registry  /  @pulumi/alicloud  /  3.105.0

@pulumi/alicloud@3.105.0

A Pulumi package for creating and managing AliCloud resources.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 50 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
EnvironmentVarsEval
Supply chainNo supply-chain packaging signals triggered.
ManifestNo manifest risk signals triggered.
scanned 2,088 file(s), 11.6 MB of source

Source & flagged code

48 flagged · loading source
cas/serviceCertificate.jsView file
77patternName = private_key_rsa severity = critical line = 77 matchedText = * ke...----
Critical
Critical Secret

Package contains a critical-looking secret pattern.

cas/serviceCertificate.jsView on unpkg · L77
77patternName = private_key_rsa severity = critical line = 77 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/serviceCertificate.js

cas/serviceCertificate.jsView on unpkg · L77
fc/function.jsView file
61static get(name, id, state, opts) { L62: return new Function(name, state, { ...opts, id: id }); L63: }
Low
Eval

Package source references a known benign dynamic code generation pattern.

fc/function.jsView on unpkg · L61
cas/certificate.jsView file
83patternName = private_key_rsa severity = critical line = 83 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/certificate.js

cas/certificate.jsView on unpkg · L83
cas/getServiceCertificates.jsView file
70patternName = private_key_rsa severity = critical line = 70 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/getServiceCertificates.js

cas/getServiceCertificates.jsView on unpkg · L70
158patternName = private_key_rsa severity = critical line = 158 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/getServiceCertificates.js

cas/getServiceCertificates.jsView on unpkg · L158
cas/serviceCertificate.d.tsView file
48patternName = private_key_rsa severity = critical line = 48 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/serviceCertificate.d.ts

cas/serviceCertificate.d.tsView on unpkg · L48
cas/certificate.d.tsView file
54patternName = private_key_rsa severity = critical line = 54 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/certificate.d.ts

cas/certificate.d.tsView on unpkg · L54
cas/getServiceCertificates.d.tsView file
42patternName = private_key_rsa severity = critical line = 42 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/getServiceCertificates.d.ts

cas/getServiceCertificates.d.tsView on unpkg · L42
175patternName = private_key_rsa severity = critical line = 175 matchedText = * ke...----
Critical
Secret Pattern

RSA private key in cas/getServiceCertificates.d.ts

cas/getServiceCertificates.d.tsView on unpkg · L175
alikafka/saslUser.d.tsView file
57patternName = generic_password severity = medium line = 57 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in alikafka/saslUser.d.ts

alikafka/saslUser.d.tsView on unpkg · L57
alikafka/saslAcl.jsView file
90patternName = generic_password severity = medium line = 90 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in alikafka/saslAcl.js

alikafka/saslAcl.jsView on unpkg · L90
alikafka/saslUser.jsView file
86patternName = generic_password severity = medium line = 86 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in alikafka/saslUser.js

alikafka/saslUser.jsView on unpkg · L86
alikafka/saslAcl.d.tsView file
61patternName = generic_password severity = medium line = 61 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in alikafka/saslAcl.d.ts

alikafka/saslAcl.d.tsView on unpkg · L61
gpdb/streamingJob.d.tsView file
74patternName = generic_password severity = medium line = 74 matchedText = * pa...01",
Medium
Secret Pattern

Hardcoded password in gpdb/streamingJob.d.ts

gpdb/streamingJob.d.tsView on unpkg · L74
gpdb/streamingJob.jsView file
103patternName = generic_password severity = medium line = 103 matchedText = * pa...01",
Medium
Secret Pattern

Hardcoded password in gpdb/streamingJob.js

gpdb/streamingJob.jsView on unpkg · L103
kms/clientKey.d.tsView file
26patternName = generic_password severity = medium line = 26 matchedText = * pa...3!",
Medium
Secret Pattern

Hardcoded password in kms/clientKey.d.ts

kms/clientKey.d.tsView on unpkg · L26
kms/clientKey.jsView file
55patternName = generic_password severity = medium line = 55 matchedText = * pa...3!",
Medium
Secret Pattern

Hardcoded password in kms/clientKey.js

kms/clientKey.jsView on unpkg · L55
simpleapplicationserver/disk.jsView file
55patternName = generic_password severity = medium line = 55 matchedText = * pa...Wj",
Medium
Secret Pattern

Hardcoded password in simpleapplicationserver/disk.js

simpleapplicationserver/disk.jsView on unpkg · L55
simpleapplicationserver/disk.d.tsView file
26patternName = generic_password severity = medium line = 26 matchedText = * pa...Wj",
Medium
Secret Pattern

Hardcoded password in simpleapplicationserver/disk.d.ts

simpleapplicationserver/disk.d.tsView on unpkg · L26
eds/getUsers.jsView file
48patternName = generic_password severity = medium line = 48 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getUsers.js

eds/getUsers.jsView on unpkg · L48
81patternName = generic_password severity = medium line = 81 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getUsers.js

eds/getUsers.jsView on unpkg · L81
eds/getDesktops.d.tsView file
46patternName = generic_password severity = medium line = 46 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getDesktops.d.ts

eds/getDesktops.d.tsView on unpkg · L46
162patternName = generic_password severity = medium line = 162 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getDesktops.d.ts

eds/getDesktops.d.tsView on unpkg · L162
eds/user.jsView file
50patternName = generic_password severity = medium line = 50 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in eds/user.js

eds/user.jsView on unpkg · L50
eds/getUsers.d.tsView file
20patternName = generic_password severity = medium line = 20 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getUsers.d.ts

eds/getUsers.d.tsView on unpkg · L20
74patternName = generic_password severity = medium line = 74 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getUsers.d.ts

eds/getUsers.d.tsView on unpkg · L74
eds/getDesktops.jsView file
74patternName = generic_password severity = medium line = 74 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getDesktops.js

eds/getDesktops.jsView on unpkg · L74
151patternName = generic_password severity = medium line = 151 matchedText = * pa...rd",
Medium
Secret Pattern

Hardcoded password in eds/getDesktops.js

eds/getDesktops.jsView on unpkg · L151
eds/user.d.tsView file
21patternName = generic_password severity = medium line = 21 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in eds/user.d.ts

eds/user.d.tsView on unpkg · L21
ens/instanceSecurityGroupAttachment.jsView file
58patternName = generic_password severity = medium line = 58 matchedText = * pa...bc",
Medium
Secret Pattern

Hardcoded password in ens/instanceSecurityGroupAttachment.js

ens/instanceSecurityGroupAttachment.jsView on unpkg · L58
ens/instanceSecurityGroupAttachment.d.tsView file
29patternName = generic_password severity = medium line = 29 matchedText = * pa...bc",
Medium
Secret Pattern

Hardcoded password in ens/instanceSecurityGroupAttachment.d.ts

ens/instanceSecurityGroupAttachment.d.tsView on unpkg · L29
ens/instance.jsView file
72patternName = generic_password severity = medium line = 72 matchedText = * pa...@@",
Medium
Secret Pattern

Hardcoded password in ens/instance.js

ens/instance.jsView on unpkg · L72
ens/instance.d.tsView file
45patternName = generic_password severity = medium line = 45 matchedText = * pa...@@",
Medium
Secret Pattern

Hardcoded password in ens/instance.d.ts

ens/instance.d.tsView on unpkg · L45
ens/diskInstanceAttachment.d.tsView file
32patternName = generic_password severity = medium line = 32 matchedText = * pa...bc",
Medium
Secret Pattern

Hardcoded password in ens/diskInstanceAttachment.d.ts

ens/diskInstanceAttachment.d.tsView on unpkg · L32
ens/image.jsView file
55patternName = generic_password severity = medium line = 55 matchedText = * pa...bc",
Medium
Secret Pattern

Hardcoded password in ens/image.js

ens/image.jsView on unpkg · L55
ens/diskInstanceAttachment.jsView file
61patternName = generic_password severity = medium line = 61 matchedText = * pa...bc",
Medium
Secret Pattern

Hardcoded password in ens/diskInstanceAttachment.js

ens/diskInstanceAttachment.jsView on unpkg · L61
ens/eipInstanceAttachment.jsView file
61patternName = generic_password severity = medium line = 61 matchedText = * pa...BC",
Medium
Secret Pattern

Hardcoded password in ens/eipInstanceAttachment.js

ens/eipInstanceAttachment.jsView on unpkg · L61
ens/eipInstanceAttachment.d.tsView file
32patternName = generic_password severity = medium line = 32 matchedText = * pa...BC",
Medium
Secret Pattern

Hardcoded password in ens/eipInstanceAttachment.d.ts

ens/eipInstanceAttachment.d.tsView on unpkg · L32
ens/image.d.tsView file
26patternName = generic_password severity = medium line = 26 matchedText = * pa...bc",
Medium
Secret Pattern

Hardcoded password in ens/image.d.ts

ens/image.d.tsView on unpkg · L26
ga/additionalCertificate.jsView file
103patternName = private_key_rsa severity = critical line = 103 matchedText = * ...----
Critical
Secret Pattern

RSA private key in ga/additionalCertificate.js

ga/additionalCertificate.jsView on unpkg · L103
ga/additionalCertificate.d.tsView file
74patternName = private_key_rsa severity = critical line = 74 matchedText = * ...----
Critical
Secret Pattern

RSA private key in ga/additionalCertificate.d.ts

ga/additionalCertificate.d.tsView on unpkg · L74
redis/backup.d.tsView file
55patternName = generic_password severity = medium line = 55 matchedText = * pa...tf",
Medium
Secret Pattern

Hardcoded password in redis/backup.d.ts

redis/backup.d.tsView on unpkg · L55
redis/backup.jsView file
84patternName = generic_password severity = medium line = 84 matchedText = * pa...tf",
Medium
Secret Pattern

Hardcoded password in redis/backup.js

redis/backup.jsView on unpkg · L84
ehpc/queue.jsView file
98patternName = generic_password severity = medium line = 98 matchedText = * ...23",
Medium
Secret Pattern

Hardcoded password in ehpc/queue.js

ehpc/queue.jsView on unpkg · L98
ehpc/queue.d.tsView file
71patternName = generic_password severity = medium line = 71 matchedText = * ...23",
Medium
Secret Pattern

Hardcoded password in ehpc/queue.d.ts

ehpc/queue.d.tsView on unpkg · L71
ehpc/cluster.d.tsView file
70patternName = generic_password severity = medium line = 70 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in ehpc/cluster.d.ts

ehpc/cluster.d.tsView on unpkg · L70
ehpc/cluster.jsView file
97patternName = generic_password severity = medium line = 97 matchedText = * pa...23",
Medium
Secret Pattern

Hardcoded password in ehpc/cluster.js

ehpc/cluster.jsView on unpkg · L97

Findings

11 Critical37 Medium2 Low
CriticalCritical Secretcas/serviceCertificate.js
CriticalSecret Patterncas/serviceCertificate.js
CriticalSecret Patterncas/certificate.js
CriticalSecret Patterncas/getServiceCertificates.js
CriticalSecret Patterncas/getServiceCertificates.js
CriticalSecret Patterncas/serviceCertificate.d.ts
CriticalSecret Patterncas/certificate.d.ts
CriticalSecret Patterncas/getServiceCertificates.d.ts
CriticalSecret Patterncas/getServiceCertificates.d.ts
CriticalSecret Patternga/additionalCertificate.js
CriticalSecret Patternga/additionalCertificate.d.ts
MediumEnvironment Vars
MediumSecret Patternalikafka/saslUser.d.ts
MediumSecret Patternalikafka/saslAcl.js
MediumSecret Patternalikafka/saslUser.js
MediumSecret Patternalikafka/saslAcl.d.ts
MediumSecret Patterngpdb/streamingJob.d.ts
MediumSecret Patterngpdb/streamingJob.js
MediumSecret Patternkms/clientKey.d.ts
MediumSecret Patternkms/clientKey.js
MediumSecret Patternsimpleapplicationserver/disk.js
MediumSecret Patternsimpleapplicationserver/disk.d.ts
MediumSecret Patterneds/getUsers.js
MediumSecret Patterneds/getUsers.js
MediumSecret Patterneds/getDesktops.d.ts
MediumSecret Patterneds/getDesktops.d.ts
MediumSecret Patterneds/user.js
MediumSecret Patterneds/getUsers.d.ts
MediumSecret Patterneds/getUsers.d.ts
MediumSecret Patterneds/getDesktops.js
MediumSecret Patterneds/getDesktops.js
MediumSecret Patterneds/user.d.ts
MediumSecret Patternens/instanceSecurityGroupAttachment.js
MediumSecret Patternens/instanceSecurityGroupAttachment.d.ts
MediumSecret Patternens/instance.js
MediumSecret Patternens/instance.d.ts
MediumSecret Patternens/diskInstanceAttachment.d.ts
MediumSecret Patternens/image.js
MediumSecret Patternens/diskInstanceAttachment.js
MediumSecret Patternens/eipInstanceAttachment.js
MediumSecret Patternens/eipInstanceAttachment.d.ts
MediumSecret Patternens/image.d.ts
MediumSecret Patternredis/backup.d.ts
MediumSecret Patternredis/backup.js
MediumSecret Patternehpc/queue.js
MediumSecret Patternehpc/queue.d.ts
MediumSecret Patternehpc/cluster.d.ts
MediumSecret Patternehpc/cluster.js
LowScripts Present
LowEvalfc/function.js