Static Scan Results
scanned 42m ago · by rust-scannerStatic analysis flagged 29 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
NoLicense
Source & flagged code
21 flagged · loading sourcedoctor-UYMLO2DE.jsView file
4685patternName = stripe_live_secret
severity = critical
line = 4685
matchedText = "FAL_TOK...eLo"
Critical
Critical Secret
Package contains a critical-looking secret pattern.
doctor-UYMLO2DE.jsView on unpkg · L46854685patternName = stripe_live_secret
severity = critical
line = 4685
matchedText = "FAL_TOK...eLo"
Critical
4806patternName = github_oauth
severity = critical
line = 4806
matchedText = "GH_TOKE...f0",
Critical
Secret Pattern
GitHub OAuth access token in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L48064807patternName = github_oauth
severity = critical
line = 4807
matchedText = "GITHUB_...f0",
Critical
Secret Pattern
GitHub OAuth access token in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L48074808patternName = github_oauth
severity = critical
line = 4808
matchedText = "GITHUB_...Of0"
Critical
Secret Pattern
GitHub OAuth access token in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L48085724patternName = supabase_service_key
severity = critical
line = 5724
matchedText = "MONDAY_...oc",
Critical
Secret Pattern
Supabase service role key (JWT) in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L57245725patternName = supabase_service_key
severity = critical
line = 5725
matchedText = "MONDAY_...Loc"
Critical
Secret Pattern
Supabase service role key (JWT) in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L57256473patternName = sendgrid_api_key
severity = critical
line = 6473
matchedText = "SENDGRI...oca"
Critical
6576patternName = slack_bot_token
severity = critical
line = 6576
matchedText = "SLACK_A...af",
Critical
6577patternName = slack_bot_token
severity = critical
line = 6577
matchedText = "SLACK_T...Saf"
Critical
6603patternName = supabase_service_key
severity = critical
line = 6603
matchedText = "SLOCK_A...ff",
Critical
Secret Pattern
Supabase service role key (JWT) in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L66036605patternName = supabase_service_key
severity = critical
line = 6605
matchedText = "SLOCK_T...0ff"
Critical
Secret Pattern
Supabase service role key (JWT) in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L66056759patternName = stripe_live_secret
severity = critical
line = 6759
matchedText = "STRIPE_...ff",
Critical
6760patternName = stripe_live_secret
severity = critical
line = 6760
matchedText = "STRIPE_...off"
Critical
6942patternName = supabase_service_key
severity = critical
line = 6942
matchedText = "TWENTY_...eLo"
Critical
Secret Pattern
Supabase service role key (JWT) in doctor-UYMLO2DE.js
doctor-UYMLO2DE.jsView on unpkg · L69427068patternName = stripe_live_secret
severity = critical
line = 7068
matchedText = "WORKOS_...fee"
Critical
4255patternName = stripe_test_secret
severity = high
line = 4255
matchedText = "CLERK_T...eSa"
High
4792patternName = google_api_key
severity = high
line = 4792
matchedText = "GEMINI_...ffe"
High
esm-SRH3OR6L.jsView file
127break;
L128: baggage[keyPair.key] = keyPair.metadata ? { value: keyPair.value, metadata: keyPair.metadata } : { value: keyPair.value };
L129: count2++;
...
L378: function getNumberFromEnv(key) {
L379: const raw = process.env[key];
L380: if (raw == null || raw.trim() === "") {
...
L4436: for (let i = 0; i < namespace.length; i++) {
L4437: hash = (hash << 5) - hash + namespace.charCodeAt(i);
L4438: hash |= 0;
...
L4697: let m;
L4698: return typeof document !== "undefined" && document.documentElement && document.documentElement.style && document.documentElement.style.WebkitAppearance || // Is firebug? http://sta...
L4699: typeof window !== "undefined" && window.console && (window.console.firebug || window.console.exception && window.console.table) || // Is firefox >= v31?
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
esm-SRH3OR6L.jsView on unpkg · L12724683patternName = generic_password
severity = medium
line = 24683
matchedText = newUrl.p...d%";
Medium
index.jsView file
122};
L123: const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
L124: if (bypassSecret) {
...
L129: async function requestDeviceCode(apiUrl) {
L130: const response = await fetch(`${apiUrl}/api/cli/auth/device`, {
L131: method: "POST",
L132: headers: buildHeaders(),
L133: body: JSON.stringify({})
L134: });
...
L140: }
L141: return response.json();
L142: }
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
index.jsView on unpkg · L122Findings
16 Critical3 High5 Medium5 Low
CriticalCritical Secretdoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
CriticalSecret Patterndoctor-UYMLO2DE.js
HighSandbox Evasion Gated Capabilityindex.js
HighSecret Patterndoctor-UYMLO2DE.js
HighSecret Patterndoctor-UYMLO2DE.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceesm-SRH3OR6L.js
MediumStructural Risk Force Deep Review
MediumSecret Patternesm-SRH3OR6L.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License