 matchedText = input :=...lmn"

Critical

Secret Pattern

GitHub personal access token in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L208

208patternName = aws_access_key severity = critical line = 208 matchedText = input :=...lmn"

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L208

210patternName = aws_access_key severity = critical line = 210 matchedText = if strin...") {

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L210

bin/awk.jsView file

26const path = require('path'); L27: const https = require('https'); L28: const { execSync, spawnSync } = require('child_process'); L29: const os = require('os'); ... L33: const AWK_ROOT = path.join(__dirname, '..'); L34: const HOME = process.env.HOME || process.env.USERPROFILE; L35:

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

bin/awk.jsView on unpkg · L26

26const path = require('path'); L27: const https = require('https'); L28: const { execSync, spawnSync } = require('child_process'); L29: const os = require('os'); L30: L31: const packageJson = require(path.join(__dirname, '..', 'package.json')); L32: const AWK_VERSION = packageJson.version; L33: const AWK_ROOT = path.join(__dirname, '..'); L34: const HOME = process.env.HOME || process.env.USERPROFILE; L35: ... L229: input: process.stdin, L230: output: process.stdout

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/awk.jsView on unpkg · L26

Critical

Command Output Exfiltration

core/GreetingEngine/test.jsView file

1const { generateGreeting, getGreetingHistory, getGreetingStats } = require('./index'); L2: const fs = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/GreetingEngine/test.jsView on unpkg · L1

symphony/multica-ref/docker/entrypoint.shView file

•path = symphony/multica-ref/docker/entrypoint.sh kind = build_helper sizeBytes = 110 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

symphony/multica-ref/docker/entrypoint.shView on unpkg

symphony/multica-ref/apps/desktop/build/icon.icnsView file

•path = symphony/multica-ref/apps/desktop/build/icon.icns kind = high_entropy_blob sizeBytes = 1170743 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

symphony/multica-ref/apps/desktop/build/icon.icnsView on unpkg

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView file

6patternName = aws_access_key severity = critical line = 6 matchedText = const re...E");

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L6

7patternName = aws_access_key severity = critical line = 7 matchedText = expect(r...E");

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L7

12patternName = aws_secret_key severity = critical line = 12 matchedText = const re...Y");

Critical

Secret Pattern

AWS secret access key in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L12

docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.pyView file

719patternName = private_key_rsa severity = critical line = 719 matchedText = "key": "...--",

Critical

Secret Pattern

RSA private key in docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.py

docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.pyView on unpkg · L719

Findings

24 Critical5 High7 Medium5 Low

CriticalCritical Secretsymphony/multica-ref/server/pkg/redact/redact_test.go

CriticalSame File Env Network Executionbin/awk.js

CriticalCredential Exfiltrationbin/awk.js

CriticalCommand Output Exfiltrationbin/awk.js

CriticalDownload Executebin/awk.js

CriticalTrigger Reachable Dangerous Capabilitybin/awk.js

CriticalPrevious Version Dangerous Deltabin/awk.js

CriticalSecret Patternsymphony/multica-ref/server/pkg/redact/redact_test.go

CriticalSecret Patternsymphony/multica-ref/packages/views/issues/utils/redact.test.ts

CriticalSecret Patterndocs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.py

HighChild Processbin/awk.js

HighShellbin/awk.js

HighSandbox Evasion Gated Capabilitybin/awk.js

HighRuntime Package Installbin/awk.js

HighShips High Entropy Blobsymphony/multica-ref/apps/desktop/build/icon.icns

MediumDynamic Requirecore/GreetingEngine/test.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/awk.js

MediumShips Build Helpersymphony/multica-ref/docker/entrypoint.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

32 flagged

symphony/multica-ref/server/pkg/redact/redact_test.goView file

Lines 1-30text

1package redact

3import (

4 "strings"

5 "testing"

8func TestRedactAWSAccessKey(t *testing.T) {

9 t.Parallel()

10 input := "Found key AKIAIOSFODNN7EXAMPLE in config"

Critical

Critical Secret

Package contains a critical-looking secret pattern.

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L10

11 got := Text(input)

12 if strings.Contains(got, "AKIAIOSFODNN7EXAMPLE") {

13 t.Fatalf("AWS key not redacted: %s", got)

14 }

15 if !strings.Contains(got, "[REDACTED AWS KEY]") {

16 t.Fatalf("expected [REDACTED AWS KEY] placeholder, got: %s", got)

17 }

18}

20func TestRedactAWSSecretKey(t *testing.T) {

21 t.Parallel()

22 input := "aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"

23 got := Text(input)

24 if strings.Contains(got, "wJalrXUtnFEMI") {

25 t.Fatalf("AWS secret not redacted: %s", got)

26 }

27}

29func TestRedactPrivateKey(t *testing.T) {

30 t.Parallel()

10patternName = aws_access_key severity = critical line = 10 matchedText = input :=...fig"

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L10

12patternName = aws_access_key severity = critical line = 12 matchedText = if strin...") {

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L12

22patternName = aws_secret_key severity = critical line = 22 matchedText = input :=...KEY"

Critical

Secret Pattern

AWS secret access key in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L22

31patternName = private_key_rsa severity = critical line = 31 matchedText = input :=...ne."

Critical

Secret Pattern

RSA private key in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L31

43patternName = github_pat severity = critical line = 43 matchedText = input :=...lmn"

Critical

Secret Pattern

GitHub personal access token in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L43

208patternName = github_pat severity = critical line = 208 matchedText = input :=...lmn"

Critical

Secret Pattern

GitHub personal access token in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L208

208patternName = aws_access_key severity = critical line = 208 matchedText = input :=...lmn"

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L208

210patternName = aws_access_key severity = critical line = 210 matchedText = if strin...") {

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/server/pkg/redact/redact_test.go

symphony/multica-ref/server/pkg/redact/redact_test.goView on unpkg · L210

bin/awk.jsView file

Lines 6-47javascript

6 *

7 * Usage:

8 * awkit install Install AWK into the active platform runtime

9 * awkit install --all Install AWK into every supported platform

10 * awkit uninstall Remove

core/GreetingEngine/test.jsView file

Lines 1-21javascript

1const { generateGreeting, getGreetingHistory, getGreetingStats } = require('./index');

2const fs = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

symphony/multica-ref/docker/entrypoint.shView file

•path = symphony/multica-ref/docker/entrypoint.sh kind = build_helper sizeBytes = 110 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

symphony/multica-ref/docker/entrypoint.shView on unpkg

symphony/multica-ref/apps/desktop/build/icon.icnsView file

•path = symphony/multica-ref/apps/desktop/build/icon.icns kind = high_entropy_blob sizeBytes = 1170743 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

symphony/multica-ref/apps/desktop/build/icon.icnsView on unpkg

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView file

6patternName = aws_access_key severity = critical line = 6 matchedText = const re...E");

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L6

7patternName = aws_access_key severity = critical line = 7 matchedText = expect(r...E");

Critical

Secret Pattern

AWS access key ID in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L7

12patternName = aws_secret_key severity = critical line = 12 matchedText = const re...Y");

Critical

Secret Pattern

AWS secret access key in symphony/multica-ref/packages/views/issues/utils/redact.test.ts

symphony/multica-ref/packages/views/issues/utils/redact.test.tsView on unpkg · L12

docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.pyView file

719patternName = private_key_rsa severity = critical line = 719 matchedText = "key": "...--",

Critical

Secret Pattern

RSA private key in docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.py

docs/research/reverse-skills-study/fausto-ai-mobile-re/ai-mobile-reverse-skills/tools/scripts/sign_rebuilder.pyView on unpkg · L719

@leejungkiin/awkit@3.5.7

AI Security Review

OSV Corroboration

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code