registry / omniguard-enterprise-cli / 1.2.0

omniguard-enterprise-cli@1.2.0

OmniGuard - AI-Powered Application Security Platform CLI

Static Scan Results

scanned 22h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 136 KB of source, external domains: krnpfunshzycavskrtod.supabase.co, omniguard.io

Source & flagged code

8 flagged

src/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict'

4const fs = require('fs')

5const os = require('os')

6const path = require('path')

7const http = require('http')

8const https = require('https')

9const readline = require('readline')

10const { execSync, spawn } = require('child_process')

12const api = require('./api')

13const tui = require('./tui')

14const sec = require('./enterprise-security')

16const VERSION = '1.2.0'

17const LOG_FILE = path.join(os.homedir(), '.omniguard', 'daemon.log')

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/index.jsView on unpkg · L6

19const c = {

20 red: s => `\x1b[31m${s}\x1b[0m`,

21 yellow: s => `\x1b[33m${s}\x1b[0m`,

22 green: s => `\x1b[32m${s}\x1b[0m`,

23 blue: s => `\x1b[34m${s}\x1b[0m`,

24 cyan: s => `\x1b[36m${s}\x1b[0m`,

25 bold: s => `\x1b[1m${s}\x1b[0m`,

26 dim: s => `\x1b[2m${s}\x1b[0m`,

Lines 64-104javascript

65const IAC_RULES = [

66 { id: 'IAC-TF-001', name: 'Open SSH Access (22)', re: /ingress\s*\{[^}]*from_port\s*=\s*22[^}]*to_port\s*=\s*22[^}]*cidr_blocks\s

Lines 290-330javascript

290 console.log(` ${c.dim('ID:')} ${f.id || 'N/A'}`)

291 console.log(` ${c.dim('File:')} ${f.file_path}:${f.line_start} ${c.dim('Rule:')

Lines 385-432javascript

385 backendUrl: normalizedUrl,

386 apiKey,

387 orgId,

388 supabaseAnonKey: anonKey

389 })

390 console.log(c.green('\n✓ CLI fully configured and authenticated.\n'))

391}

392

393async function cmdLogin(args

Lines 690-730javascript

690\`\`\`python

691# UNSAFE:

692import pickle

693with open("state.pkl", "rb") as f:

694 data = pickle.load(f)

695

696# SECURE ALTERNATIVE (using JSON):

697import json

698with open("state.json", "r") as f:

699 data = json.load(f)

700\`\`\`

701`,

702 'SECRET-AWS-001':

•matchType = previous_version_dangerous_delta matchedPackage = omniguard-enterprise-cli@1.1.1 matchedIdentity = npm:[redacted]:1.1.1 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg

Source & flagged code

8 flagged · loading source

src/index.jsView file

310patternName = supabase_service_key severity = critical line = 310 matchedText = const an...BVE'

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/index.jsView on unpkg · L310

310patternName = supabase_service_key severity = critical line = 310 matchedText = const an...BVE'

Critical

Secret Pattern

Supabase service role key (JWT) in src/index.js

src/index.jsView on unpkg · L310

405patternName = supabase_service_key severity = critical line = 405 matchedText = anonKey ...BVE'

Critical

Secret Pattern

Supabase service role key (JWT) in src/index.js

src/index.jsView on unpkg · L405

412patternName = supabase_service_key severity = critical line = 412 matchedText = anonKey ...BVE'

Critical

Secret Pattern

Supabase service role key (JWT) in src/index.js

src/index.jsView on unpkg · L412

710patternName = aws_access_key severity = critical line = 710 matchedText = const aw...LE';

Critical

Secret Pattern

AWS access key ID in src/index.js

src/index.jsView on unpkg · L710

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg

84{ id: 'SAST-CRYPTO-001', name: 'Weak Hash MD5', re: /createHash\s*\(\s*["']md5["']/gi, sev: 'high' }, L85: { id: 'SAST-EVAL-001', name: 'eval() Usage', re: /\beval\s*\(/g, sev: 'high' }, L86: { id: 'SAST-PATH-001', name: 'Path Traversal', re: /\.\.\/|path\.join\([^)]*req\.|path\.join\([^)]*params\./gi, sev: 'high' }

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/index.jsView on unpkg · L84

6const path = require('path') L7: const http = require('http') L8: const https = require('https') L9: const readline = require('readline') L10: const { execSync, spawn } = require('child_process') L11: ... L16: const VERSION = '1.2.0' L17: const LOG_FILE = path.join(os.homedir(), '.omniguard', 'daemon.log') L18: ... L30: return new Promise(resolve => { L31: const rl = readline.createInterface({ input: process.stdin, output: process.stdout }) L32: if (!hidden) return rl.question(question, answer => { rl.close(); resolve(answer) })

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/index.jsView on unpkg · L6

Findings

5 Critical1 High2 Medium6 Low

CriticalCritical Secretsrc/index.js

CriticalSecret Patternsrc/index.js

HighPrevious Version Dangerous Deltasrc/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvalsrc/index.js

LowWeak Cryptosrc/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

src/index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2'use strict'

4const fs = require('fs')

5const os = require('os')

6const path = require('path')

7const http = require('http')

8const https = require('https')

9const readline = require('readline')

10const { execSync, spawn } = require('child_process')

12const api = require('./api')

13const tui = require('./tui')

14const sec = require('./enterprise-security')

16const VERSION = '1.2.0'

17const LOG_FILE = path.join(os.homedir(), '.omniguard', 'daemon.log')

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/index.jsView on unpkg · L6

19const c = {

20 red: s => `\x1b[31m${s}\x1b[0m`,

21 yellow: s => `\x1b[33m${s}\x1b[0m`,

22 green: s => `\x1b[32m${s}\x1b[0m`,

23 blue: s => `\x1b[34m${s}\x1b[0m`,

24 cyan: s => `\x1b[36m${s}\x1b[0m`,

25 bold: s => `\x1b[1m${s}\x1b[0m`,

26 dim: s => `\x1b[2m${s}\x1b[0m`,

Lines 64-104javascript

65const IAC_RULES = [

66 { id: 'IAC-TF-001', name: 'Open SSH Access (22)', re: /ingress\s*\{[^}]*from_port\s*=\s*22[^}]*to_port\s*=\s*22[^}]*cidr_blocks\s

Lines 290-330javascript

290 console.log(` ${c.dim('ID:')} ${f.id || 'N/A'}`)

291 console.log(` ${c.dim('File:')} ${f.file_path}:${f.line_start} ${c.dim('Rule:')

Lines 385-432javascript

385 backendUrl: normalizedUrl,

386 apiKey,

387 orgId,

388 supabaseAnonKey: anonKey

389 })

390 console.log(c.green('\n✓ CLI fully configured and authenticated.\n'))

391}

392

393async function cmdLogin(args

Lines 690-730javascript

690\`\`\`python

691# UNSAFE:

692import pickle

693with open("state.pkl", "rb") as f:

694 data = pickle.load(f)

695

696# SECURE ALTERNATIVE (using JSON):

697import json

698with open("state.json", "r") as f:

699 data = json.load(f)

700\`\`\`

701`,

702 'SECRET-AWS-001':

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.jsView on unpkg