registry  /  babylonjs-editor-cli  /  5.4.3-alpha.0

babylonjs-editor-cli@5.4.3-alpha.0

Babylon.js Editor CLI is a command line interface to help you package your scenes made using the Babylon.js Editor

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 27 file(s), 1.12 MB of source, external domains: 169.254.169.254, 169.254.170.2, a.co, aws.amazon.com, docs.aws.amazon.com, dotenvx.com, example.com, github.com, portal.sso, portal.sso-fips, react-native.canny.io, s3-fips.dualstack, s3-fips.dualstack.us-east-1, s3-fips.us-east-1, s3.amazonaws.com, s3.dualstack, s3.dualstack.us-east-1, s3express-control-fips.dualstack, s3express-control.dualstack, sts.amazonaws.com, www.w3.org

Source & flagged code

4 flagged · loading source
build/index.node.jsView file
6see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:n,destStat:s}=sf.checkPathsSync(e,t,"copy",r);if(sf.checkParentPathsSync(e,... L7: `,finalEOL:r=!0,replacer:n=null,spaces:s}={}){let o=r?t:"";return JSON.stringify(e,n,s).replace(/\n/g,t)+o}i(Rle,"stringify");function Tle(e){return Buffer.isBuffer(e)&&(e=e.toStri... L8: `))}});var kM=A((x9e,PM)=>{"use strict";var Pme=require("node:util"),sv=require("node:stream"),kme=ki();Bf();var Ome=Pme.debuglog("sharp"),bc=i(function(e,t){if(arguments.length===...
High
Child Process

Package source references child process execution.

build/index.node.jsView on unpkg · L6
1var tce=Object.create;var Zd=Object.defineProperty;var rce=Object.getOwnPropertyDescriptor;var nce=Object.getOwnPropertyNames;var sce=Object.getPrototypeOf,ice=Object.prototype.has... L2: GFS4: `),console.error(e)},"debug")),zt[Yr]||(HI=global[Yr]||[],GI(zt,HI),zt.close=(function(e){function t(r,n){return e.call(zt,r,function(s){s||zI(),typeof n=="function"&&n.apply... L3: L4: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:n,destStat:s}=await rf.checkPaths(e,t,"copy",r);if(await rf.checkParentPath... L5: L6: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:n,destStat:s}=sf.checkPathsSync(e,t,"copy",r);if(sf.checkParentPathsSync(e,... L7: `,finalEOL:r=!0,replacer:n=null,spaces:s}={}){let o=r?t:"";return JSON.stringify(e,n,s).replace(/\n/g,t)+o}i(Rle,"stringify");function Tle(e){return Buffer.isBuffer(e)&&(e=e.toStri... L8: `))}});var kM=A((x9e,PM)=>{"use strict";var Pme=require("node:util"),sv=require("node:stream"),kme=ki();Bf();var Ome=Pme.debuglog("sharp"),bc=i(function(e,t){if(arguments.length===...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

build/index.node.jsView on unpkg · L1
1var tce=Object.create;var Zd=Object.defineProperty;var rce=Object.getOwnPropertyDescriptor;var nce=Object.getOwnPropertyNames;var sce=Object.getPrototypeOf,ice=Object.prototype.has... L2: GFS4: `),console.error(e)},"debug")),zt[Yr]||(HI=global[Yr]||[],GI(zt,HI),zt.close=(function(e){function t(r,n){return e.call(zt,r,function(s){s||zI(),typeof n=="function"&&n.apply... L3: L4: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:n,destStat:s}=await rf.checkPaths(e,t,"copy",r);if(await rf.checkParentPath... L5: L6: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:n,destStat:s}=sf.checkPathsSync(e,t,"copy",r);if(sf.checkParentPathsSync(e,... L7: `,finalEOL:r=!0,replacer:n=null,spaces:s}={}){let o=r?t:"";return JSON.stringify(e,n,s).replace(/\n/g,t)+o}i(Rle,"stringify");function Tle(e){return Buffer.isBuffer(e)&&(e=e.toStri... L8: `))}});var kM=A((x9e,PM)=>{"use strict";var Pme=require("node:util"),sv=require("node:stream"),kme=ki();Bf();var Ome=Pme.debuglog("sharp"),bc=i(function(e,t){if(arguments.length===...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.node.jsView on unpkg · L1
1var tce=Object.create;var Zd=Object.defineProperty;var rce=Object.getOwnPropertyDescriptor;var nce=Object.getOwnPropertyNames;var sce=Object.getPrototypeOf,ice=Object.prototype.has... L2: GFS4: `),console.error(e)},"debug")),zt[Yr]||(HI=global[Yr]||[],GI(zt,HI),zt.close=(function(e){function t(r,n){return e.call(zt,r,function(s){s||zI(),typeof n=="function"&&n.apply... L3: L4: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0001");let{srcStat:n,destStat:s}=await rf.checkPaths(e,t,"copy",r);if(await rf.checkParentPath... L5: L6: see https://github.com/jprichardson/node-fs-extra/issues/269`,"Warning","fs-extra-WARN0002");let{srcStat:n,destStat:s}=sf.checkPathsSync(e,t,"copy",r);if(sf.checkParentPathsSync(e,... L7: `,finalEOL:r=!0,replacer:n=null,spaces:s}={}){let o=r?t:"";return JSON.stringify(e,n,s).replace(/\n/g,t)+o}i(Rle,"stringify");function Tle(e){return Buffer.isBuffer(e)&&(e=e.toStri... L8: `))}});var kM=A((x9e,PM)=>{"use strict";var Pme=require("node:util"),sv=require("node:stream"),kme=ki();Bf();var Ome=Pme.debuglog("sharp"),bc=i(function(e,t){if(arguments.length===... L9: `);let n;for(;(n=U0e.exec(r))!=null;){let s=n[1],o=n[2]||"
High
Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

build/index.node.jsView on unpkg · L1

Findings

5 High4 Medium5 Low
HighChild Processbuild/index.node.js
HighShell
HighSame File Env Network Executionbuild/index.node.js
HighCommand Output Exfiltrationbuild/index.node.js
HighCloud Metadata Accessbuild/index.node.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings