registry / datastake-daf / 0.7.211

datastake-daf@0.7.211

⚠ Under review

```bash git clone https://link-to-project ```

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 22 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

Manifest

NoLicense

scanned 1,897 file(s), 25.8 MB of source, external domains: 192.168.4.211, 192.168.4.43, 192.168.4.64, api.backendless.com, api.datastake.io, api.example.com, api.mapbox.com, corsproxy.io, d6emlwyqv3muw.cloudfront.net, daf-dev.datastake.io, example.com, fb.me, flagcdn.com, flagsapi.com, github.com, images.unsplash.com, invalid-url-to-show-fallback.jpg, ipapi.co, lavoixdelituri.com, leafletjs.com, mdn.io, npms.io, picsum.photos, reactjs.org, static0.srcdn.com, storybook.js.org, whc.unesco.org, www.cahraslist.net, www.chromatic.com, www.eeas.europa.eu, www.example.com, www.google.com, www.iturikwetu.net, www.iucn.org, www.nrc.no, www.w3.org, wwww.example.com, youtu.be, zeroextinction.org

Oversized source lightweight scan

dist/components/index.js4.62 MB file, sampled 256 KB

NetworkHighEntropyStrings

dist/pages/index.js5.53 MB file, sampled 256 KB

NetworkHighEntropyStrings

Source & flagged code

9 flagged

src/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsxView file

Lines 455-495tsx

455 },

456 pendingUsers: [],

457 users: [{}, {}, {}, {}, {}, {}],

458 settings: {

459 activityNotifiications: true,

460 walletNotifiications: true,

461 textOnlyEmail: false,

462 },

463 createdAt: "2023-08-07T17:49:12.946Z",

464 updatedAt: "2024-11-20T07:48:58.322Z",

465 __v: 0,

466 admin: {

467 _id: "64d12e98b049a7f5a8bbcdc1",

468 createdAt: "2020-11-19T10:29:31.381Z",

469 updatedAt: "2025-07-04T14:41:39.786Z",

470 id: "fc4ca5c6-f46d-424f-a948-d66b031a82c3",

471 userId: "MMT-00000000146",

472 firstName: "Team",

473 lastName: "Hive",

474 email: "team@hiveinfo.org",

475 password: "$2a$10$GhrwB0m5Jb/xV5hNsyGq9eWMfcsP.2aI2kCUxf/eO7qzq6oaTvrNC",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsxView on unpkg · L475

476 requirePasswordChange: false,

477 role: {},

478 verificationToken: null,

479 emailVerified: true,

480 status: "active",

481 approvalStatus: "approved",

482 statusChangeDate: "2020-11-19T10:29:31.381Z",

483 passwordChangedAt: "2020-11-19T10:29:31.381Z",

484 invited: false,

485 language: "en",

486 lastLogin: "2023-02-07T17:24:51.000Z",

487 settings: {

488 projects: [

489 {

490 id: "1f9b0bd4-ba4b-4c02-85bc-1a4b95ec8d93",

491 visualisation: {

492 country: "CD",

493 monitoringInformationSources: [

494 "fc4ca5c6-f46d-424f-a948-d66b031a82c3",

495 "1c9ecb10-d701-4dc5-8af0-aac304c8d54d",

storybook-static/9878.a9b1e7a0.iframe.bundle.jsView file

Lines 1-1javascript

1"use strict";(self.webpackChunkdatastake_daf=self.webpackChunkdatastake_daf||[]).push([[9878],{"./node_modules/antd/es/_util/hooks/useForceUpdate.js":(__unused_webpack_module,__webpack_exports__,__webpack_require__)=>{__webpack_require__.d(__webpack_exports__,{A:()=>useForceUpdate});var react__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__("./node_modules/react/index.js");function useForceUpdate

storybook-static/2596.da1a546a.iframe.bundle.jsView file

132theme-data missing: L133: `,missing),convert(input)},ignoreSsrWarning="/* emotion-disable-server-rendering-unsafe-selector-warning-please-do-not-use-this-the-warning-exists-for-a-reason */"},"./node_modules... L134: //# sourceMappingURL=2596.da1a546a.iframe.bundle.js.map

Medium

Dynamic Require

Package source references dynamic require/import behavior.

storybook-static/2596.da1a546a.iframe.bundle.jsView on unpkg · L132

Low

Eval

Package source references a known benign dynamic code generation pattern.

storybook-static/2596.da1a546a.iframe.bundle.jsView on unpkg · L132

storybook-static/sb-manager/chunk-XE6LDGTE.jsView file

27L28: More info: https://storybook.js.org/docs/react/writing-stories/args#setting-args-through-the-url L29: `),acc),{});return import_qs.default.stringify(encodeSpecialValues(object),QS_OPTIONS).replace(/ /g,"+").split(";").map(part=>part.replace("=",":")).join(";")},queryFromString=(0,i... ... L31: `)&&(inRegexLiteral=!1),inBlockComment&&code[i3-1]==="/"&&code[i3-2]==="*"&&(inBlockComment=!1),inLineComment&&code[i3]===` L32: `&&(inLineComment=!1)),!inBlockComment&&!inLineComment&&(newCode+=code[i3]);else newCode=code;return newCode},cleanCode=(0,import_memoizerific2.default)(1e4)(code=>removeCodeCommen... L33: [ ]{`+Math.min.apply(Math,indentLengths)+"}","g");strings=strings.map(function(str){return str.replace(pattern_1,` ... L36: `).map(function(str,i4){return i4===0?str:""+endentation+str}).join(` L37: `)),string+=indentedValue+strings[i3+1]}),string}var import_memoizerific3=__toESM(require_memoizerific(),1),import_countBy=__toESM(require_countBy(),1),import_mapValues=__toESM(req... L38: Invalid part '${name2}', leading to id === parentId ('${id}'), inside title '${title}'

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

storybook-static/sb-manager/chunk-XE6LDGTE.jsView on unpkg · L27

deploy.shView file

•path = deploy.sh kind = build_helper sizeBytes = 922 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy.shView on unpkg

storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2View file

•path = storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2 kind = high_entropy_blob sizeBytes = 49460 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2View on unpkg

dist/components/index.jsView file

•path = dist/components/index.js kind = oversized_source_file sizeBytes = 4845645 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/components/index.jsView on unpkg

dist/hooks/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = datastake-daf@0.7.210 matchedIdentity = npm:ZGF0YXN0YWtlLWRhZg:0.7.210 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/hooks/index.jsView on unpkg

Source & flagged code

9 flagged · loading source

src/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsxView file

475patternName = generic_password severity = medium line = 475 matchedText = password...NC",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsxView on unpkg · L475

storybook-static/9878.a9b1e7a0.iframe.bundle.jsView file

1"use strict";(self.webpackChunkdatastake_daf=self.webpackChunkdatastake_daf||[]).push([[9878],{"./node_modules/antd/es/_util/hooks/useForceUpdate.js":(__unused_webpack_module,__web...

High

Child Process

Package source references child process execution.

storybook-static/9878.a9b1e7a0.iframe.bundle.jsView on unpkg · L1

storybook-static/2596.da1a546a.iframe.bundle.jsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

storybook-static/2596.da1a546a.iframe.bundle.jsView on unpkg · L132

Low

Eval

Package source references a known benign dynamic code generation pattern.

storybook-static/2596.da1a546a.iframe.bundle.jsView on unpkg · L132

storybook-static/sb-manager/chunk-XE6LDGTE.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

storybook-static/sb-manager/chunk-XE6LDGTE.jsView on unpkg · L27

deploy.shView file

•path = deploy.sh kind = build_helper sizeBytes = 922 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy.shView on unpkg

storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2View file

•path = storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2 kind = high_entropy_blob sizeBytes = 49460 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2View on unpkg

dist/components/index.jsView file

•path = dist/components/index.js kind = oversized_source_file sizeBytes = 4845645 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/components/index.jsView on unpkg

dist/hooks/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/hooks/index.jsView on unpkg

Findings

1 Critical5 High7 Medium9 Low

CriticalPrevious Version Dangerous Deltadist/hooks/index.js

HighChild Processstorybook-static/9878.a9b1e7a0.iframe.bundle.js

HighShell

HighSame File Env Network Executionstorybook-static/sb-manager/chunk-XE6LDGTE.js

HighShips High Entropy Blobstorybook-static/sb-common-assets/nunito-sans-bold-italic.woff2

HighOversized Source Filedist/components/index.js

MediumSecret Patternsrc/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsx

MediumDynamic Requirestorybook-static/2596.da1a546a.iframe.bundle.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Build Helperdeploy.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalstorybook-static/2596.da1a546a.iframe.bundle.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

9 flagged

src/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsxView file

Lines 455-495tsx

455 },

456 pendingUsers: [],

457 users: [{}, {}, {}, {}, {}, {}],

458 settings: {

459 activityNotifiications: true,

460 walletNotifiications: true,

461 textOnlyEmail: false,

462 },

463 createdAt: "2023-08-07T17:49:12.946Z",

464 updatedAt: "2024-11-20T07:48:58.322Z",

465 __v: 0,

466 admin: {

467 _id: "64d12e98b049a7f5a8bbcdc1",

468 createdAt: "2020-11-19T10:29:31.381Z",

469 updatedAt: "2025-07-04T14:41:39.786Z",

470 id: "fc4ca5c6-f46d-424f-a948-d66b031a82c3",

471 userId: "MMT-00000000146",

472 firstName: "Team",

473 lastName: "Hive",

474 email: "team@hiveinfo.org",

475 password: "$2a$10$GhrwB0m5Jb/xV5hNsyGq9eWMfcsP.2aI2kCUxf/eO7qzq6oaTvrNC",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/@daf/core/components/Screens/InformationChannels/InformationChanel.stories.tsxView on unpkg · L475

476 requirePasswordChange: false,

477 role: {},

478 verificationToken: null,

479 emailVerified: true,

480 status: "active",

481 approvalStatus: "approved",

482 statusChangeDate: "2020-11-19T10:29:31.381Z",

483 passwordChangedAt: "2020-11-19T10:29:31.381Z",

484 invited: false,

485 language: "en",

486 lastLogin: "2023-02-07T17:24:51.000Z",

487 settings: {

488 projects: [

489 {

490 id: "1f9b0bd4-ba4b-4c02-85bc-1a4b95ec8d93",

491 visualisation: {

492 country: "CD",

493 monitoringInformationSources: [

494 "fc4ca5c6-f46d-424f-a948-d66b031a82c3",

495 "1c9ecb10-d701-4dc5-8af0-aac304c8d54d",

storybook-static/9878.a9b1e7a0.iframe.bundle.jsView file

Lines 1-1javascript

storybook-static/2596.da1a546a.iframe.bundle.jsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

storybook-static/2596.da1a546a.iframe.bundle.jsView on unpkg · L132

Low

Eval

Package source references a known benign dynamic code generation pattern.

storybook-static/2596.da1a546a.iframe.bundle.jsView on unpkg · L132

storybook-static/sb-manager/chunk-XE6LDGTE.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

storybook-static/sb-manager/chunk-XE6LDGTE.jsView on unpkg · L27

deploy.shView file

•path = deploy.sh kind = build_helper sizeBytes = 922 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

deploy.shView on unpkg

storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2View file

•path = storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2 kind = high_entropy_blob sizeBytes = 49460 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

storybook-static/sb-common-assets/nunito-sans-bold-italic.woff2View on unpkg

dist/components/index.jsView file

•path = dist/components/index.js kind = oversized_source_file sizeBytes = 4845645 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/components/index.jsView on unpkg

dist/hooks/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/hooks/index.jsView on unpkg