registry / @yagofontanez/create-seo-site / 0.3.0
@yagofontanez/create-seo-site@0.3.0
⚠ Under reviewCLI para gerar projetos Next.js focados em SEO/GEO local a partir de um strategy.json
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 8 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Decision evidence
public snapshotBehavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
1 flaggedtemplates/base-nextjs/src/lib/conversions/meta.tsView file
6L7: const PIXEL_ID = process.env.NEXT_PUBLIC_META_PIXEL_ID;
L8:
...
L34: action_source: "website",
L35: user_data: limpar({
L36: ...userDataDaIdentidade(conversao.identidade),
...
L49: try {
L50: const resposta = await fetch(
L51: `https://graph.facebook.com/${VERSAO_API}/${PIXEL_ID}/events`,
...
L65: if (!resposta.ok) {
L66: console.error("[capi] meta recusou:", resposta.status, await resposta.text());
L67: return "erro";
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
templates/base-nextjs/src/lib/conversions/meta.tsView on unpkg · L6Findings
1 Critical2 Medium5 Low
CriticalCredential Exfiltrationtemplates/base-nextjs/src/lib/conversions/meta.ts
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @yagofontanez/create-seo-site@0.3.0.
See all versions of @yagofontanez/create-seo-site for other recorded verdicts.
- Review the evidence and your use of @yagofontanez/create-seo-site@0.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.