registry / @stackone/core / 3.9.0

@stackone/core@3.9.0

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Crypto

Supply chain

HighEntropyStringsMinifiedTrivial

Manifest

WildcardDependency

scanned 3 file(s), 130 KB of source

Source & flagged code

3 flagged

dist/index.cjsView file

Lines 1-3javascript

1Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});var e=Object.create,t=Object.defineProperty,__name=(e,n)=>t(e,`name`,{value:n,configurable:!0}),n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,__copyProps=(e,i,o,s)=>{if(i&&typeof i==`object`||typeof i==`function`)for(var c=r(i),l=0,u=c.length,d;l<u;l++)d=c[l],!a.call(e,d)&&d!==o&&t(e,d,{get:(e=>i[e]).bind(null,d),enumerable:!(s=n(i,d))||s.enumerable});return e},__toESM=(n,r,a)=>(a=n==null?{}:e(i(n)),__copyProps(r||!n||!n.__esModule?t(a,`default`,{value:n ...

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.cjsView on unpkg · L1

Critical

Secret Pattern

RSA private key in dist/index.cjs

dist/index.cjsView on unpkg · L1

2 ${n}

3 -----END PRIVATE KEY-----`)},de=o.z.object({baseUrl:o.z.string(),url:o.z.string(),method:o.z.enum(c.HttpMethods),saml:(0,o.zStrictObject)({objectKey:o.z.string(),key:o.z.string(),clientId:o.z.string(),cert:o.z.unknown().optional(),issuer:o.z.string().optional(),lifetime:o.z.number().optional(),nameId:o.z.string().optional(),audience:o.z.string().optional(),nameIdentifierFormat:o.z.string().optional(),tokenEndpoint:o.z.string().optional()}).optional(),response:(0,o.zStrictObject)({indexField:o.z.string().optional(),dataKey:o.z.string().optional(),nextKey:o.z.string().optional(),nextKeyI ...

Long lines were clipped for display.

dist/index.mjsView file

Lines 1-3javascript

1import{t as e}from"./chunk-BhWHdk3m.mjs";import{decodeFromBase64 as t,encodeToBase64 as n,getContentHash as r,getCountryAlpha2CodeByAlpha2Code as i,getCountryAlpha2CodeByAlpha3Code as a,getCountryAlpha2CodeByCitizenship as o,getCountryAlpha2CodeByCountryCode as s,getCountryAlpha2CodeByCountryName as c,getCountryAlpha3CodeByAlpha2Code as l,getCountryAlpha3CodeByAlpha3Code as u,getCountryAlpha3CodeByCountryCode as d,getCountryAlpha3CodeByCountryName as f,getCountryCodeByAlpha2Code as p,getCountryCodeByAlpha3Code as

Source & flagged code

3 flagged · loading source

dist/index.cjsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = Object.d...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.cjsView on unpkg · L1

1patternName = private_key_rsa severity = critical line = 1 matchedText = Object.d...----

Critical

Secret Pattern

RSA private key in dist/index.cjs

dist/index.cjsView on unpkg · L1

dist/index.mjsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = import{t...----

Critical

Secret Pattern

RSA private key in dist/index.mjs

dist/index.mjsView on unpkg · L1

Findings

3 Critical1 Medium2 Low

CriticalCritical Secretdist/index.cjs

CriticalSecret Patterndist/index.cjs

CriticalSecret Patterndist/index.mjs

MediumWildcard Dependency

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

3 flagged

dist/index.cjsView file

Lines 1-3javascript

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.cjsView on unpkg · L1

Critical

Secret Pattern

RSA private key in dist/index.cjs

dist/index.cjsView on unpkg · L1

2 ${n}

Long lines were clipped for display.

dist/index.mjsView file

Lines 1-3javascript