@profoundlogic/coderflow-server@0.12.142: Suspicious npm security

Loading npm security reports…

@profoundlogic/coderflow-server@0.12.142: Suspicious npm security | LPM Firewall

Source & flagged code

7 flagged

dist/web-ui/public/setup-password.jsView file

Lines 1-1javascript

1import{initTheme,mountThemeToggle}from'./theme.js';initTheme();const urlParams=new URLSearchParams(window['location']['search']),token=urlParams['get']('token'),loadingEl=document['getElementById']('loading'),setupContentEl=document['getElementById']('setup-content'),setupFormEl=document['getElementById']('setup-form'),setupMessageEl=document['getElementById']('setup-message'),userUsernameEl=document['getElementById']('user-username'),userNameEl=document['getElementById']('user-name'),passwordInput=document['getElementById']('password'),confirmPasswordInput=document['getElementById']('confirm- ...

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/web-ui/public/setup-password.jsView on unpkg · L1

Long lines were clipped for display.

dist/web-ui/public/vendor/tui-color-picker/2.2.8/tui-color-picker.min.jsView file

Lines 1-9javascript

1/*!

2 * TOAST UI Color Picker

3 * @version 2.2.8

4 * @author NHN Cloud FE Development Team <dl_javascript@nhn.com>

5 * @license MIT

6 */

7!function(t,e){"object"==typeof exports

dist/middleware/requirePermission.jsView file

Lines 1-1javascript

1(function(_0x53f18a,_0x76017c){const _0x1f03ff={_0x20d6fc:0x4d3,_0x2d1037:0x50c,_0x3856cd:0x5d1,_0x46f550:0x51b,_0x594704:0x573,_0x48de06:0x541,_0x3bb768:0x5a5,_0x5665c2:0x4db

dist/middleware/requireInit.jsView file

Lines 1-1javascript

1(function(_0x3e730a,_0x3c6543){const _0x5f44b5={_0x29b87a:'\x30\x78\x31\x62\x31',_0x5c72e9:'\x6c\x71\x33\x61',_0x3b1c26:'\x30\x78\x31\x65\x30',_0x22870f:'\x30\x78\x32\x32\x31'

dist/docs-publish/publish-docs.shView file

•path = dist/docs-publish/publish-docs.sh kind = build_helper sizeBytes = 9868 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/docs-publish/publish-docs.shView on unpkg

dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.jsView file

•path = dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.js kind = oversized_source_file sizeBytes = 2963890 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.jsView on unpkg

dist/routes/tasks.jsView file

•path = dist/routes/tasks.js kind = oversized_cli_entrypoint sizeBytes = 3918248 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/routes/tasks.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/web-ui/public/setup-password.jsView file

1patternName = generic_password severity = medium line = 1 matchedText = import{i...;});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/web-ui/public/setup-password.jsView on unpkg · L1

dist/web-ui/public/vendor/tui-color-picker/2.2.8/tui-color-picker.min.jsView file

8// @license RGB <-> HSV conversion utilities based off of http://www.cs.rit.edu/~ncs/color/t_convert.html L9: hexToRGB:function(t){return!!o.isValidRGB(t)&&(t=t.substring(1),[parseInt(t.substr(0,2),16),parseInt(t.substr(2,2),16),parseInt(t.substr(4,2),16)])},rgbToHEX:function(t,e,r){var n=...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web-ui/public/vendor/tui-color-picker/2.2.8/tui-color-picker.min.jsView on unpkg · L8

dist/middleware/requirePermission.jsView file

1(function(_0x53f18a,_0x76017c){const _0x1f03ff={_0x20d6fc:0x4d3,_0x2d1037:0x50c,_0x3856cd:0x5d1,_0x46f550:0x51b,_0x594704:0x573,_0x48de06:0x541,_0x3bb768:0x5a5,_0x5665c2:0x4db,_0x3...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/middleware/requirePermission.jsView on unpkg · L1

dist/middleware/requireInit.jsView file

1(function(_0x3e730a,_0x3c6543){const _0x5f44b5={_0x29b87a:'\x30\x78\x31\x62\x31',_0x5c72e9:'\x6c\x71\x33\x61',_0x3b1c26:'\x30\x78\x31\x65\x30',_0x22870f:'\x30\x78\x32\x32\x31',_0x4...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/middleware/requireInit.jsView on unpkg · L1

dist/docs-publish/publish-docs.shView file

•path = dist/docs-publish/publish-docs.sh kind = build_helper sizeBytes = 9868 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/docs-publish/publish-docs.shView on unpkg

dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.jsView file

•path = dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.js kind = oversized_source_file sizeBytes = 2963890 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.jsView on unpkg

dist/routes/tasks.jsView file

•path = dist/routes/tasks.js kind = oversized_cli_entrypoint sizeBytes = 3918248 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/routes/tasks.jsView on unpkg

Source & flagged code

7 flagged

dist/web-ui/public/setup-password.jsView file

Lines 1-1javascript

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/web-ui/public/setup-password.jsView on unpkg · L1

Long lines were clipped for display.

dist/web-ui/public/vendor/tui-color-picker/2.2.8/tui-color-picker.min.jsView file

Lines 1-9javascript

1/*!

2 * TOAST UI Color Picker

3 * @version 2.2.8

4 * @author NHN Cloud FE Development Team <dl_javascript@nhn.com>

5 * @license MIT

6 */

7!function(t,e){"object"==typeof exports

dist/middleware/requirePermission.jsView file

Lines 1-1javascript

1(function(_0x53f18a,_0x76017c){const _0x1f03ff={_0x20d6fc:0x4d3,_0x2d1037:0x50c,_0x3856cd:0x5d1,_0x46f550:0x51b,_0x594704:0x573,_0x48de06:0x541,_0x3bb768:0x5a5,_0x5665c2:0x4db

dist/middleware/requireInit.jsView file

Lines 1-1javascript

1(function(_0x3e730a,_0x3c6543){const _0x5f44b5={_0x29b87a:'\x30\x78\x31\x62\x31',_0x5c72e9:'\x6c\x71\x33\x61',_0x3b1c26:'\x30\x78\x31\x65\x30',_0x22870f:'\x30\x78\x32\x32\x31'

dist/docs-publish/publish-docs.shView file

•path = dist/docs-publish/publish-docs.sh kind = build_helper sizeBytes = 9868 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/docs-publish/publish-docs.shView on unpkg

dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.jsView file

•path = dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.js kind = oversized_source_file sizeBytes = 2963890 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/web-ui/public/vendor/mermaid/11.13.0/dist/mermaid.min.jsView on unpkg

dist/routes/tasks.jsView file

•path = dist/routes/tasks.js kind = oversized_cli_entrypoint sizeBytes = 3918248 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/routes/tasks.jsView on unpkg

@profoundlogic/coderflow-server@0.12.142

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code