registry  /  @schukai/monster  /  4.148.0

@schukai/monster@4.148.0

Monster is a simple library for creating fast, robust and lightweight websites.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 49 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
CopyleftLicense
scanned 384 file(s), 6.29 MB of source, external domains: 2ality.com, www.w3.org

Source & flagged code

43 flagged · loading source
source/components/form/register-wizard.mjsView file
120patternName = generic_password severity = medium line = 120 matchedText = password...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

source/components/form/register-wizard.mjsView on unpkg · L120
1975patternName = generic_password severity = medium line = 1975 matchedText = password...rt",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L1975
2043patternName = generic_password severity = medium line = 2043 matchedText = password...na",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2043
2245patternName = generic_password severity = medium line = 2245 matchedText = password...্ড",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2245
2647patternName = generic_password severity = medium line = 2647 matchedText = password...se",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2647
2714patternName = generic_password severity = medium line = 2714 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2714
2781patternName = generic_password severity = medium line = 2781 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2781
2848patternName = generic_password severity = medium line = 2848 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2848
2982patternName = generic_password severity = medium line = 2982 matchedText = password...de",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L2982
3116patternName = generic_password severity = medium line = 3116 matchedText = password...na",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L3116
3250patternName = generic_password severity = medium line = 3250 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/register-wizard.mjs

source/components/form/register-wizard.mjsView on unpkg · L3250
source/components/form/select.mjsView file
1332filter = (m, v, k) => { L1333: const fkt = new Function("m", "v", "k", "control", code); L1334: return fkt(m, v, k, self);
Low
Eval

Package source references a known benign dynamic code generation pattern.

source/components/form/select.mjsView on unpkg · L1332
test/web/tests.jsView file
•path = test/web/tests.js kind = payload_in_excluded_dir sizeBytes = 13021571 magicHex = [redacted]
High
Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/web/tests.jsView on unpkg
•path = test/web/tests.js kind = oversized_source_file sizeBytes = 13021571 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

test/web/tests.jsView on unpkg
source/components/form/login.mjsView file
377patternName = generic_password severity = medium line = 377 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L377
613patternName = generic_password severity = medium line = 613 matchedText = password...rt",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L613
646patternName = generic_password severity = medium line = 646 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L646
923patternName = generic_password severity = medium line = 923 matchedText = password...se",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L923
956patternName = generic_password severity = medium line = 956 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L956
988patternName = generic_password severity = medium line = 988 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L988
1019patternName = generic_password severity = medium line = 1019 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L1019
1082patternName = generic_password severity = medium line = 1082 matchedText = password...de",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L1082
1174patternName = generic_password severity = medium line = 1174 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/login.mjs

source/components/form/login.mjsView on unpkg · L1174
source/components/form/credential-button.mjsView file
149patternName = generic_password severity = medium line = 149 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L149
156patternName = generic_password severity = medium line = 156 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L156
442patternName = generic_password severity = medium line = 442 matchedText = password...rt",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L442
456patternName = generic_password severity = medium line = 456 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L456
482patternName = generic_password severity = medium line = 482 matchedText = password...्ड",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L482
495patternName = generic_password severity = medium line = 495 matchedText = password...্ড",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L495
508patternName = generic_password severity = medium line = 508 matchedText = password...ha",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L508
521patternName = generic_password severity = medium line = 521 matchedText = password...ль",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L521
534patternName = generic_password severity = medium line = 534 matchedText = password...ード",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L534
547patternName = generic_password severity = medium line = 547 matchedText = password...ਰਡ",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L547
560patternName = generic_password severity = medium line = 560 matchedText = password...्ड",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L560
573patternName = generic_password severity = medium line = 573 matchedText = password...se",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L573
587patternName = generic_password severity = medium line = 587 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L587
600patternName = generic_password severity = medium line = 600 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L600
613patternName = generic_password severity = medium line = 613 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L613
626patternName = generic_password severity = medium line = 626 matchedText = password...ło",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L626
639patternName = generic_password severity = medium line = 639 matchedText = password...de",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L639
652patternName = generic_password severity = medium line = 652 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L652
665patternName = generic_password severity = medium line = 665 matchedText = password...lo",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L665
679patternName = generic_password severity = medium line = 679 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in source/components/form/credential-button.mjs

source/components/form/credential-button.mjsView on unpkg · L679

Findings

2 High43 Medium4 Low
HighPayload In Excluded Dirtest/web/tests.js
HighOversized Source Filetest/web/tests.js
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/register-wizard.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/login.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
MediumSecret Patternsource/components/form/credential-button.mjs
LowEvalsource/components/form/select.mjs
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License