Loading npm security reports…

mixpeek@0.81.94: Suspicious npm security report (Warn) | LPM Firewall

registry / mixpeek / 0.81.94

mixpeek@0.81.94

Official Mixpeek TypeScript/JavaScript SDK for multimodal data processing and retrieval

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 2.39 MB of source, external domains: api.mixpeek.com, dash.mixpeek.com, example.com

Source & flagged code

3 flagged

dist/models/snowflake-config.d.tsView file

Lines 1-34typescript

1/**

2 * Mixpeek API

3 * This is the Mixpeek API, providing access to various endpoints for data processing and retrieval.

4 *

5 * The version of the OpenAPI document: 0.82

6 * Contact: info@mixpeek.com

7 *

8 * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

9 * https://openapi-generator.tech

10 * Do not edit the class manually.

11 */

12import type { Credentials4 } from './credentials4';

13/**

14 * Snowflake data warehouse configuration for table-based sync. Enables syncing Snowflake table rows as JSON objects in Mixpeek buckets. Each row becomes one object, with incremental sync via watermark columns. Authentication Options: - Key Pair: Recommended for production (secure, password-less) - Username/Password: Fallback option (simpler setup) Requirements: - Snowflake account with read access to target tables - Warehouse with compute resources - SELECT permissions on target tables/schemas - USAGE permissions on database, schema, warehouse Use Cases: - Sync ...

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/models/snowflake-config.d.tsView on unpkg · L14

Critical

Secret Pattern

RSA private key in dist/models/snowflake-config.d.ts

dist/models/snowflake-config.d.tsView on unpkg · L14

15 * @export

16 * @interface SnowflakeConfig

17 */

18export interface SnowflakeConfig {

19 /**

20 *

21 * @type {string}

22 * @memberof SnowflakeConfig

23 */

24 'provider_type'?: SnowflakeConfigProviderTypeEnum;

25 /**

26 *

27 * @type {Credentials4}

28 * @memberof SnowflakeConfig

29 */

30 'credentials': Credentials4;

31 /**

32 * REQUIRED. Snowflake account identifier. Format: {account_locator}.{cloud_region} or {org_name}-{account_name} Find in: Snowflake UI > Account dropdown > Account URL

33 * @type {string}

34 * @memberof SnowflakeConfig

Long lines were clipped for display.

dist/models/snowflake-key-pair-credentials.d.tsView file

Lines 11-47typescript

11 */

12/**

13 * Snowflake key pair authentication (RECOMMENDED for production). Key pair authentication provides secure, password-less access to Snowflake. The private key is encrypted at rest using MongoDB CSFLE. Prerequisites: 1. Generate RSA key pair (2048-bit minimum) 2. Extract public key and assign to Snowflake user 3. Store private key securely (encrypted) Security: - Private key encrypted at rest via CSFLE - No password exposure - Key rotation supported - Recommended for production Example: Generate key pair: ```bash openssl genrsa 2048 | openssl pkcs8 -t ...

14 * @export

15 * @interface SnowflakeKeyPairCredentials

16 */

17export

Source & flagged code

3 flagged · loading source

dist/models/snowflake-config.d.tsView file

14patternName = private_key_rsa severity = critical line = 14 matchedText = * Snowfl... ```

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/models/snowflake-config.d.tsView on unpkg · L14

14patternName = private_key_rsa severity = critical line = 14 matchedText = * Snowfl... ```

Critical

Secret Pattern

RSA private key in dist/models/snowflake-config.d.ts

dist/models/snowflake-config.d.tsView on unpkg · L14

dist/models/snowflake-key-pair-credentials.d.tsView file

31patternName = private_key_rsa severity = critical line = 31 matchedText = * REQUIR...----

Critical

Secret Pattern

RSA private key in dist/models/snowflake-key-pair-credentials.d.ts

Findings

3 Critical2 Medium4 Low

CriticalCritical Secretdist/models/snowflake-config.d.ts

CriticalSecret Patterndist/models/snowflake-config.d.ts

CriticalSecret Patterndist/models/snowflake-key-pair-credentials.d.ts

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/models/snowflake-config.d.tsView file

Lines 1-34typescript

1/**

2 * Mixpeek API

3 * This is the Mixpeek API, providing access to various endpoints for data processing and retrieval.

4 *

5 * The version of the OpenAPI document: 0.82

6 * Contact: info@mixpeek.com

7 *

8 * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).

9 * https://openapi-generator.tech

10 * Do not edit the class manually.

11 */

12import type { Credentials4 } from './credentials4';

13/**

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/models/snowflake-config.d.tsView on unpkg · L14

Critical

Secret Pattern

RSA private key in dist/models/snowflake-config.d.ts

dist/models/snowflake-config.d.tsView on unpkg · L14

15 * @export

16 * @interface SnowflakeConfig

17 */

18export interface SnowflakeConfig {

19 /**

20 *

21 * @type {string}

22 * @memberof SnowflakeConfig

23 */

24 'provider_type'?: SnowflakeConfigProviderTypeEnum;

25 /**

26 *

27 * @type {Credentials4}

28 * @memberof SnowflakeConfig

29 */

30 'credentials': Credentials4;

31 /**

32 * REQUIRED. Snowflake account identifier. Format: {account_locator}.{cloud_region} or {org_name}-{account_name} Find in: Snowflake UI > Account dropdown > Account URL

33 * @type {string}

34 * @memberof SnowflakeConfig

Long lines were clipped for display.

dist/models/snowflake-key-pair-credentials.d.tsView file

Lines 11-47typescript

11 */

12/**

14 * @export

15 * @interface SnowflakeKeyPairCredentials

16 */

17export