registry / @office-kit/xlsx / 0.9.0

@office-kit/xlsx@0.9.0

TypeScript library for reading and writing Excel xlsx files in Node and the browser.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

public snapshot

Behavioral surface

Source

ChildProcessFilesystem

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 43 file(s), 761 KB of source, external domains: purl.org, schemas.microsoft.com, schemas.openxmlformats.org, www.w3.org

1 flagged

dist/stylesheet-writer-P1Hxoqzm.mjsView file

Lines 6865-6905javascript

6865 const inner = [`<sortState${attrs}>`];

6866 for (const c of ss.conditions) inner.push(serializeSortCondition(c));

6867 inner.push("</sortState>");

1 flagged · loading source

dist/stylesheet-writer-P1Hxoqzm.mjsView file

6885patternName = generic_password severity = medium line = 6885 matchedText = if (r.pa...}"`;

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stylesheet-writer-P1Hxoqzm.mjsView on unpkg · L6885

1 Medium5 Low

MediumSecret Patterndist/stylesheet-writer-P1Hxoqzm.mjs

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings