registry  /  profoundjs  /  7.32.3

profoundjs@7.32.3

Profound.js Framework and Server

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 50 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEvalFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 587 file(s), 54.6 MB of source, external domains: jshint.com, www.example.com, www.w3.org
Oversized source lightweight scan
htdocs/fusionchartsxt/js/maps/fusioncharts.parana.js2.21 MB file, sampled 256 KB
Minified

Source & flagged code

42 flagged · loading source
package.jsonView file
•scripts.postinstall = node setup/install.js
High
Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg
•scripts.postinstall = node setup/install.js
Medium
Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg
setup/completeInstall.jsView file
15L16: const child_process = require("child_process"); L17: const fs = require("fs");
High
Child Process

Package source references child process execution.

setup/completeInstall.jsView on unpkg · L15
351patternName = generic_password severity = medium line = 351 matchedText = password...rd",
Medium
Secret Pattern

Package contains a possible secret pattern.

setup/completeInstall.jsView on unpkg · L351
166const configPath = iutils.getConfigPath(); L167: // Note: because an eval() may set the "config" variable subsequently, "config" cannot be a const. L168: // eslint-disable-next-line prefer-const
Low
Eval

Package source references a known benign dynamic code generation pattern.

setup/completeInstall.jsView on unpkg · L166
auto-testing/headless-worker.jsView file
2"use strict"; L3: const path= require("path"); L4: const argv = require("minimist")(process.argv.slice(2));
Medium
Dynamic Require

Package source references dynamic require/import behavior.

auto-testing/headless-worker.jsView on unpkg · L2
setup/setup.jsView file
187log(`Installing idb-connector...`); L188: child_process.execSync( L189: `npm install idb-connector@"${idb_connector_version}"`, L190: {
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

setup/setup.jsView on unpkg · L187
htdocs/profoundui/proddata/applet/PCIntegration.jarView file
•path = [redacted].jar kind = compressed_blob sizeBytes = 15120 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

htdocs/profoundui/proddata/applet/PCIntegration.jarView on unpkg
•path = [redacted].jar kind = nested_archive_needs_inspection sizeBytes = 15120 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

htdocs/profoundui/proddata/applet/PCIntegration.jarView on unpkg
htdocs/profoundui/proddata/fonts/OpenSansV6.woffView file
•path = [redacted].woff kind = high_entropy_blob sizeBytes = 21956 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

htdocs/profoundui/proddata/fonts/OpenSansV6.woffView on unpkg
htdocs/vs/language/typescript/tsWorker.jsView file
•path = [redacted].js kind = oversized_source_file sizeBytes = 2967805 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

htdocs/vs/language/typescript/tsWorker.jsView on unpkg
htdocs/profoundui/proddata/js/runtime.jsView file
1931patternName = generic_password severity = medium line = 1931 matchedText = "Sort De...n"];
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L1931
1973patternName = generic_password severity = medium line = 1973 matchedText = a["sort ...ob";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L1973
2017patternName = generic_password severity = medium line = 2017 matchedText = "alles a...p"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2017
2063patternName = generic_password severity = medium line = 2063 matchedText = "Anterio...n"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2063
2111patternName = generic_password severity = medium line = 2111 matchedText = a.column...d"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2111
2160patternName = generic_password severity = medium line = 2160 matchedText = "R\u00e9...nt";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2160
2209patternName = generic_password severity = medium line = 2209 matchedText = "Trier.....b"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2209
2264patternName = generic_password severity = medium line = 2264 matchedText = a.rows="...d4";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2264
2308patternName = generic_password severity = medium line = 2308 matchedText = a.page="...r"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2308
2366patternName = generic_password severity = medium line = 2366 matchedText = a.expand...d"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2366
2425patternName = generic_password severity = medium line = 2425 matchedText = a["sort ...n"]+
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2425
2568patternName = generic_password severity = medium line = 2568 matchedText = "\u6309\...n"];
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/runtime.js

htdocs/profoundui/proddata/js/runtime.jsView on unpkg · L2568
htdocs/profoundui/proddata/js/genie.jsView file
769patternName = generic_password severity = medium line = 769 matchedText = "Sort De...n"];
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L769
811patternName = generic_password severity = medium line = 811 matchedText = a["sort ...ob";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L811
855patternName = generic_password severity = medium line = 855 matchedText = "alles a...p"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L855
901patternName = generic_password severity = medium line = 901 matchedText = "Anterio...n"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L901
949patternName = generic_password severity = medium line = 949 matchedText = a.column...d"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L949
998patternName = generic_password severity = medium line = 998 matchedText = "R\u00e9...nt";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L998
1047patternName = generic_password severity = medium line = 1047 matchedText = "Trier.....b"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L1047
1102patternName = generic_password severity = medium line = 1102 matchedText = a.rows="...d4";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L1102
1146patternName = generic_password severity = medium line = 1146 matchedText = a.page="...r"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L1146
1204patternName = generic_password severity = medium line = 1204 matchedText = a.expand...d"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L1204
1263patternName = generic_password severity = medium line = 1263 matchedText = a["sort ...n"]+
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L1263
1406patternName = generic_password severity = medium line = 1406 matchedText = "\u6309\...n"];
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/genie.js

htdocs/profoundui/proddata/js/genie.jsView on unpkg · L1406
htdocs/profoundui/proddata/js/atrium.jsView file
123patternName = generic_password severity = medium line = 123 matchedText = "Sort De...n"];
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L123
165patternName = generic_password severity = medium line = 165 matchedText = a["sort ...ob";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L165
209patternName = generic_password severity = medium line = 209 matchedText = "alles a...p"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L209
255patternName = generic_password severity = medium line = 255 matchedText = "Anterio...n"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L255
303patternName = generic_password severity = medium line = 303 matchedText = a.column...d"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L303
352patternName = generic_password severity = medium line = 352 matchedText = "R\u00e9...nt";
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L352
401patternName = generic_password severity = medium line = 401 matchedText = "Trier.....b"]=
Medium
Secret Pattern

Hardcoded password in htdocs/profoundui/proddata/js/atrium.js

htdocs/profoundui/proddata/js/atrium.jsView on unpkg · L401

Findings

5 High37 Medium8 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processsetup/completeInstall.js
HighRuntime Package Installsetup/setup.js
HighShips High Entropy Blobhtdocs/profoundui/proddata/fonts/OpenSansV6.woff
HighOversized Source Filehtdocs/vs/language/typescript/tsWorker.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumSecret Patternsetup/completeInstall.js
MediumDynamic Requireauto-testing/headless-worker.js
MediumNetwork
MediumShips Compressed Blobhtdocs/profoundui/proddata/applet/PCIntegration.jar
MediumStructural Risk Force Deep Review
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/runtime.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/genie.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
MediumSecret Patternhtdocs/profoundui/proddata/js/atrium.js
LowScripts Present
LowEvalsetup/completeInstall.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionhtdocs/profoundui/proddata/applet/PCIntegration.jar
LowNo License