registry / @tinycloud/node-sdk / 2.9.0

@tinycloud/node-sdk@2.9.0

TinyCloud SDK for Node.js with configurable authorization strategies

Static Scan Results

scanned 19h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 4 file(s), 2.14 MB of source, external domains: links.ethers.org, node.tinycloud.xyz

Source & flagged code

3 flagged

dist/index.jsView file

16352patternName = generic_password severity = medium line = 16352 matchedText = logger28... });

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L16352

dist/core.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tinycloud/node-sdk@2.8.0 matchedIdentity = npm:QHRpbnljbG91ZC9ub2RlLXNkaw:2.8.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/core.cjsView on unpkg

dist/index.cjsView file

16347patternName = generic_password severity = medium line = 16347 matchedText = logger28... });

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L16347

Source & flagged code

3 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code