registry  /  @tinycloud/cli  /  0.7.1

@tinycloud/cli@0.7.1

TinyCloud CLI - manage data, delegations, and nodes from the terminal

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket
Supply chain
HighEntropyStringsTelemetryUrlStrings
Manifest
CopyleftLicense
scanned 7 file(s), 2.07 MB of source, external domains: 127.0.0.1, 4byte.sourcify.dev, abitype.dev, account.tinycloud.xyz, api-goerli-optimistic.etherscan.io, api-goerli.arbiscan.io, api-goerli.etherscan.io, api-optimistic.etherscan.io, api-sepolia.etherscan.io, api-testnet.polygonscan.com, api.arbiscan.io, api.etherscan.io, api.polygonscan.com, app.example.com, cloudflare-eth.com, docs.ethers.io, docs.soliditylang.org, docs.tinycloud.xyz, eips.ethereum.org, en.wikipedia.org, ethereum.api.nodesmith.io, gateway.ipfs.io, github.com, links.ethers.org, node.tinycloud.xyz, openkey.cloud, openkey.so, oxlib.sh, registry.npmjs.org, secrets.tinycloud.xyz, viem.sh, www.ethercluster.com

Source & flagged code

2 flagged · loading source
dist/index.jsView file
24398patternName = generic_password severity = medium line = 24398 matchedText = logger28... });
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L24398
1096"use strict;"; L1097: var { Buffer: Buffer6 } = __require("buffer"); L1098: var NON_SHORTEST = 4294967292;
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1096

Findings

4 Medium6 Low
MediumSecret Patterndist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowCopyleft License