registry / @xylex-group/athena-auth-ui / 1.17.0

@xylex-group/athena-auth-ui@1.17.0

Athena Auth

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 512 KB of source, external domains: auth.athena-auth.com

Source & flagged code

9 flagged

dist/chunks/plugins-ixWNE48e.jsView file

Lines 4218-4258javascript

4218 pretty: !0,

4219 props: {

4220 appName: "Athena Auth",

4221 userName: "Ava"

4222 }

4223 },

4224

Source & flagged code

9 flagged · loading source

dist/chunks/plugins-ixWNE48e.jsView file

4238patternName = generic_password severity = medium line = 4238 matchedText = password...et",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4238

4324patternName = generic_password severity = medium line = 4324 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4324

4331patternName = generic_password severity = medium line = 4331 matchedText = password...et",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4331

4337patternName = generic_password severity = medium line = 4337 matchedText = password...ret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4337

4340patternName = generic_password severity = medium line = 4340 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4340

4341patternName = generic_password severity = medium line = 4341 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4341

4342patternName = generic_password severity = medium line = 4342 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4342

4343patternName = generic_password severity = medium line = 4343 matchedText = "twoFact..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4343

4347patternName = generic_password severity = medium line = 4347 matchedText = "user.de..." },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4347

Findings

11 Medium3 Low

MediumSecret Patterndist/chunks/plugins-ixWNE48e.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/chunks/plugins-ixWNE48e.js

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Lines 4304-4363javascript

4304 } },

4305 "passkey.deletePasskey": { id: "passkey-id" },

4306 "passkey.updatePasskey": {

4307 id: "passkey-id",

4308 name: "Updated passkey"

4309 },

4310 "passkey.verifyAuthentication": { response: "webauthn-authentication-response" },

4311 "passkey.verifyRegistration": {

4312 name: "Laptop Passkey",

4313 response: "webauthn-registration-response"

4314 },

4315 refreshToken: { providerId: "google" },

4316 resetPassword: {

4317 newPassword: "new-secret",

4318 token: "reset-token"

4319 },

4320 sendVerificationEmail: { email: "demo@example.com" },

4321 "session.revoke": { token: "session-token" },

4322 "signIn.email": {

4323 email: "demo@example.com",

4324 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4324

4325 },

4326 "signIn.social": {

4327 disableRedirect: !0,

4328 provider: "google"

4329 },

4330 "signIn.username": {

4331 password: "super-secret",

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4331

4332 username: "demo_user"

4333 },

4334 "signUp.email": {

4335 email: "demo@example.com",

4336 name: "Demo User",

4337 password: "super-secret"

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4337

4338 },

4339 "social.link": { provider: "google" },

4340 "twoFactor.disable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4340

4341 "twoFactor.enable": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4341

4342 "twoFactor.generateBackupCodes": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4342

4343 "twoFactor.getTotpUri": { password: "super-secret" },

Medium

Secret Pattern

Hardcoded password in dist/chunks/plugins-ixWNE48e.js

dist/chunks/plugins-ixWNE48e.jsView on unpkg · L4343

4344 "twoFactor.verifyBackupCode": { code: "backup-code" },

4345 "twoFactor.verifyOtp": { code: "123456" },

4346 "twoFactor.verifyTotp": { code: "123456" },

4347 "user.delete": { password: "super-secret" },

4348 "user.update": { name: "Updated Demo" },

4349 verifyEmail: { token: "verify-token" }

4350};

4351function qr(e) {

4352 return e.trim().replace(/\s+/g, "");

4353}

4354function Jr(e) {

4355 return e.startsWith("admin.") ? "admin" : e.startsWith("organization.") ? "organization" : e.startsWith("passkey.") || e.startsWith("twoFactor.") ? "security" : e.startsWith("apiKey.") || e.startsWith("account."

4356}

4357function Yr(e) {

4358 let t = qr(e);

4359 if (!t) return [];

4360 let n = t.split(".");

4361 return n[0] === "auth" ? [n, n.slice(1)].filter((e) => e.length > 0) : [n, ["auth", ...n]];

4362}

4363//#endregion