registry  /  @teafail/musiclib  /  0.0.18

@teafail/musiclib@0.0.18

Music library

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chain
HighEntropyStrings
ManifestNo manifest risk signals triggered.
scanned 39 file(s), 60.0 KB of source

Source & flagged code

2 flagged · loading source
package.jsonView file
14patternName = npm_token severity = critical line = 14 matchedText = "release...lic"
Critical
Critical Secret

Package contains a critical-looking secret pattern.

package.jsonView on unpkg · L14
14patternName = npm_token severity = critical line = 14 matchedText = "release...lic"
Critical
Secret Pattern

npm access token in package.json

package.jsonView on unpkg · L14

Findings

2 Critical2 Low
CriticalCritical Secretpackage.json
CriticalSecret Patternpackage.json
LowScripts Present
LowHigh Entropy Strings