registry / @prescient-devices-oss/node-red-contrib-fileinput / 1.2.0

@prescient-devices-oss/node-red-contrib-fileinput@1.2.0

Asks user to select a file from the browser's file sytem and then emits its contents as a message or messages if the streaming option is selected

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 7.78 KB of source

Source & flagged code

1 flagged

test/fileinput_spec.jsView file

Lines 135-175javascript

135 "install",

136 "--production",

137 "--prefix",

138 path.resolve(testDir),

139 path.resolve(__dirname, ".."),

140 ])

141 let settings = {}

142 const settingsFile = path.resolve(testDir, "settings.js")

143 if (fs.existsSync(settingsFile)) {

144 settings = require(settingsFile)

145 }

146 settings.editorTheme = settings.editorTheme || {}

147 settings.editorTheme.tours = false

148 settings.flowFile = "flows.json"

149 if (readOnly) {

150 settings.adminAuth = {

151 type: "credentials",

152 users: [

153 {

154 username: "admin",

155 password: "$2b$08$v/98KrBPLWFtFc6FyzHuNuspzrQ6PZktnT2SYgTDJECpibZAk8YC6",

Medium

Secret Pattern

Package contains a possible secret pattern.

test/fileinput_spec.jsView on unpkg · L155

156 permissions: ["read"],

157 },

158 ],

159 }

160 }

161 const data = `module.exports = ${JSON.stringify(settings, null, 2)}`

162 fs.writeFileSync(settingsFile, data)

163 let cmdEnv = Object.assign(clone(process.env), env || {})

164 execObj = spawn(nodeRedBin, [`--userDir=${testDir}`], { env: cmdEnv })

165 stdout = ""

166 execObj.stdout.on("data", function (data) {

167 stdout += data.toString()

168 debug && console.log(data.toString().trimEnd())

169 if (stdout.includes("Started flows")) {

170 return resolve()

171 }

172 })

173 execObj.stderr.on("data", function (data) {

174 debug && console.log(data.toString().trim())

175 })

Source & flagged code

1 flagged · loading source

test/fileinput_spec.jsView file

155patternName = generic_password severity = medium line = 155 matchedText = password...C6",

Medium

Secret Pattern

Package contains a possible secret pattern.

test/fileinput_spec.jsView on unpkg · L155

Findings

2 Medium1 Low

MediumSecret Patterntest/fileinput_spec.js

MediumEnvironment Vars

LowScripts Present

Source & flagged code

1 flagged

test/fileinput_spec.jsView file

Lines 135-175javascript

135 "install",

136 "--production",

137 "--prefix",

138 path.resolve(testDir),

139 path.resolve(__dirname, ".."),

140 ])

141 let settings = {}

142 const settingsFile = path.resolve(testDir, "settings.js")

143 if (fs.existsSync(settingsFile)) {

144 settings = require(settingsFile)

145 }

146 settings.editorTheme = settings.editorTheme || {}

147 settings.editorTheme.tours = false

148 settings.flowFile = "flows.json"

149 if (readOnly) {

150 settings.adminAuth = {

151 type: "credentials",

152 users: [

153 {

154 username: "admin",

155 password: "$2b$08$v/98KrBPLWFtFc6FyzHuNuspzrQ6PZktnT2SYgTDJECpibZAk8YC6",

Medium

Secret Pattern

Package contains a possible secret pattern.

test/fileinput_spec.jsView on unpkg · L155

156 permissions: ["read"],

157 },

158 ],

159 }

160 }

161 const data = `module.exports = ${JSON.stringify(settings, null, 2)}`

162 fs.writeFileSync(settingsFile, data)

163 let cmdEnv = Object.assign(clone(process.env), env || {})

164 execObj = spawn(nodeRedBin, [`--userDir=${testDir}`], { env: cmdEnv })

165 stdout = ""

166 execObj.stdout.on("data", function (data) {

167 stdout += data.toString()

168 debug && console.log(data.toString().trimEnd())

169 if (stdout.includes("Started flows")) {

170 return resolve()

171 }

172 })

173 execObj.stderr.on("data", function (data) {

174 debug && console.log(data.toString().trim())

175 })