registry  /  @regulaforensics/idv  /  3.8.130

@regulaforensics/idv@3.8.130

This is an npm module for Regula IDV, which unifies access to all Regula products. This plugin makes possible to use it with react-native, cordova and capacitor applications. Supports Android and iOS.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetworkShell
Supply chain
UrlStrings
ManifestNo manifest risk signals triggered.
scanned 38 file(s), 73.2 KB of source, external domains: github.com, idv.regula.app, maven.regulaforensics.com

Source & flagged code

7 flagged · loading source
examples/ionic/src/main.tsxView file
8patternName = generic_password severity = medium line = 8 matchedText = const pa...der"
Medium
Secret Pattern

Package contains a possible secret pattern.

examples/ionic/src/main.tsxView on unpkg · L8
examples/ionic/scripts/setup.shView file
•path = examples/ionic/scripts/setup.sh kind = build_helper sizeBytes = 123 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

examples/ionic/scripts/setup.shView on unpkg
examples/capacitor/android/gradle/wrapper/gradle-wrapper.jarView file
•path = [redacted]-wrapper.jar kind = high_entropy_blob sizeBytes = 43764 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

examples/capacitor/android/gradle/wrapper/gradle-wrapper.jarView on unpkg
•path = [redacted]-wrapper.jar kind = compressed_blob sizeBytes = 43764 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

examples/capacitor/android/gradle/wrapper/gradle-wrapper.jarView on unpkg
•path = [redacted]-wrapper.jar kind = nested_archive_needs_inspection sizeBytes = 43764 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

examples/capacitor/android/gradle/wrapper/gradle-wrapper.jarView on unpkg
examples/capacitor/src/main.tsxView file
8patternName = generic_password severity = medium line = 8 matchedText = const pa...der"
Medium
Secret Pattern

Hardcoded password in examples/capacitor/src/main.tsx

examples/capacitor/src/main.tsxView on unpkg · L8
examples/react_native/src/main.tsxView file
8patternName = generic_password severity = medium line = 8 matchedText = const pa...der"
Medium
Secret Pattern

Hardcoded password in examples/react_native/src/main.tsx

examples/react_native/src/main.tsxView on unpkg · L8

Findings

1 High7 Medium2 Low
HighShips High Entropy Blobexamples/capacitor/android/gradle/wrapper/gradle-wrapper.jar
MediumSecret Patternexamples/ionic/src/main.tsx
MediumNetwork
MediumShips Build Helperexamples/ionic/scripts/setup.sh
MediumShips Compressed Blobexamples/capacitor/android/gradle/wrapper/gradle-wrapper.jar
MediumStructural Risk Force Deep Review
MediumSecret Patternexamples/capacitor/src/main.tsx
MediumSecret Patternexamples/react_native/src/main.tsx
LowUrl Strings
LowNested Archive Needs Inspectionexamples/capacitor/android/gradle/wrapper/gradle-wrapper.jar