registry  /  @zeedhi/cli  /  1.131.0

@zeedhi/cli@1.131.0

Zeedhi CLI

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 49 file(s), 48.1 KB of source, external domains: goo.gl

Source & flagged code

4 flagged · loading source
src/util/project/vue/.env.productionView file
2patternName = blocked_file severity = critical matchedText = src/util/project/vue/.env.production redactedSecretContext = secretLikeLines = 1 L2: VUE_APP_METADATA_END_POINT=<redacted:28 token-like>
Critical
Critical Secret

Package contains a critical-looking secret pattern.

src/util/project/vue/.env.productionView on unpkg · L2
bin/zeedhi.jsView file
1#!/usr/bin/env node L2: const chalk = require('chalk') L3: const semver = require('semver')
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/zeedhi.jsView on unpkg · L1
src/util/project/vue/src/assets/zeedhi-logo.avifView file
•path = [redacted]-logo.avif kind = high_entropy_blob sizeBytes = 12273 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/util/project/vue/src/assets/zeedhi-logo.avifView on unpkg
package.jsonView file
•Runtime dependency names matching Node built-ins: path
High
Node Builtin Dependency Squat

Package declares a runtime dependency whose name matches a Node built-in module.

package.jsonView on unpkg

Findings

1 Critical2 High3 Medium3 Low
CriticalCritical Secretsrc/util/project/vue/.env.production
HighShips High Entropy Blobsrc/util/project/vue/src/assets/zeedhi-logo.avif
HighNode Builtin Dependency Squatpackage.json
MediumDynamic Requirebin/zeedhi.js
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings