@pilllesss/yorn@1.0.189: Malicious npm security report (Block)

Loading npm security reports…

@pilllesss/yorn@1.0.189: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

29 flagged

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView file

Lines 10-50markdown

10| `Discovery:IAMUser/AnomalousBehavior` | Unusual reconnaissance API patterns |

11| `Persistence:IAMUser/AnomalousBehavior` | Unusual persistence API calls |

12| `InitialAccess:IAMUser/AnomalousBehavior` | Unusual initial access patterns |

14## CloudTrail - Credential Abuse Investigation

16```bash

17# Lookup events by access key

18aws cloudtrail lookup-events \

19 --lookup-attributes AttributeKey=AccessKeyId,AttributeValue=AKIAXXXXXXXXXXXXXXXX \

20 --start-time 2024-01-01T00:00:00Z --end-time 2024-01-02T00:00:00Z

22# Lookup by username

23aws cloudtrail lookup-events \

24 --lookup-attributes AttributeKey=Username,AttributeValue=compromised-user

26# Athena query for deep investigation

27SELECT eventtime, eventsource, eventname, sourceipaddress,

28 useridentity.arn, errorcode

29FROM cloudtrail_logs

30WHERE useridentity.accesskeyid = 'AKIAXXXXXXXXXXXXXXXX'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView on unpkg · L30

31 AND eventtime > '2024-01-01'

32ORDER BY eventtime DESC

33```

35## IAM Credential Remediation

37```bash

38# Deactivate access key

39aws iam update-access-key --access-key-id AKIAXXXX --user-name user --status Inactive

41# Delete access key

42aws iam delete-access-key --access-key-id AKIAXXXX --user-name user

44# Revoke all sessions (inline deny policy with token age condition)

45aws iam put-user-policy --user-name user --policy-name RevokeOldSessions \

46 --policy-document '{"Version":"2012-10-17","Statement":[{"Effect":"Deny","Action":"*","Resource":"*","Condition":{"DateLessThan":{"aws:TokenIssueTime":"2024-01-15T00:00:00Z"}}}]}'

48# List all access keys for user

49aws iam list-access-keys --user-name user

50```

30patternName = aws_access_key severity = critical line = 30 matchedText = WHERE us...XXX'

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView on unpkg · L30

dist/yorn.cjsView file

22\r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tHd.build(["fer-encod","trans","ing"],[1,0,2])]&&!t[tHd.build(["cont","ngth","ent-le"],[0,2,1])]}),e.on("socket",l... L24: `)}function eZd(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`

High

Child Process

Package source references child process execution.

dist/yorn.cjsView on unpkg · L22

11${eLO(e)}`);if(tHn.evalInvariant(64045)&&null==o)throw new Il(`missing choices[${r}].tool_calls[${i}].function.arguments L12: ${eLO(e)}`);return{...a,id:l,type:s,function:{...d,name:u,arguments:o}}})}}:{...s,message:{...u,content:l,role:d,refusal:t.refusal??null},finish_reason:i,index:r,logprobs:n}}),crea... L13: Content-Disposition: form-data; name="`;return e.forEach((e,t)=>"string"==typeof e?r.push(n+Py(t)+`"\r ... L22: \r L23: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tHd.build(["fer-encod","trans","ing"],[1,0,2])]&&!t[tHd.build(["cont","ngth","ent-le"],[0,2,1])]}),e.on("socket",l... L24: `)}function eZd(e){return e.map(e=>"text"===e.type?e.text:"thinking"===e.type?e.thinking:`${e.name}:${JSON.stringify(e.arguments)}`).join(`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/yorn.cjsView on unpkg · L11

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/yorn.cjs: `),n=!1,s=!1;e.on("response",e=>{let{headers:t}=e;n="chunked"===t[tHd.build(["fer-encod","trans","ing"],[1,0,2])]&&!t[tHd.build(["cont","ngth","ent-le"],[0,2,1])]}),e.on("socket",l... `)}function eZp(e,t){let i=Math.min(e.length,t.length),r=0;for(;r<i&&e[r]===t[r];)r++;return r}function eZm(e,t,i,r){let n=eZh(t),s=eZa(n),l=eZa(eZd(e.content)),a=s,o=0,u=0,d=i?.se... `){return"string"==typeof e?e:e.filter(e=>"text"===e.type).map(e=>e.text).join(t)}function eZj(e,t){return Yc.Unsafe({type:"string",enum:e,...t?.description&&{description:t.descrip... --api-key <key> API key (defaults to env vars) # Print a prov

dist/skills/screenshot/scripts/take_screenshot.pyView file

•path = dist/skills/screenshot/scripts/take_screenshot.py kind = build_helper sizeBytes = 19659 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/screenshot/scripts/take_screenshot.pyView on unpkg

dist/skills/anthropic-cybersecurity-skills/securing-container-registry-with-harbor/scripts/agent.pyView file

Lines 152-184python

152 "projects_audited": len(projects) if isinstance(projects, list) else 0,

153 "system_config": sys_config,

154 "projects": projects,

155 "findings": self.findings,

156 "finding_count": len(self.findings),

157 }

158 out = self.output_dir / "harbor_audit_report.json"

159 with open(out, "w") as f:

160 json.dump(report, f, indent=2)

161 print(json.dumps(report, indent=2))

162

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView file

47patternName = aws_access_key severity = critical line = 47 matchedText = aws iam ...XXXX

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView on unpkg · L47

53patternName = aws_access_key severity = critical line = 53 matchedText = aws iam ...XX \

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView on unpkg · L53

57patternName = aws_access_key severity = critical line = 57 matchedText = aws iam ...XX \

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView file

213patternName = aws_access_key severity = critical line = 213 matchedText = --access...56 \

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView on unpkg · L213

229patternName = aws_access_key severity = critical line = 229 matchedText = --access...3456

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView on unpkg · L229

dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.pyView file

320patternName = generic_password severity = medium line = 320 matchedText = password...23!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.py

dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.pyView on unpkg · L320

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView file

242patternName = generic_password severity = medium line = 242 matchedText = fake_pas...24!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView on unpkg · L242

280patternName = generic_password severity = medium line = 280 matchedText = cpasswor...rd}"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView on unpkg · L280

dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.pyView file

68patternName = generic_password severity = medium line = 68 matchedText = def quer...d"):

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.pyView on unpkg · L68

dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.pyView file

85patternName = generic_password severity = medium line = 85 matchedText = def run_...3"):

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.pyView on unpkg · L85

dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.pyView file

281patternName = generic_password severity = medium line = 281 matchedText = password...23!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.py

dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.pyView on unpkg · L281

Source & flagged code

29 flagged · loading source

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView file

30patternName = aws_access_key severity = critical line = 30 matchedText = WHERE us...XXX'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView on unpkg · L30

30patternName = aws_access_key severity = critical line = 30 matchedText = WHERE us...XXX'

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView on unpkg · L30

dist/yorn.cjsView file

High

Child Process

Package source references child process execution.

dist/yorn.cjsView on unpkg · L22

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/yorn.cjsView on unpkg · L11

dist/skills/screenshot/scripts/take_screenshot.pyView file

•path = dist/skills/screenshot/scripts/take_screenshot.py kind = build_helper sizeBytes = 19659 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/screenshot/scripts/take_screenshot.pyView on unpkg

dist/skills/anthropic-cybersecurity-skills/securing-container-registry-with-harbor/scripts/agent.pyView file

172patternName = generic_password severity = medium line = 172 matchedText = password...345"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/securing-container-registry-with-harbor/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/securing-container-registry-with-harbor/scripts/agent.pyView on unpkg · L172

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView file

47patternName = aws_access_key severity = critical line = 47 matchedText = aws iam ...XXXX

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView on unpkg · L47

53patternName = aws_access_key severity = critical line = 53 matchedText = aws iam ...XX \

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView on unpkg · L53

57patternName = aws_access_key severity = critical line = 57 matchedText = aws iam ...XX \

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView file

213patternName = aws_access_key severity = critical line = 213 matchedText = --access...56 \

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView on unpkg · L213

229patternName = aws_access_key severity = critical line = 229 matchedText = --access...3456

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView on unpkg · L229

dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.pyView file

320patternName = generic_password severity = medium line = 320 matchedText = password...23!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.py

dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.pyView on unpkg · L320

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView file

242patternName = generic_password severity = medium line = 242 matchedText = fake_pas...24!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView on unpkg · L242

280patternName = generic_password severity = medium line = 280 matchedText = cpasswor...rd}"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView on unpkg · L280

dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.pyView file

68patternName = generic_password severity = medium line = 68 matchedText = def quer...d"):

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.pyView on unpkg · L68

dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.pyView file

85patternName = generic_password severity = medium line = 85 matchedText = def run_...3"):

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.pyView on unpkg · L85

dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.pyView file

281patternName = generic_password severity = medium line = 281 matchedText = password...23!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.py

dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.pyView on unpkg · L281

Findings

8 Critical10 High14 Medium4 Low

CriticalCritical Secretdist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.md

CriticalSecret Patterndist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.md

CriticalSecret Patterndist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

CriticalSecret Patterndist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

HighChild Processdist/yorn.cjs

HighSame File Env Network Executiondist/yorn.cjs

HighCredential Redirect Persistencedist/yorn.cjs

HighEntrypoint Foreign Package Code Overwritedist/yorn.cjs

HighCommand Output Exfiltrationdist/yorn.cjs

HighCloud Metadata Accessdist/yorn.cjs

HighTrigger Reachable Command Output Exfiltrationdist/yorn.cjs

HighSemantic Analysis Limiteddist/yorn.cjs

HighKnown Malware Source Similaritydist/yorn.cjs

HighKnown Malware Source Fingerprint Signaturedist/yorn.cjs

MediumDynamic Requiredist/yorn.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/skills/screenshot/scripts/take_screenshot.py

MediumOversized Source Filedist/yorn.cjs

MediumOversized Cli Entrypointdist/yorn.cjs

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/skills/anthropic-cybersecurity-skills/securing-container-registry-with-harbor/scripts/agent.py

MediumSecret Patterndist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.py

MediumSecret Patterndist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

MediumSecret Patterndist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.py

MediumSecret Patterndist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py

MediumSecret Patterndist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.py

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

29 flagged

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView file

Lines 10-50markdown

10| `Discovery:IAMUser/AnomalousBehavior` | Unusual reconnaissance API patterns |

11| `Persistence:IAMUser/AnomalousBehavior` | Unusual persistence API calls |

12| `InitialAccess:IAMUser/AnomalousBehavior` | Unusual initial access patterns |

14## CloudTrail - Credential Abuse Investigation

16```bash

17# Lookup events by access key

18aws cloudtrail lookup-events \

19 --lookup-attributes AttributeKey=AccessKeyId,AttributeValue=AKIAXXXXXXXXXXXXXXXX \

20 --start-time 2024-01-01T00:00:00Z --end-time 2024-01-02T00:00:00Z

22# Lookup by username

23aws cloudtrail lookup-events \

24 --lookup-attributes AttributeKey=Username,AttributeValue=compromised-user

26# Athena query for deep investigation

27SELECT eventtime, eventsource, eventname, sourceipaddress,

28 useridentity.arn, errorcode

29FROM cloudtrail_logs

30WHERE useridentity.accesskeyid = 'AKIAXXXXXXXXXXXXXXXX'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView on unpkg · L30

31 AND eventtime > '2024-01-01'

32ORDER BY eventtime DESC

33```

35## IAM Credential Remediation

37```bash

38# Deactivate access key

39aws iam update-access-key --access-key-id AKIAXXXX --user-name user --status Inactive

41# Delete access key

42aws iam delete-access-key --access-key-id AKIAXXXX --user-name user

44# Revoke all sessions (inline deny policy with token age condition)

45aws iam put-user-policy --user-name user --policy-name RevokeOldSessions \

46 --policy-document '{"Version":"2012-10-17","Statement":[{"Effect":"Deny","Action":"*","Resource":"*","Condition":{"DateLessThan":{"aws:TokenIssueTime":"2024-01-15T00:00:00Z"}}}]}'

48# List all access keys for user

49aws iam list-access-keys --user-name user

50```

30patternName = aws_access_key severity = critical line = 30 matchedText = WHERE us...XXX'

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-compromised-cloud-credentials/references/api-reference.mdView on unpkg · L30

dist/yorn.cjsView file

High

Child Process

Package source references child process execution.

dist/yorn.cjsView on unpkg · L22

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/yorn.cjsView on unpkg · L11

dist/skills/screenshot/scripts/take_screenshot.pyView file

•path = dist/skills/screenshot/scripts/take_screenshot.py kind = build_helper sizeBytes = 19659 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/screenshot/scripts/take_screenshot.pyView on unpkg

dist/skills/anthropic-cybersecurity-skills/securing-container-registry-with-harbor/scripts/agent.pyView file

Lines 152-184python

152 "projects_audited": len(projects) if isinstance(projects, list) else 0,

153 "system_config": sys_config,

154 "projects": projects,

155 "findings": self.findings,

156 "finding_count": len(self.findings),

157 }

158 out = self.output_dir / "harbor_audit_report.json"

159 with open(out, "w") as f:

160 json.dump(report, f, indent=2)

161 print(json.dumps(report, indent=2))

162

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView file

47patternName = aws_access_key severity = critical line = 47 matchedText = aws iam ...XXXX

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView on unpkg · L47

53patternName = aws_access_key severity = critical line = 53 matchedText = aws iam ...XX \

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/references/api-reference.mdView on unpkg · L53

57patternName = aws_access_key severity = critical line = 57 matchedText = aws iam ...XX \

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView file

213patternName = aws_access_key severity = critical line = 213 matchedText = --access...56 \

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView on unpkg · L213

229patternName = aws_access_key severity = critical line = 229 matchedText = --access...3456

Critical

Secret Pattern

AWS access key ID in dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.md

dist/skills/anthropic-cybersecurity-skills/detecting-aws-credential-exposure-with-trufflehog/SKILL.mdView on unpkg · L229

dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.pyView file

320patternName = generic_password severity = medium line = 320 matchedText = password...23!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.py

dist/skills/anthropic-cybersecurity-skills/implementing-aes-encryption-for-data-at-rest/scripts/process.pyView on unpkg · L320

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView file

242patternName = generic_password severity = medium line = 242 matchedText = fake_pas...24!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView on unpkg · L242

280patternName = generic_password severity = medium line = 280 matchedText = cpasswor...rd}"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/deploying-active-directory-honeytokens/scripts/agent.pyView on unpkg · L280

dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.pyView file

68patternName = generic_password severity = medium line = 68 matchedText = def quer...d"):

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/exploiting-active-directory-with-bloodhound/scripts/agent.pyView on unpkg · L68

dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.pyView file

85patternName = generic_password severity = medium line = 85 matchedText = def run_...3"):

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.py

dist/skills/anthropic-cybersecurity-skills/implementing-zero-knowledge-proof-for-authentication/scripts/agent.pyView on unpkg · L85

dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.pyView file

281patternName = generic_password severity = medium line = 281 matchedText = password...23!"

Medium

Secret Pattern

Hardcoded password in dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.py

dist/skills/anthropic-cybersecurity-skills/performing-cryptographic-audit-of-application/scripts/process.pyView on unpkg · L281

@pilllesss/yorn@1.0.189

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code