registry / @xylex-group/athena-auth-ui / 1.17.0

@xylex-group/athena-auth-ui@1.17.0

Athena Auth

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 512 KB of source, external domains: auth.athena-auth.com

Source & flagged code

9 flagged

dist/chunks/plugins-ixWNE48e.jsView file

Lines 4218-4258javascript

4218 pretty: !0,

4219 props: {

4220 appName: "Athena Auth",

4221 userName: "Ava"

4222 }

4223 },

4224 subjectTemplate: "Updated subject"

4225 },

4226 "admin.hasPermission": { permissions: ["admin:read"] },

4227 "admin.role.set": {

4228 role: "admin",

4229 userId: "user-id"

4230 },

4231 "admin.user.ban": {

4232 banReason: "policy-violation",

4233 userId: "user-id"

4234 },

4235 "admin.user.create": {

4236 email: "admin@example.com",

4237 name: "Admin User",

4238 password: "super-secret",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4238

4239 role: "admin"

4240 },

4241 "admin.user.impersonate": { userId: "user-id" },

4242 "admin.user.list": { query: { limit: 10 } },

4243 "admin.user.remove": { userId: "user-id" },

4244 "admin.user.session.list": { userId: "user-id" },

4245 "admin.user.session.revoke": {

4246 sessionToken: "session-token",

4247 userId: "user-id"

4248 },

4249 "admin.user.setPassword": {

4250 newPassword: "super-secret",

4251 userId: "user-id"

4252 },

4253 "admin.user.stopImpersonating": {},

4254 "admin.user.unban": { userId: "user-id" },

4255 "apiKey.create": {

4256 expiresIn: "3600",

4257 remaining: "1000"

4258 },

Lines 4304-4363javascript

4304 } },

4305 "passkey.deletePasskey": { id: "passkey-id" },

4306 "passkey.updatePasskey": {

4307 id: "passkey-id",

4308 name: "Updated passkey"

4309 },

4310 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4311 "passkey.verifyRegistration": {

4312 name: "Laptop Passkey",

4347patternName = generic_password severity = medium line = 4347 matchedText = "user.de..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4347

Source & flagged code

9 flagged · loading source

dist/chunks/plugins-ixWNE48e.jsView file

4238patternName = generic_password severity = medium line = 4238 matchedText = password...et",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4238

4324patternName = generic_password severity = medium line = 4324 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4324

4331patternName = generic_password severity = medium line = 4331 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4331

4337patternName = generic_password severity = medium line = 4337 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4337

4340patternName = generic_password severity = medium line = 4340 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4340

4341patternName = generic_password severity = medium line = 4341 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4341

4342patternName = generic_password severity = medium line = 4342 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4342

4343patternName = generic_password severity = medium line = 4343 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4343

4347patternName = generic_password severity = medium line = 4347 matchedText = "user.de..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4347

Findings

11 Medium3 Low

MediumSecret Patterndist/chunks/plugins-ixWNE48e.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/chunks/plugins-ixWNE48e.js

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/chunks/plugins-ixWNE48e.jsView file

Lines 4218-4258javascript

4218 pretty: !0,

4219 props: {

4220 appName: "Athena Auth",

4221 userName: "Ava"

4222 }

4223 },

4224 subjectTemplate: "Updated subject"

4225 },

4226 "admin.hasPermission": { permissions: ["admin:read"] },

4227 "admin.role.set": {

4228 role: "admin",

4229 userId: "user-id"

4230 },

4231 "admin.user.ban": {

4232 banReason: "policy-violation",

4233 userId: "user-id"

4234 },

4235 "admin.user.create": {

4236 email: "admin@example.com",

4237 name: "Admin User",

4238 password: "super-secret",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4238

4239 role: "admin"

4240 },

4241 "admin.user.impersonate": { userId: "user-id" },

4242 "admin.user.list": { query: { limit: 10 } },

4243 "admin.user.remove": { userId: "user-id" },

4244 "admin.user.session.list": { userId: "user-id" },

4245 "admin.user.session.revoke": {

4246 sessionToken: "session-token",

4247 userId: "user-id"

4248 },

4249 "admin.user.setPassword": {

4250 newPassword: "super-secret",

4251 userId: "user-id"

4252 },

4253 "admin.user.stopImpersonating": {},

4254 "admin.user.unban": { userId: "user-id" },

4255 "apiKey.create": {

4256 expiresIn: "3600",

4257 remaining: "1000"

4258 },

Lines 4304-4363javascript

4304 } },

4305 "passkey.deletePasskey": { id: "passkey-id" },

4306 "passkey.updatePasskey": {

4307 id: "passkey-id",

4308 name: "Updated passkey"

4309 },

4310 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4311 "passkey.verifyRegistration": {

4312 name: "Laptop Passkey",

4347patternName = generic_password severity = medium line = 4347 matchedText = "user.de..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4347