registry / @xylex-group/athena-auth-ui / 1.11.0

@xylex-group/athena-auth-ui@1.11.0

Athena Auth

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVars

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 431 KB of source, external domains: auth.athena-cluster.com

Source & flagged code

9 flagged

dist/chunks/plugins--cjKsnGR.jsView file

Lines 3974-4054javascript

3974 value: l,

3975 onChange: u,

3976 children: [/* @__PURE__ */ Z(H, { children: "Flow" }), /* @__PURE__ */ Z(V, { variant: "secondary" })]

3977 })

3978 ]

3979 }), /* @__PURE__ */ Z(ce, {

3980 ariaLabel: "Past emails",

3981 columns: v,

3982 emptyState: () => f ? "Loading past emails..." : "No email history",

3983 getRowKey: (e, t) => `${e.id ?? t.toString()}`,

3984 rows: _

3985 })]

3986 })

3987 });

3988}

3989//#endregion

3990//#region src/components/auth/workspace/sdk-method-catalog.ts

3991var Hr = /* @__PURE__ */ "getSession,signOut,forgetPassword,resetPassword,setPassword,verifyEmail,sendVerificationEmail,changeEmail,changeEmailVerify,deleteUserVerify,changePassword,user.update,user.delete,user.email.list,session.list,session.revoke,session.revokeOther,social.link,account.list,account.unlink,deleteUser.callback,refreshToken,getAccessToken,health,ok,error,twoFactor.getTotpUri,twoFactor.verifyTotp,twoFactor.sendOtp,twoFactor.verifyOtp,twoFactor.verifyBackupCode,twoFactor.generateBackupCodes,twoFactor.enable,twoFactor.disable,passkey.generateRegisterOptions,passkey.generateAuthen ...

3992 "signIn.email": {

3993 email: "demo@example.com",

3994 password: "super-secret"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L3994

3995 },

3996 "signIn.username": {

3997 username: "demo_user",

3998 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L3998

3999 },

4000 "signIn.social": {

4001 provider: "google",

4002 disableRedirect: !0

4003 },

4004 "signUp.email": {

4005 name: "Demo User",

4006 email: "demo@example.com",

4007 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4007

4008 },

4009 forgetPassword: { email: "demo@example.com" },

4010 resetPassword: {

4011 token: "reset-token",

4012 newPassword: "new-secret"

4013 },

4014 verifyEmail: { token: "verify-token" },

4015 sendVerificationEmail: { email: "demo@example.com" },

4016 changeEmail: { newEmail: "new-demo@example.com" },

4017 changePassword: {

4018 currentPassword: "old-secret",

4019 newPassword: "new-secret"

4020 },

4021 "user.update": { name: "Updated Demo" },

4022 "user.delete": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4022

4023 "session.revoke": { token: "session-token" },

4024 "social.link": { provider: "google" },

4025 "account.unlink": { providerId: "google" },

4026 refreshToken: { providerId: "google" },

4027 getAccessToken: { providerId: "google" },

4028 "twoFactor.getTotpUri": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4028

4029 "twoFactor.verifyTotp": { code: "123456" },

4030 "twoFactor.verifyOtp": { code: "123456" },

4031 "twoFactor.verifyBackupCode": { code: "backup-code" },

4032 "twoFactor.generateBackupCodes": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4032

4033 "twoFactor.enable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4033

4034 "twoFactor.disable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4034

4035 "passkey.verifyRegistration": {

4036 response: "webauthn-registration-response",

4037 name: "Laptop Passkey"

4038 },

4039 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4040 "passkey.deletePasskey": { id: "passkey-id" },

4041 "passkey.updatePasskey": {

4042 id: "passkey-id",

4043 name: "Updated passkey"

4044 },

4045 "admin.role.set": {

4046 userId: "user-id",

4047 role: "admin"

4048 },

4049 "admin.user.list": { query: { limit: 10 } },

4050 "admin.user.create": {

4051 name: "Admin User",

4052 email: "admin@example.com",

4053 password: "super-secret",

4054 role: "admin"

Long lines were clipped for display.

4053patternName = generic_password severity = medium line = 4053 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4053

Source & flagged code

9 flagged · loading source

dist/chunks/plugins--cjKsnGR.jsView file

3994patternName = generic_password severity = medium line = 3994 matchedText = password...ret"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L3994

3998patternName = generic_password severity = medium line = 3998 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L3998

4007patternName = generic_password severity = medium line = 4007 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4007

4022patternName = generic_password severity = medium line = 4022 matchedText = "user.de..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4022

4028patternName = generic_password severity = medium line = 4028 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4028

4032patternName = generic_password severity = medium line = 4032 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4032

4033patternName = generic_password severity = medium line = 4033 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4033

4034patternName = generic_password severity = medium line = 4034 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4034

4053patternName = generic_password severity = medium line = 4053 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4053

Findings

10 Medium3 Low

MediumSecret Patterndist/chunks/plugins--cjKsnGR.js

MediumEnvironment Vars

MediumSecret Patterndist/chunks/plugins--cjKsnGR.js

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/chunks/plugins--cjKsnGR.jsView file

Lines 3974-4054javascript

3974 value: l,

3975 onChange: u,

3976 children: [/* @__PURE__ */ Z(H, { children: "Flow" }), /* @__PURE__ */ Z(V, { variant: "secondary" })]

3977 })

3978 ]

3979 }), /* @__PURE__ */ Z(ce, {

3980 ariaLabel: "Past emails",

3981 columns: v,

3982 emptyState: () => f ? "Loading past emails..." : "No email history",

3983 getRowKey: (e, t) => `${e.id ?? t.toString()}`,

3984 rows: _

3985 })]

3986 })

3987 });

3988}

3989//#endregion

3990//#region src/components/auth/workspace/sdk-method-catalog.ts

3992 "signIn.email": {

3993 email: "demo@example.com",

3994 password: "super-secret"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L3994

3995 },

3996 "signIn.username": {

3997 username: "demo_user",

3998 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L3998

3999 },

4000 "signIn.social": {

4001 provider: "google",

4002 disableRedirect: !0

4003 },

4004 "signUp.email": {

4005 name: "Demo User",

4006 email: "demo@example.com",

4007 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4007

4008 },

4009 forgetPassword: { email: "demo@example.com" },

4010 resetPassword: {

4011 token: "reset-token",

4012 newPassword: "new-secret"

4013 },

4014 verifyEmail: { token: "verify-token" },

4015 sendVerificationEmail: { email: "demo@example.com" },

4016 changeEmail: { newEmail: "new-demo@example.com" },

4017 changePassword: {

4018 currentPassword: "old-secret",

4019 newPassword: "new-secret"

4020 },

4021 "user.update": { name: "Updated Demo" },

4022 "user.delete": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4022

4023 "session.revoke": { token: "session-token" },

4024 "social.link": { provider: "google" },

4025 "account.unlink": { providerId: "google" },

4026 refreshToken: { providerId: "google" },

4027 getAccessToken: { providerId: "google" },

4028 "twoFactor.getTotpUri": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4028

4029 "twoFactor.verifyTotp": { code: "123456" },

4030 "twoFactor.verifyOtp": { code: "123456" },

4031 "twoFactor.verifyBackupCode": { code: "backup-code" },

4032 "twoFactor.generateBackupCodes": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4032

4033 "twoFactor.enable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4033

4034 "twoFactor.disable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4034

4035 "passkey.verifyRegistration": {

4036 response: "webauthn-registration-response",

4037 name: "Laptop Passkey"

4038 },

4039 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4040 "passkey.deletePasskey": { id: "passkey-id" },

4041 "passkey.updatePasskey": {

4042 id: "passkey-id",

4043 name: "Updated passkey"

4044 },

4045 "admin.role.set": {

4046 userId: "user-id",

4047 role: "admin"

4048 },

4049 "admin.user.list": { query: { limit: 10 } },

4050 "admin.user.create": {

4051 name: "Admin User",

4052 email: "admin@example.com",

4053 password: "super-secret",

4054 role: "admin"

Long lines were clipped for display.

4053patternName = generic_password severity = medium line = 4053 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins--cjKsnGR.js

dist/chunks/plugins--cjKsnGR.jsView on unpkg · L4053