registry / marketplacepos / 26.28.1

marketplacepos@26.28.1

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

NoLicense

scanned 224 file(s), 4.70 MB of source, external domains: aka.ms, angular.dev, cdn.dealpos.app, changelog.dealpos.app, changelog.dealpos.com, content-firebaseappcheck.googleapis.com, firebase.google.com, fonts.googleapis.com, learn.microsoft.com, momentjs.com, ods.dealpos.app, popper.js.org, resc.cloudinary.com, schemas.microsoft.com, seller-id.tiktok.com, seller.shopee.co.id, seller.tokopedia.com, sellercenter.lazada.co.id, support.dealpos.com, tokopedia.com, woocommerce.dealpos.app, www.dealpos.com, www.highcharts.com, www.w3.org

Source & flagged code

2 flagged

Marketplace/chunk-WYLOCUTQ.jsView file

Lines 1-8javascript

1import{a as nt}from"./chunk-77WK4NCP.js";import{a as Q}from"./chunk-QXRG5XYP.js";import{a as rt}from"./chunk-7R55YTL6.js";import{b as we,c as ee}from"./chunk-NNVT5X6O.js";import{d as Qe}from"./chunk-BMVBJQDF.js";import{a as Ge,b as fe,c as Ze,d as Je,e as ge,f as Xe,g as me,h as Ye,i as G,j as ye,k as x}from"./chunk-34FX4M3J.js";import{e as et}from"./chunk-45DFJJAO.js";import{d as tt}from"./chunk-OF426VSL.js";import{H as qe,I as Ve}from"./chunk-4NAKX6WQ.js";import{Bd as L,D as Ne,Da as H,E as Fe,Fb as U,L as le,La as ze,P as Le,Q as $e,Ua as K,V as ue,Y as O,Z as de,aa as he,c as g,ca as We,d ...

High

High Secret

Package contains a high-severity secret pattern.

Marketplace/chunk-WYLOCUTQ.jsView on unpkg · L1

High

Secret Pattern

Google API key in Marketplace/chunk-WYLOCUTQ.js

Marketplace/chunk-WYLOCUTQ.jsView on unpkg · L1

2 Can't get debug token in production mode.

3 `)})}var Zt={error:"UNKNOWN_ERROR"};function Jt(r){return Ge.encodeString(JSON.stringify(r),!1)}function Te(r,a=!1,e=!1){return A(this,null,function*(){let t=r.app;ft(t);let n=_(t),o=n.token,i;if(o&&!J(o)&&(n.token=void 0,o=void 0),!o){let l=yield n.cachedTokenPromise;l&&(J(l)?o=l:yield be(t,void 0))}if(!a&&o&&J(o))return{token:o.token};let c=!1;if(yt())try{n.exchangeTokenPromise||(n.exchangeTokenPromise=gt(mt(t,yield wt()),r.heartbeatServiceProvider).finally(()=>{n.exchangeTokenPromise=void 0}),c=!0);let l=yield n.exchangeTokenPromise;return yield be(t,l),n.token=l,{token:l.token}}cat ...

4 Your DB Config doesn't match the most recent version of the DB with name ${e.name}, please update it

5 DB current version: ${n.version};

6 Your configuration: ${e.version};

7 `),console.warn(`Using latest version ${n.version}`)),this.dbConfigs[e.name].version=n.version),n.close()})})}get dbConfig(){return this.dbConfigs[this.selectedDb]}getDatabaseVersion(){return new g(e=>{w(this.indexedDB,this.dbConfig.name,this.dbConfig.version).then(t=>{e.next(t.version),e.complete()}).catch(t=>e.error(`error during get version of database => ${t} `))})}selectDb(e){if(e=e??this.defaultDatabaseName,!e)throw new Error("No database name specified and no default database set.");if(!Object.keys(this.dbConfigs).includes(e))throw new Error(`NgxIndexedDB: Database ${e} is n ...

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

Marketplace/chunk-WYLOCUTQ.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = import{a...or(`

High

High Secret

Package contains a high-severity secret pattern.

Marketplace/chunk-WYLOCUTQ.jsView on unpkg · L1

1patternName = google_api_key severity = high line = 1 matchedText = import{a...or(`

High

Secret Pattern

Google API key in Marketplace/chunk-WYLOCUTQ.js

Marketplace/chunk-WYLOCUTQ.jsView on unpkg · L1

Findings

2 High4 Medium4 Low

HighHigh SecretMarketplace/chunk-WYLOCUTQ.js

HighSecret PatternMarketplace/chunk-WYLOCUTQ.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

Marketplace/chunk-WYLOCUTQ.jsView file

Lines 1-8javascript

High

High Secret

Package contains a high-severity secret pattern.

Marketplace/chunk-WYLOCUTQ.jsView on unpkg · L1

High

Secret Pattern

Google API key in Marketplace/chunk-WYLOCUTQ.js

Marketplace/chunk-WYLOCUTQ.jsView on unpkg · L1

2 Can't get debug token in production mode.

4 Your DB Config doesn't match the most recent version of the DB with name ${e.name}, please update it

5 DB current version: ${n.version};

6 Your configuration: ${e.version};

Long lines were clipped for display.