registry / @xylex-group/athena-auth-ui / 1.13.0

@xylex-group/athena-auth-ui@1.13.0

Athena Auth

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 443 KB of source, external domains: auth.athena-cluster.com

Source & flagged code

9 flagged

dist/chunks/plugins-CwCWFXq8.jsView file

Lines 3970-4050javascript

3970 getRowKey: (e, t) => `${e.id ?? t.toString()}`,

3971 rows: _,

3972 topRightActions: /* @__PURE__ */ Q("div", {

3973 className: "flex items-center gap-2",

3974 children: [/* @__PURE__ */ Z(B, {

3975 size: "sm",

3976 variant: "outline",

3977 onPress: () => void m(),

3978 children: "Refresh"

3979 }), p ? /* @__PURE__ */ Z(W, { size: "sm" }) : null]

3980 })

3981 })]

3982 })

3983 });

3984}

3985//#endregion

3986//#region src/components/auth/workspace/sdk-method-catalog.ts

3987var Hr = /* @__PURE__ */ "getSession,signOut,forgetPassword,resetPassword,setPassword,verifyEmail,sendVerificationEmail,changeEmail,changeEmailVerify,deleteUserVerify,changePassword,user.update,user.delete,user.email.list,session.list,session.revoke,session.revokeOther,social.link,account.list,account.unlink,deleteUser.callback,refreshToken,getAccessToken,health,ok,error,twoFactor.getTotpUri,twoFactor.verifyTotp,twoFactor.sendOtp,twoFactor.verifyOtp,twoFactor.verifyBackupCode,twoFactor.generateBackupCodes,twoFactor.enable,twoFactor.disable,passkey.generateRegisterOptions,passkey.generateAuthen ...

3988 "signIn.email": {

3989 email: "demo@example.com",

3990 password: "super-secret"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L3990

3991 },

3992 "signIn.username": {

3993 username: "demo_user",

3994 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L3994

3995 },

3996 "signIn.social": {

3997 provider: "google",

3998 disableRedirect: !0

3999 },

4000 "signUp.email": {

4001 name: "Demo User",

4002 email: "demo@example.com",

4003 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4003

4004 },

4005 forgetPassword: { email: "demo@example.com" },

4006 resetPassword: {

4007 token: "reset-token",

4008 newPassword: "new-secret"

4009 },

4010 verifyEmail: { token: "verify-token" },

4011 sendVerificationEmail: { email: "demo@example.com" },

4012 changeEmail: { newEmail: "new-demo@example.com" },

4013 changePassword: {

4014 currentPassword: "old-secret",

4015 newPassword: "new-secret"

4016 },

4017 "user.update": { name: "Updated Demo" },

4018 "user.delete": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4018

4019 "session.revoke": { token: "session-token" },

4020 "social.link": { provider: "google" },

4021 "account.unlink": { providerId: "google" },

4022 refreshToken: { providerId: "google" },

4023 getAccessToken: { providerId: "google" },

4024 "twoFactor.getTotpUri": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4024

4025 "twoFactor.verifyTotp": { code: "123456" },

4026 "twoFactor.verifyOtp": { code: "123456" },

4027 "twoFactor.verifyBackupCode": { code: "backup-code" },

4028 "twoFactor.generateBackupCodes": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4028

4029 "twoFactor.enable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4029

4030 "twoFactor.disable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4030

4031 "passkey.verifyRegistration": {

4032 response: "webauthn-registration-response",

4033 name: "Laptop Passkey"

4034 },

4035 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4036 "passkey.deletePasskey": { id: "passkey-id" },

4037 "passkey.updatePasskey": {

4038 id: "passkey-id",

4039 name: "Updated passkey"

4040 },

4041 "admin.role.set": {

4042 userId: "user-id",

4043 role: "admin"

4044 },

4045 "admin.user.list": { query: { limit: 10 } },

4046 "admin.user.create": {

4047 name: "Admin User",

4048 email: "admin@example.com",

4049 password: "super-secret",

4050 role: "admin"

Long lines were clipped for display.

4049patternName = generic_password severity = medium line = 4049 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4049

Source & flagged code

9 flagged · loading source

dist/chunks/plugins-CwCWFXq8.jsView file

3990patternName = generic_password severity = medium line = 3990 matchedText = password...ret"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L3990

3994patternName = generic_password severity = medium line = 3994 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L3994

4003patternName = generic_password severity = medium line = 4003 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4003

4018patternName = generic_password severity = medium line = 4018 matchedText = "user.de..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4018

4024patternName = generic_password severity = medium line = 4024 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4024

4028patternName = generic_password severity = medium line = 4028 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4028

4029patternName = generic_password severity = medium line = 4029 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4029

4030patternName = generic_password severity = medium line = 4030 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4030

4049patternName = generic_password severity = medium line = 4049 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4049

Findings

11 Medium3 Low

MediumSecret Patterndist/chunks/plugins-CwCWFXq8.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/chunks/plugins-CwCWFXq8.js

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/chunks/plugins-CwCWFXq8.jsView file

Lines 3970-4050javascript

3970 getRowKey: (e, t) => `${e.id ?? t.toString()}`,

3971 rows: _,

3972 topRightActions: /* @__PURE__ */ Q("div", {

3973 className: "flex items-center gap-2",

3974 children: [/* @__PURE__ */ Z(B, {

3975 size: "sm",

3976 variant: "outline",

3977 onPress: () => void m(),

3978 children: "Refresh"

3979 }), p ? /* @__PURE__ */ Z(W, { size: "sm" }) : null]

3980 })

3981 })]

3982 })

3983 });

3984}

3985//#endregion

3986//#region src/components/auth/workspace/sdk-method-catalog.ts

3988 "signIn.email": {

3989 email: "demo@example.com",

3990 password: "super-secret"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L3990

3991 },

3992 "signIn.username": {

3993 username: "demo_user",

3994 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L3994

3995 },

3996 "signIn.social": {

3997 provider: "google",

3998 disableRedirect: !0

3999 },

4000 "signUp.email": {

4001 name: "Demo User",

4002 email: "demo@example.com",

4003 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4003

4004 },

4005 forgetPassword: { email: "demo@example.com" },

4006 resetPassword: {

4007 token: "reset-token",

4008 newPassword: "new-secret"

4009 },

4010 verifyEmail: { token: "verify-token" },

4011 sendVerificationEmail: { email: "demo@example.com" },

4012 changeEmail: { newEmail: "new-demo@example.com" },

4013 changePassword: {

4014 currentPassword: "old-secret",

4015 newPassword: "new-secret"

4016 },

4017 "user.update": { name: "Updated Demo" },

4018 "user.delete": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4018

4019 "session.revoke": { token: "session-token" },

4020 "social.link": { provider: "google" },

4021 "account.unlink": { providerId: "google" },

4022 refreshToken: { providerId: "google" },

4023 getAccessToken: { providerId: "google" },

4024 "twoFactor.getTotpUri": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4024

4025 "twoFactor.verifyTotp": { code: "123456" },

4026 "twoFactor.verifyOtp": { code: "123456" },

4027 "twoFactor.verifyBackupCode": { code: "backup-code" },

4028 "twoFactor.generateBackupCodes": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4028

4029 "twoFactor.enable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4029

4030 "twoFactor.disable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4030

4031 "passkey.verifyRegistration": {

4032 response: "webauthn-registration-response",

4033 name: "Laptop Passkey"

4034 },

4035 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4036 "passkey.deletePasskey": { id: "passkey-id" },

4037 "passkey.updatePasskey": {

4038 id: "passkey-id",

4039 name: "Updated passkey"

4040 },

4041 "admin.role.set": {

4042 userId: "user-id",

4043 role: "admin"

4044 },

4045 "admin.user.list": { query: { limit: 10 } },

4046 "admin.user.create": {

4047 name: "Admin User",

4048 email: "admin@example.com",

4049 password: "super-secret",

4050 role: "admin"

Long lines were clipped for display.

4049patternName = generic_password severity = medium line = 4049 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-CwCWFXq8.js

dist/chunks/plugins-CwCWFXq8.jsView on unpkg · L4049