registry  /  @tapni/auth  /  1.0.80

@tapni/auth@1.0.80

⚠ Under review

This template should help get you started developing with Vue 3 in Vite.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 50 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 48 file(s), 2.22 MB of source, external domains: 169.254.169.254, aka.ms, api.tapni.com, apis.google.com, appleid.cdn-apple.com, apps.apple.com, auth.tapni.co, auth.tapni.com, azuread.github.io, bigeye-dev.tapni.com, bigeye.tapni.com, business-dev.tapni.com, business.tapni.com, cdn.tapni.co, designer-dev.tapni.com, designer.tapni.com, dev.mailsign.link, dev.tapni.co, dev.tapni.com, docs.microsoft.com, github.com, graph.microsoft.com, login.chinacloudapi.cn, login.microsoftonline.com, login.microsoftonline.de, login.microsoftonline.us, login.partner.microsoftonline.cn, login.windows-ppe.net, mailsign.link, microsoftgraph.chinacloudapi.cn, my.tapni.co, my.tapni.com, pas.chinacloudapi.cn, pas.windows.net, pasff.usgovcloudapi.net, play.google.com, qr.tapni.com, qrcodetoolkit.com, sign.tapni.com, status.tapni.co, t.link, tapni.co, tapni.com, tools.ietf.org, www.google.com, www.w3.org

Source & flagged code

43 flagged · loading source
dist/install-bp23KlS0.jsView file
5import Se from "await-to-js"; L6: import po from "axios"; L7: import { jwtDecode as ai } from "jwt-decode"; ... L133: for (var Mn = 0, ua = qr.length; Mn < ua; ++Mn) L134: Yt[Mn] = qr[Mn], Nt[qr.charCodeAt(Mn)] = Mn; L135: Nt[45] = 62; ... L309: let h = f(s); L310: const m = h.write(d, a); L311: return m !== s && (h = h.slice(0, m)), h; ... L1705: profile_public_message: "Your profile is now public", L1706: profile_private_message: "Your profile is now private", L1707: redirect_enabled: "Auto-redirect Link enabled",
Critical
Browser Credential Phishing

Source appears to collect browser login credentials for exfiltration.

dist/install-bp23KlS0.jsView on unpkg · L5
5import Se from "await-to-js"; L6: import po from "axios"; L7: import { jwtDecode as ai } from "jwt-decode"; ... L133: for (var Mn = 0, ua = qr.length; Mn < ua; ++Mn) L134: Yt[Mn] = qr[Mn], Nt[qr.charCodeAt(Mn)] = Mn; L135: Nt[45] = 62; ... L309: let h = f(s); L310: const m = h.write(d, a); L311: return m !== s && (h = h.slice(0, m)), h; ... L1705: profile_public_message: "Your profile is now public", L1706: profile_private_message: "Your profile is now private", L1707: redirect_enabled: "Auto-redirect Link enabled",
High
Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/install-bp23KlS0.jsView on unpkg · L5
1602patternName = generic_password severity = medium line = 1602 matchedText = profile_...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/install-bp23KlS0.jsView on unpkg · L1602
1782patternName = generic_password severity = medium line = 1782 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L1782
1797patternName = generic_password severity = medium line = 1797 matchedText = reset_pa...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L1797
1975patternName = generic_password severity = medium line = 1975 matchedText = change_p...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L1975
2098patternName = generic_password severity = medium line = 2098 matchedText = profile_...rn",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2098
2278patternName = generic_password severity = medium line = 2278 matchedText = password...rt",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2278
2293patternName = generic_password severity = medium line = 2293 matchedText = reset_pa...en",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2293
2471patternName = generic_password severity = medium line = 2471 matchedText = change_p...rn",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2471
2594patternName = generic_password severity = medium line = 2594 matchedText = profile_...ña",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2594
2774patternName = generic_password severity = medium line = 2774 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2774
2789patternName = generic_password severity = medium line = 2789 matchedText = reset_pa...ña",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2789
2967patternName = generic_password severity = medium line = 2967 matchedText = change_p...ña",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L2967
3090patternName = generic_password severity = medium line = 3090 matchedText = profile_...se",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3090
3272patternName = generic_password severity = medium line = 3272 matchedText = password...se",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3272
3287patternName = generic_password severity = medium line = 3287 matchedText = reset_pa...se",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3287
3465patternName = generic_password severity = medium line = 3465 matchedText = change_p...se",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3465
3585patternName = generic_password severity = medium line = 3585 matchedText = profile_...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3585
3765patternName = generic_password severity = medium line = 3765 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3765
3780patternName = generic_password severity = medium line = 3780 matchedText = reset_pa...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3780
3958patternName = generic_password severity = medium line = 3958 matchedText = change_p...rd",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L3958
4079patternName = generic_password severity = medium line = 4079 matchedText = profile_...ku",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L4079
4268patternName = generic_password severity = medium line = 4268 matchedText = reset_pa...ru",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L4268
4446patternName = generic_password severity = medium line = 4446 matchedText = change_p...ku",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L4446
4570patternName = generic_password severity = medium line = 4570 matchedText = profile_...ir",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L4570
4763patternName = generic_password severity = medium line = 4763 matchedText = reset_pa...le",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L4763
4942patternName = generic_password severity = medium line = 4942 matchedText = change_p...ir",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L4942
5748patternName = generic_password severity = medium line = 5748 matchedText = reset_pa...설정",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L5748
6244patternName = generic_password severity = medium line = 6244 matchedText = reset_pa...ット",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L6244
6545patternName = generic_password severity = medium line = 6545 matchedText = profile_...ha",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L6545
6740patternName = generic_password severity = medium line = 6740 matchedText = reset_pa...ha",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L6740
6918patternName = generic_password severity = medium line = 6918 matchedText = change_p...ha",
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L6918
7969patternName = generic_password severity = medium line = 7969 matchedText = n.userna...rd";
Medium
Secret Pattern

Hardcoded password in dist/install-bp23KlS0.js

dist/install-bp23KlS0.jsView on unpkg · L7969
dist/TapniAuth.umd.jsView file
70contains invisible/control Unicode U+200B (zero width space) Condividili sul tuo sito Web e sui social media e guadagna mentre noi offriamo un'esperienza di connessione eccezionale.`,referral_p8:"Nota di pagamenti",referral_p9:"Paypal (Worldwide) e trasferimenti bancar
Critical
Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/TapniAuth.umd.jsView on unpkg · L70
1Trigger-reachable chain: manifest.main -> dist/TapniAuth.umd.js L1: (function(a,cn){typeof exports=="object"&&typeof module<"u"?module.exports=cn(require("vue"),require("vue-router"),require("await-to-js"),require("@capacitor/core"),require("jwt-de... L2: * The buffer module from node.js, for the browser. ... L5: * @license MIT L6: */(function(n){const e=Qn,t=kr,r=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;n.Buffer=u,n.SlowBuffer=q,n.INSPECT_MAX_BYTE... L7: so that we can know who you are. ... L14: Feel free to write us at `,completing_profile_subject:"Complete profile",share_profile:"Share profile",share_profile_p:"Others can scan this QR code <br> in order to see your profi... L15: you can pick yours `,activation_success:"Successfully connected tag. <br> You're all set!🥳",activation_success_message:"Successfully connected tag. You're all set!🥳",activation_err... L16: or if you have any questions,<br> ... L132: Promova nossa marca e ganhe 20% de comissão nas compras feitas com seu código de desconto ou link de indicação.`,referral_p7:`Após se registrar no Programa de Indicação da Tapni, v... L133: Compartilhe-os no se…
Critical
Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/TapniAuth.umd.jsView on unpkg · L1
10patternName = generic_password severity = medium line = 10 matchedText = you can ...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L10
19patternName = generic_password severity = medium line = 19 matchedText = Share th...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L19
23patternName = generic_password severity = medium line = 23 matchedText = können S...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L23
32patternName = generic_password severity = medium line = 32 matchedText = Teilen S...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L32
36patternName = generic_password severity = medium line = 36 matchedText = puedes r...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L36
45patternName = generic_password severity = medium line = 45 matchedText = Compárte...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L45
49patternName = generic_password severity = medium line = 49 matchedText = vous pou...<br>
Medium
Secret Pattern

Hardcoded password in dist/TapniAuth.umd.js

dist/TapniAuth.umd.jsView on unpkg · L49

Findings

3 Critical1 High41 Medium5 Low
CriticalBrowser Credential Phishingdist/install-bp23KlS0.js
CriticalTrojan Source Unicodedist/TapniAuth.umd.js
CriticalTrigger Reachable Dangerous Capabilitydist/TapniAuth.umd.js
HighCloud Metadata Accessdist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/install-bp23KlS0.js
MediumSecret Patterndist/TapniAuth.umd.js
MediumSecret Patterndist/TapniAuth.umd.js
MediumSecret Patterndist/TapniAuth.umd.js
MediumSecret Patterndist/TapniAuth.umd.js
MediumSecret Patterndist/TapniAuth.umd.js
MediumSecret Patterndist/TapniAuth.umd.js
MediumSecret Patterndist/TapniAuth.umd.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License