Loading npm security reports…

dashnex@0.5.81: Suspicious npm security report (Warn) | LPM Firewall

registry / dashnex / 0.5.81

dashnex@0.5.81

Command-line interface for DashNex framework

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

MinifiedTrivialUrlStrings

Manifest

NoLicense

scanned 6 file(s), 62.9 KB of source, external domains: 3atfynmu2w.us-east-1.awsapprunner.com, api.business.dashnex.com, api.business.qa.dashnex.com, api.dashnex.com, api.qa.dashnex.com, business.dashnex.com, business.qa.dashnex.com, dashnex.io, json.schemastore.org, npm.dashnex.com, rkwbzvhcwh.us-east-1.awsapprunner.com

Source & flagged code

3 flagged

dist/cli.jsView file

Lines 1-2javascript

1#!/usr/bin/env node

2import{n as o,t as n}from"./chunks/errors-7HJEDWYU.js";import{Command as s}from"commander";import e from"chalk";import t from"fs-extra";import i from"path";import{fileURLToPath as c,pathToFileURL as a}from"url";import{execSync as r}from"child_process";import d from"dotenv";var l=new s,m=i.dirname(c(import.meta.url)),{version:p,description:f}=JSON.parse(t.readFileSync(i.resolve(m,"..","package.json"),"utf8"));l.name("dashnex").description(f).version(p).option("--ci","Disable spinner and interactive prompts (CI mode)").arguments("[command...]").action(o=>{if(o&&o.length>0){const n=o[0];if(!l.com ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L1

Long lines were clipped for display.

dist/commands/index.jsView file

Lines 1-1javascript

1import{n as e,t}from"../chunks/errors-7HJEDWYU.js";import s from"chalk";import o from"fs-extra";import n from"path";import{fileURLToPath as r}from"url";

Source & flagged code

3 flagged · loading source

dist/cli.jsView file

1#!/usr/bin/env node L2: import{n as o,t as n}from"./chunks/errors-7HJEDWYU.js";import{Command as s}from"commander";import e from"chalk";import t from"fs-extra";import i from"path";import{fileURLToPath as ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L1

dist/commands/index.jsView file

1import{n as e,t}from"../chunks/errors-7HJEDWYU.js";import s from"chalk";import o from"fs-extra";import n from"path";import{fileURLToPath as r}from"url";import{spawn as a}from"child...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/index.jsView on unpkg · L1

1import{n as e,t}from"../chunks/errors-7HJEDWYU.js";import s from"chalk";import o from"fs-extra";import n from"path";import{fileURLToPath as r}from"url";import{spawn as a}from"child...

High

Findings

2 High3 Medium4 Low

HighSame File Env Network Executiondist/commands/index.js

HighCommand Output Exfiltrationdist/commands/index.js

MediumDynamic Requiredist/cli.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowUrl Strings

LowNo License