@podosoft/podokit: Suspicious npm security report (Warn)

Loading npm security reports…

@podosoft/podokit: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

44 flagged

dist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjsView file

Lines 79-119javascript

79 if (user.signupApproved !== true) {

80 throw new Error("The administrator account is not approved; no changes were made.");

81 }

82 if (user.emailVerified !== true) {

83 throw new Error("The administrator email is not verified; no changes were made.");

84 }

85 if (!user.passwordHash || !(await dependencies.verifyPassword(user.passwordHash, input.password))) {

86 throw new Error("The administrator account already exists but the supplied password does not match; no changes were made.");

87 }

88}

90export async function bootstrapAdmin(dependencies, input, options = {}) {

91 const existing = await dependencies.findUser(input.email);

93 if (options.dryRun) {

94 return {

95 status: "planned",

96 action: existing ? "verify" : "create",

97 email: input.email,

98 name: input.name,

99 password: "<redacted>",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjsView on unpkg · L99

100 };

101 }

102

103 if (existing) {

104 await verifyExisting(dependencies, input, existing);

105 return { status: "existing", email: input.email };

106 }

107

108 if (options.checkOnly) {

109 throw new Error("The administrator account does not exist; no changes were made.");

110 }

111

112 await dependencies.createUser({

113 email: input.email,

114 password: input.password,

115 name: input.name,

116 role: "admin",

117 data: { emailVerified: true, signupApproved: true },

118 });

119

dist/templates/modules/sse/files/tests/api/events.api.spec.tsView file

Lines 1-29typescript

1import { expect, test } from "@playwright/test";

3const base = process.env.E2E_BASE_URL ?? "http://localhost:5001";

4const origin =

dist/templates/modules/redis/files/tests/api/redis.api.spec.tsView file

Lines 1-31typescript

1import { expect, test } from "@playwright/test";

3const base = process.env.E2E_BASE_URL ?? "http://localhost:5001";

4const origin

dist/templates/modules/object-storage-s3/files/tests/api/storage.api.spec.tsView file

Lines 1-29typescript

1import { expect, test } from "@playwright/test";

3const base = process.env.E2E_BASE_URL ?? "http://localhost:5001";

4const origin

dist/templates/modules/admin-dashboard/files/tests/ui/users.ui.spec.tsView file

Lines 39-79typescript

40test("user list shows the joined column @smoke", async ({ page }) => {

41 await ready(page, "/admin/users");

42 await expect(page.

dist/templates/modules/admin-dashboard/files/tests/ui/login-methods.ui.spec.tsView file

Lines 10-42typescript

11test("login: magic link shows a sent confirmation @smoke", async ({ page, playwright }) => {

12 const api = await playwright.request.newContext({ baseURL: base, extraHTTPHeaders: origin });

dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.tsView file

Lines 42-120typescript

42 // Switch to the backup-code input.

43 await page.getByRole("button", { name: "Use a backup code instead" }).click();

45 // A wrong code surfaces a localized, mapped message — not better-auth's raw

46 // English string ("Invalid backup code").

dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.tsView file

16patternName = generic_password severity = medium line = 16 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.tsView on unpkg · L16

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView file

11patternName = generic_password severity = medium line = 11 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L11

99patternName = generic_password severity = medium line = 99 matchedText = expect((...y();

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L99

128patternName = generic_password severity = medium line = 128 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L128

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView file

26patternName = generic_password severity = medium line = 26 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView on unpkg · L26

44patternName = generic_password severity = medium line = 44 matchedText = await pa... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView on unpkg · L44

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView file

21patternName = generic_password severity = medium line = 21 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L21

34patternName = generic_password severity = medium line = 34 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L34

46patternName = generic_password severity = medium line = 46 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L46

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView file

80patternName = generic_password severity = medium line = 80 matchedText = await us... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L80

89patternName = generic_password severity = medium line = 89 matchedText = const pa...pw";

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L89

168patternName = generic_password severity = medium line = 168 matchedText = const pa...pw";

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L168

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView file

24patternName = generic_password severity = medium line = 24 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L24

54patternName = generic_password severity = medium line = 54 matchedText = await ad... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L54

72patternName = generic_password severity = medium line = 72 matchedText = (await (...ing;

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L72

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView file

13patternName = generic_password severity = medium line = 13 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L13

60patternName = generic_password severity = medium line = 60 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L60

82patternName = generic_password severity = medium line = 82 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L82

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView file

22patternName = generic_password severity = medium line = 22 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L22

35patternName = generic_password severity = medium line = 35 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L35

249patternName = generic_password severity = medium line = 249 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L249

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView file

2patternName = generic_password severity = medium line = 2 matchedText = export c..." };

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView on unpkg · L2

3patternName = generic_password severity = medium line = 3 matchedText = export c..." };

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView on unpkg · L3

dist/templates/modules/job-progress/files/tests/api/progress.api.spec.tsView file

9patternName = generic_password severity = medium line = 9 matchedText = await ct...ed);

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/job-progress/files/tests/api/progress.api.spec.ts

dist/templates/modules/job-progress/files/tests/api/progress.api.spec.tsView on unpkg · L9

Source & flagged code

44 flagged · loading source

dist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjsView file

99patternName = generic_password severity = medium line = 99 matchedText = password...d>",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjsView on unpkg · L99

dist/templates/modules/sse/files/tests/api/events.api.spec.tsView file

9patternName = generic_password severity = medium line = 9 matchedText = await ct...ed);

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/sse/files/tests/api/events.api.spec.ts

dist/templates/modules/sse/files/tests/api/events.api.spec.tsView on unpkg · L9

dist/templates/modules/redis/files/tests/api/redis.api.spec.tsView file

11patternName = generic_password severity = medium line = 11 matchedText = await ct...ed);

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/redis/files/tests/api/redis.api.spec.ts

dist/templates/modules/redis/files/tests/api/redis.api.spec.tsView on unpkg · L11

dist/templates/modules/object-storage-s3/files/tests/api/storage.api.spec.tsView file

9patternName = generic_password severity = medium line = 9 matchedText = await ct...ed);

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/object-storage-s3/files/tests/api/storage.api.spec.ts

dist/templates/modules/object-storage-s3/files/tests/api/storage.api.spec.tsView on unpkg · L9

dist/templates/modules/admin-dashboard/files/tests/ui/users.ui.spec.tsView file

59patternName = generic_password severity = medium line = 59 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users.ui.spec.tsView on unpkg · L59

dist/templates/modules/admin-dashboard/files/tests/ui/login-methods.ui.spec.tsView file

30patternName = generic_password severity = medium line = 30 matchedText = await ap... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/login-methods.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/login-methods.ui.spec.tsView on unpkg · L30

dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.tsView file

62patternName = generic_password severity = medium line = 62 matchedText = await ad... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.tsView on unpkg · L62

100patternName = generic_password severity = medium line = 100 matchedText = await pr... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.tsView on unpkg · L100

dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.tsView file

16patternName = generic_password severity = medium line = 16 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.tsView on unpkg · L16

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView file

11patternName = generic_password severity = medium line = 11 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L11

99patternName = generic_password severity = medium line = 99 matchedText = expect((...y();

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L99

128patternName = generic_password severity = medium line = 128 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L128

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView file

26patternName = generic_password severity = medium line = 26 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView on unpkg · L26

44patternName = generic_password severity = medium line = 44 matchedText = await pa... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView on unpkg · L44

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView file

21patternName = generic_password severity = medium line = 21 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L21

34patternName = generic_password severity = medium line = 34 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L34

46patternName = generic_password severity = medium line = 46 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L46

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView file

80patternName = generic_password severity = medium line = 80 matchedText = await us... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L80

89patternName = generic_password severity = medium line = 89 matchedText = const pa...pw";

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L89

168patternName = generic_password severity = medium line = 168 matchedText = const pa...pw";

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L168

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView file

24patternName = generic_password severity = medium line = 24 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L24

54patternName = generic_password severity = medium line = 54 matchedText = await ad... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L54

72patternName = generic_password severity = medium line = 72 matchedText = (await (...ing;

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L72

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView file

13patternName = generic_password severity = medium line = 13 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L13

60patternName = generic_password severity = medium line = 60 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L60

82patternName = generic_password severity = medium line = 82 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L82

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView file

22patternName = generic_password severity = medium line = 22 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L22

35patternName = generic_password severity = medium line = 35 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L35

249patternName = generic_password severity = medium line = 249 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L249

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView file

2patternName = generic_password severity = medium line = 2 matchedText = export c..." };

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView on unpkg · L2

3patternName = generic_password severity = medium line = 3 matchedText = export c..." };

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView on unpkg · L3

dist/templates/modules/job-progress/files/tests/api/progress.api.spec.tsView file

9patternName = generic_password severity = medium line = 9 matchedText = await ct...ed);

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/job-progress/files/tests/api/progress.api.spec.ts

dist/templates/modules/job-progress/files/tests/api/progress.api.spec.tsView on unpkg · L9

Findings

46 Medium4 Low

MediumSecret Patterndist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjs

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/templates/modules/sse/files/tests/api/events.api.spec.ts

MediumSecret Patterndist/templates/modules/redis/files/tests/api/redis.api.spec.ts

MediumSecret Patterndist/templates/modules/object-storage-s3/files/tests/api/storage.api.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/ui/users.ui.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/ui/login-methods.ui.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

MediumSecret Patterndist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

MediumSecret Patterndist/templates/modules/job-progress/files/tests/api/progress.api.spec.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

44 flagged

dist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjsView file

Lines 79-119javascript

79 if (user.signupApproved !== true) {

80 throw new Error("The administrator account is not approved; no changes were made.");

81 }

82 if (user.emailVerified !== true) {

83 throw new Error("The administrator email is not verified; no changes were made.");

84 }

85 if (!user.passwordHash || !(await dependencies.verifyPassword(user.passwordHash, input.password))) {

86 throw new Error("The administrator account already exists but the supplied password does not match; no changes were made.");

87 }

88}

90export async function bootstrapAdmin(dependencies, input, options = {}) {

91 const existing = await dependencies.findUser(input.email);

93 if (options.dryRun) {

94 return {

95 status: "planned",

96 action: existing ? "verify" : "create",

97 email: input.email,

98 name: input.name,

99 password: "<redacted>",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/templates/modules/admin-dashboard/files/apps/api/scripts/bootstrap-admin.mjsView on unpkg · L99

100 };

101 }

102

103 if (existing) {

104 await verifyExisting(dependencies, input, existing);

105 return { status: "existing", email: input.email };

106 }

107

108 if (options.checkOnly) {

109 throw new Error("The administrator account does not exist; no changes were made.");

110 }

111

112 await dependencies.createUser({

113 email: input.email,

114 password: input.password,

115 name: input.name,

116 role: "admin",

117 data: { emailVerified: true, signupApproved: true },

118 });

119

dist/templates/modules/sse/files/tests/api/events.api.spec.tsView file

Lines 1-29typescript

1import { expect, test } from "@playwright/test";

3const base = process.env.E2E_BASE_URL ?? "http://localhost:5001";

4const origin =

dist/templates/modules/redis/files/tests/api/redis.api.spec.tsView file

Lines 1-31typescript

1import { expect, test } from "@playwright/test";

3const base = process.env.E2E_BASE_URL ?? "http://localhost:5001";

4const origin

dist/templates/modules/object-storage-s3/files/tests/api/storage.api.spec.tsView file

Lines 1-29typescript

1import { expect, test } from "@playwright/test";

3const base = process.env.E2E_BASE_URL ?? "http://localhost:5001";

4const origin

dist/templates/modules/admin-dashboard/files/tests/ui/users.ui.spec.tsView file

Lines 39-79typescript

40test("user list shows the joined column @smoke", async ({ page }) => {

41 await ready(page, "/admin/users");

42 await expect(page.

dist/templates/modules/admin-dashboard/files/tests/ui/login-methods.ui.spec.tsView file

Lines 10-42typescript

11test("login: magic link shows a sent confirmation @smoke", async ({ page, playwright }) => {

12 const api = await playwright.request.newContext({ baseURL: base, extraHTTPHeaders: origin });

dist/templates/modules/admin-dashboard/files/tests/ui/two-factor.ui.spec.tsView file

Lines 42-120typescript

42 // Switch to the backup-code input.

43 await page.getByRole("button", { name: "Use a backup code instead" }).click();

45 // A wrong code surfaces a localized, mapped message — not better-auth's raw

46 // English string ("Invalid backup code").

dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.tsView file

16patternName = generic_password severity = medium line = 16 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email.ui.spec.tsView on unpkg · L16

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView file

11patternName = generic_password severity = medium line = 11 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L11

99patternName = generic_password severity = medium line = 99 matchedText = expect((...y();

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L99

128patternName = generic_password severity = medium line = 128 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/users-crud.ui.spec.tsView on unpkg · L128

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView file

26patternName = generic_password severity = medium line = 26 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView on unpkg · L26

44patternName = generic_password severity = medium line = 44 matchedText = await pa... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.ts

dist/templates/modules/admin-dashboard/files/tests/ui/email-admin.ui.spec.tsView on unpkg · L44

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView file

21patternName = generic_password severity = medium line = 21 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L21

34patternName = generic_password severity = medium line = 34 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L34

46patternName = generic_password severity = medium line = 46 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/users-admin.api.spec.tsView on unpkg · L46

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView file

80patternName = generic_password severity = medium line = 80 matchedText = await us... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L80

89patternName = generic_password severity = medium line = 89 matchedText = const pa...pw";

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L89

168patternName = generic_password severity = medium line = 168 matchedText = const pa...pw";

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth-config.api.spec.tsView on unpkg · L168

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView file

24patternName = generic_password severity = medium line = 24 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L24

54patternName = generic_password severity = medium line = 54 matchedText = await ad... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L54

72patternName = generic_password severity = medium line = 72 matchedText = (await (...ing;

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/audit.api.spec.tsView on unpkg · L72

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView file

13patternName = generic_password severity = medium line = 13 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L13

60patternName = generic_password severity = medium line = 60 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L60

82patternName = generic_password severity = medium line = 82 matchedText = const si... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/email.api.spec.tsView on unpkg · L82

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView file

22patternName = generic_password severity = medium line = 22 matchedText = data: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L22

35patternName = generic_password severity = medium line = 35 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L35

249patternName = generic_password severity = medium line = 249 matchedText = await ct... });

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.ts

dist/templates/modules/admin-dashboard/files/tests/api/auth.api.spec.tsView on unpkg · L249

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView file

2patternName = generic_password severity = medium line = 2 matchedText = export c..." };

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView on unpkg · L2

3patternName = generic_password severity = medium line = 3 matchedText = export c..." };

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.ts

dist/templates/modules/admin-dashboard/files/tests/helpers/accounts.tsView on unpkg · L3

dist/templates/modules/job-progress/files/tests/api/progress.api.spec.tsView file

9patternName = generic_password severity = medium line = 9 matchedText = await ct...ed);

Medium

Secret Pattern

Hardcoded password in dist/templates/modules/job-progress/files/tests/api/progress.api.spec.ts

dist/templates/modules/job-progress/files/tests/api/progress.api.spec.tsView on unpkg · L9

@podosoft/podokit@0.12.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code