Loading npm security reports…

@zintrust/core@3.0.8: Suspicious npm security report (Warn) | LPM Firewall

registry / @zintrust/core / 3.0.8

@zintrust/core@3.0.8

Production-grade TypeScript backend framework for JavaScript

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 605 file(s), 2.99 MB of source, external domains: 127.0.0.1, api.cloudflare.com, api.mailgun.net, api.pusherapp.com, api.sendgrid.com, api.termii.com, api.twilio.com, assets.local, cdn.tailwindcss.com, fonts.googleapis.com, fonts.gstatic.com, registry.npmjs.org, storage.googleapis.com, unpkg.com

Source & flagged code

4 flagged

src/config/middleware.jsView file

Lines 1-41javascript

1import { Env } from './env.js';

2import { securityConfig } from './security.js';

3import { isArray, isObject } from '../helper/index.js';

4import { bodyParsingMiddleware } from '../http/middleware/BodyParsingMiddleware.js';

5import { fileUploadMiddleware } from '../http/middleware/FileUploadMiddleware.js';

6import { AuthMiddleware } from '../middleware/AuthMiddleware.js';

7import { BulletproofAuthMiddleware } from '../middleware/BulletproofAuthMiddleware.js';

8import { CsrfMiddleware } from '../middleware/CsrfMiddleware.js';

9import { ErrorHandlerMiddleware } from '../middleware/ErrorHandlerMiddleware.js';

10import { JwtAuthMiddleware } from '../middleware/JwtAuthMiddleware.js';

11import { LoggingMiddleware } from '../middleware/LoggingMiddleware.js';

12import { RateLimiter } from '../middleware/RateLimiter.js';

13import { SanitizeBodyMiddleware } from '../middleware/SanitizeBodyMiddleware.js';

14import { SecurityMiddleware } from '../middleware/SecurityMiddleware.js';

15import { ValidationMiddleware } from '../middleware/ValidationMiddleware.js';

16import { StartupConfigFile, StartupConfigFileRegistry } from '../runtime/StartupConfigFileRegistry.js';

17import { Sanitizer } from '../security/Sanitizer.js';

18import { Schema } from '../validation/Validator.js';

19export const MiddlewareBody = {

20 email: 'email',

21 password: 'password', //NOSONAR

Medium

Secret Pattern

Package contains a possible secret pattern.

src/config/middleware.jsView on unpkg · L21

22 name: 'name',

23 count: 'count',

24};

25export const MiddlewareKeys = Object.freeze({

26 log: true,

27 error: true,

28 security: true,

29 rateLimit: true,

30 sanitizeBody: true,

31 fillRateLimit: true,

32 authRateLimit: true,

33 userMutationRateLimit: true,

34 csrf: true,

35 auth: true,

36 jwt: true,

37 bulletproof: true,

38 validateLogin: true,

39 validateRegister: true,

40 validateUserStore: true,

41 validateUserUpdate: true,

src/migrations/MigrationLoader.jsView file

Lines 2-42javascript

2import * as path from '../node-singletons/path.js';

3import { pathToFileURL } from '../node-singletons/url.js';

4function isFunction(value) {

5 return

src/scripts/TemplateSync.jsView file

Lines 1-32javascript

1/**

2 * Template Sync Script

3 * Synchronizes base framework files to .tpl templates when checksums change

4 * Runs during npm run build

5 */

6import { TemplateRegistry } from '../templates/TemplateRegistry.js';

7import { ensureDir, esmDirname } from '../common/index.js';

src/config/middleware.d.tsView file

Lines 7-47typescript

7 security: Middleware;

8 rateLimit: Middleware;

9 sanitizeBody: Middleware;

10 fillRateLimit: Middleware;

11 authRateLimit: Middleware;

12 userMutationRateLimit: Middleware;

Source & flagged code

4 flagged · loading source