flexbiz-server@12.7.11: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

flexbiz-server@12.7.11: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

14 flagged · loading source

server/tools/update copy.jsView file

2patternName = google_api_key severity = high line = 2 matchedText = global.G...eY';

High

High Secret

Package contains a high-severity secret pattern.

server/tools/update copy.jsView on unpkg · L2

2patternName = google_api_key severity = high line = 2 matchedText = global.G...eY';

High

Secret Pattern

Google API key in server/tools/update copy.js

server/tools/update copy.jsView on unpkg · L2

server/agents/tools/utils.jsView file

1const _0x5ddaf3=_0x110d;(function(_0xb1c492,_0x29c271){const _0x444a81=_0x110d,_0x1939c2=_0xb1c492();while(!![]){try{const _0x5a94da=-parseInt(_0x444a81(0x19a))/0x1*(parseInt(_0x44...

Low

Eval

Package source references a known benign dynamic code generation pattern.

server/agents/tools/utils.jsView on unpkg · L1

configs-example.jsView file

33//limit or slowDown request L34: const rateLimit = require("express-rate-limit"); L35: const slowDown = require('express-slow-down');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

configs-example.jsView on unpkg · L33

server/route.jsView file

1function _0x19b4(){const _0x28a4c9=['D25SB2e','CY4UlG','w3jVDxq','DgHHBsa','wc1by2m','BgvZl3m','Aw5N','zv9TB2q','C2HFDg8','D3CTzM8','CY91DgK','z2uUCg4','AhvIBMe','zxHJzwW','C2vUzey...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

server/route.jsView on unpkg · L1

enable_mongo_replica.shView file

•path = enable_mongo_replica.sh kind = build_helper sizeBytes = 3776 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

enable_mongo_replica.shView on unpkg

server/templates/excels/pc1.xlsxView file

•path = server/templates/excels/pc1.xlsx kind = compressed_blob sizeBytes = 12153 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

server/templates/excels/pc1.xlsxView on unpkg

•path = server/templates/excels/pc1.xlsx kind = nested_archive_needs_inspection sizeBytes = 12153 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

server/templates/excels/pc1.xlsxView on unpkg

server/templates/excels/pn5.xlsxView file

•path = server/templates/excels/pn5.xlsx kind = high_entropy_blob sizeBytes = 12588 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

server/templates/excels/pn5.xlsxView on unpkg

server/data/sys/listinfo.jsView file

•path = server/data/sys/listinfo.js kind = oversized_source_file sizeBytes = 9657799 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

server/data/sys/listinfo.jsView on unpkg

server/tools/create_province.jsView file

2patternName = google_api_key severity = high line = 2 matchedText = global.G...eY';

High

Secret Pattern

Google API key in server/tools/create_province.js

server/tools/create_province.jsView on unpkg · L2

server/tools/resetPassword.jsView file

2patternName = google_api_key severity = high line = 2 matchedText = global.G...eY';

High

Secret Pattern

Google API key in server/tools/resetPassword.js

server/tools/resetPassword.jsView on unpkg · L2

server/tools/set_px_gia_dd.jsView file

2patternName = google_api_key severity = high line = 2 matchedText = global.G...eY';

High

Secret Pattern

Google API key in server/tools/set_px_gia_dd.js

server/tools/set_px_gia_dd.jsView on unpkg · L2

server/tools/update_system.jsView file

2patternName = google_api_key severity = high line = 2 matchedText = global.G...eY';

High

Secret Pattern

Google API key in server/tools/update_system.js

server/tools/update_system.jsView on unpkg · L2