registry / @luka-cat-mimi/n8n-nodes-kingdee / 0.2.4

@luka-cat-mimi/n8n-nodes-kingdee@0.2.4

金蝶云星空 N8N 集成插件

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequire

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 193 file(s), 549 KB of source, external domains: open.kingdee.com, your-domain.kingdee.com

Source & flagged code

2 flagged

dist/credentials/KingdeePasswordApi.credentials.jsView file

Lines 81-121javascript

81 expirable: true,

82 },

83 },

84 ];

85 this.authenticate = {

86 type: 'generic',

87 properties: {

88 headers: {

89 Cookie: '={{$credentials.cookie}}',

90 },

91 },

92 };

93 this.test = {

94 request: {

95 baseURL: '={{$credentials.host}}',

96 url: '/Kingdee.BOS.WebApi.ServicesStub.AuthService.ValidateUser.common.kdsvc',

97 method: 'POST',

98 body: {

99 acctid: '={{$credentials.acctId}}',

100 username: '={{$credentials.username}}',

101 password: '={{$credentials.password}}',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/credentials/KingdeePasswordApi.credentials.jsView on unpkg · L101

102 lcid: '={{$credentials.lcid}}',

103 },

104 },

105 rules: [

106 {

107 type: 'responseSuccessBody',

108 properties: {

109 message: '账套 ID 无效',

110 key: 'LoginResultType',

111 value: 0,

112 },

113 },

114 {

115 type: 'responseSuccessBody',

116 properties: {

117 message: '用户名或密码错误',

118 key: 'LoginResultType',

119 value: 2,

120 },

121 },

dist/nodes/Kingdee/Kingdee.node.jsView file

Lines 1-26javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.Kingdee = void 0;

7const n8n_workflow_1 = require("n8n-workflow");

8const ResourceFactory_1 = __importDefault(require("../help/builder/ResourceFactory"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/nodes/Kingdee/Kingdee.node.jsView on unpkg · L6

9const resourceBuilder = ResourceFactory_1.default.build(__dirname);

10function getBatchConfig(context) {

11 var _a, _b, _c, _d, _e, _f, _g;

12 try {

13 const options = context.getNodeParameter('options', 0, {});

14 const batchingEnabled = ((_a = options === null || options === void 0 ? void 0 : options.batching) === null || _a === void 0 ? void 0 : _a.batch) !== undefined;

15 const batchSize = (_d = (_c = (_b = options === null || options === void 0 ? void 0 : options.batching) === null || _b === void 0 ? void 0 : _b.batch) === null || _c === void 0 ? void 0 : _c.batchSize) !== null && _d !== void 0 ? _d : 50;

16 const batchInterval = (_g = (_f = (_e = options === null || options === void 0 ? void 0 : options.batching) === null || _e === void 0 ? void 0 : _e.batch) === null || _f === void 0 ? void 0 : _f.batchInterval) !== null && _g !== void 0 ? _g : 0;

17 return {

18 enabled: batchingEnabled,

19 batchSize: batchSize === 0 ? 1 : batchSize,

20 batchInterval,

21 };

22 }

23 catch {

24 return { enabled: false, batchSize: 50, batchInterval: 0 };

25 }

26}

Source & flagged code

2 flagged · loading source

dist/credentials/KingdeePasswordApi.credentials.jsView file

101patternName = generic_password severity = medium line = 101 matchedText = password...}}',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/credentials/KingdeePasswordApi.credentials.jsView on unpkg · L101

dist/nodes/Kingdee/Kingdee.node.jsView file

6exports.Kingdee = void 0; L7: const n8n_workflow_1 = require("n8n-workflow"); L8: const ResourceFactory_1 = __importDefault(require("../help/builder/ResourceFactory"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/nodes/Kingdee/Kingdee.node.jsView on unpkg · L6

Findings

3 Medium3 Low

MediumSecret Patterndist/credentials/KingdeePasswordApi.credentials.js

MediumDynamic Requiredist/nodes/Kingdee/Kingdee.node.js

MediumWildcard Dependency

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/credentials/KingdeePasswordApi.credentials.jsView file

Lines 81-121javascript

81 expirable: true,

82 },

83 },

84 ];

85 this.authenticate = {

86 type: 'generic',

87 properties: {

88 headers: {

89 Cookie: '={{$credentials.cookie}}',

90 },

91 },

92 };

93 this.test = {

94 request: {

95 baseURL: '={{$credentials.host}}',

96 url: '/Kingdee.BOS.WebApi.ServicesStub.AuthService.ValidateUser.common.kdsvc',

97 method: 'POST',

98 body: {

99 acctid: '={{$credentials.acctId}}',

100 username: '={{$credentials.username}}',

101 password: '={{$credentials.password}}',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/credentials/KingdeePasswordApi.credentials.jsView on unpkg · L101

102 lcid: '={{$credentials.lcid}}',

103 },

104 },

105 rules: [

106 {

107 type: 'responseSuccessBody',

108 properties: {

109 message: '账套 ID 无效',

110 key: 'LoginResultType',

111 value: 0,

112 },

113 },

114 {

115 type: 'responseSuccessBody',

116 properties: {

117 message: '用户名或密码错误',

118 key: 'LoginResultType',

119 value: 2,

120 },

121 },

dist/nodes/Kingdee/Kingdee.node.jsView file

Lines 1-26javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty(exports, "__esModule", { value: true });

6exports.Kingdee = void 0;

7const n8n_workflow_1 = require("n8n-workflow");

8const ResourceFactory_1 = __importDefault(require("../help/builder/ResourceFactory"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/nodes/Kingdee/Kingdee.node.jsView on unpkg · L6

9const resourceBuilder = ResourceFactory_1.default.build(__dirname);

10function getBatchConfig(context) {

11 var _a, _b, _c, _d, _e, _f, _g;

12 try {

13 const options = context.getNodeParameter('options', 0, {});

14 const batchingEnabled = ((_a = options === null || options === void 0 ? void 0 : options.batching) === null || _a === void 0 ? void 0 : _a.batch) !== undefined;

17 return {

18 enabled: batchingEnabled,

19 batchSize: batchSize === 0 ? 1 : batchSize,

20 batchInterval,

21 };

22 }

23 catch {

24 return { enabled: false, batchSize: 50, batchInterval: 0 };

25 }

26}