registry / react-native-update / 10.42.10

react-native-update@10.42.10

react-native hot update

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 50 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 35 file(s), 141 KB of source, external domains: api.cresc.app, api.cresc.dev, cdn.jsdelivr.net, gitee.com, update.react-native.cn, update.reactnative.cn

Source & flagged code

42 flagged

package.jsonView file

Lines 1-29json

2 "name": "react-native-update",

3 "version": "10.42.10",

4 "description": "react-native hot update",

5 "main": "src/index",

6 "scripts": {

7 "prepublishOnly": "NODE_ENV=production bun scripts/prepublish.ts",

8 "publish:local": "SKIP_NATIVE_BUILD=1 npm publish",

9 "postinstall": "node scripts/check-expo-version.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

10 "prepack": "bun submodule && bun lint",

11 "lint": "eslint \"src/*.@(ts|tsx|js|jsx)\" && tsc --noEmit",

12 "submodule": "git submodule update --init --recursive",

13 "test": "bun test src/__tests__",

14 "test:patch-core": "./scripts/test-patch-core.sh",

15 "build:harmony-har": "node scripts/build-harmony-har.js",

16 "build:so": "bun submodule && $ANDROID_HOME/ndk/28.2.13676358/ndk-build NDK_PROJECT_PATH=android APP_BUILD_SCRIPT=android/jni/Android.mk NDK_APPLICATION_MK=android/jni/Application.mk NDK_LIBS_OUT=android/lib",

17 "build:ios-debug": "cd Example/e2etest && bun && detox build --configuration ios.sim.debug",

18 "build:ios-release": "cd Example/e2etest && bun && detox build --configuration ios.sim.release",

19 "test:ios-debug": "cd Example/e2etest && E2E_PLATFORM=ios detox test --configuration ios.sim.debug",

20 "test:ios-release": "cd Example/e2etest && E2E_PLATFORM=ios bun detox test --configuration ios.sim.release",

21 "build:android-debug": "cd Example/e2etest && bun && detox build --configuration android.emu.debug",

22 "build:android-release": "cd Example/e2etest && bun && detox build --configuration android.emu.release",

23 "test:android-release": "cd Example/e2etest && E2E_PLATFORM=android bun detox test --configuration android.emu.release --headless --record-logs all",

24 "test:android-debug": "cd Example/e2etest && E2E_PLATFORM=android detox test --configuration android.emu.debug --headless --record-logs all",

25 "e2e:ios": "bun build:ios-release && bun test:ios-release",

26 "e2e:android": "bun build:android-release && bun test:android-release",

27 "tests:emulator:prepare": "cd .github/workflows/scripts/functions && bun && bun build",

28 "tests:emulator:start-ci": "bun tests:emulator:prepare && cd ./.github/workflows/scripts && ./start-firebase-emulator.sh",

29 "tests:packager:jet-ci": "cd Example/e2etest && cross-env TMPDIR=$HOME/.metro REACT_DEBUGGER=\"echo nope\" node_modules/.bin/react-native start --no-interactive",

.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.jsView file

76patternName = aws_access_key severity = critical line = 76 matchedText = R = "dat...==";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.jsView on unpkg · L76

76patternName = aws_access_key severity = critical line = 76 matchedText = R = "dat...==";

Critical

Secret Pattern

AWS access key ID in .bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.js

.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.jsView on unpkg · L76

.bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermescView file

•path = .bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermesc kind = native_binary sizeBytes = 3381664 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

.bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermescView on unpkg

.bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasmView file

•path = .bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasm kind = wasm_module sizeBytes = 8090734 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

.bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasmView on unpkg

.bun-cache/debug@2.6.9@@@1/MakefileView file

•path = .bun-cache/debug@2.6.9@@@1/Makefile kind = payload_in_excluded_dir sizeBytes = 1059 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.bun-cache/debug@2.6.9@@@1/MakefileView on unpkg

•path = .bun-cache/debug@2.6.9@@@1/Makefile kind = build_helper sizeBytes = 1059 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.bun-cache/debug@2.6.9@@@1/MakefileView on unpkg

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView file

•path = .bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar kind = high_entropy_blob sizeBytes = 63721 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = .bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar kind = compressed_blob sizeBytes = 63721 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = .bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar kind = nested_archive_needs_inspection sizeBytes = 63721 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

.bun-cache/typescript@5.8.3@@@1/lib/typescript.jsView file

•path = .bun-cache/typescript@5.8.3@@@1/lib/typescript.js kind = oversized_source_file sizeBytes = 9066411 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

.bun-cache/typescript@5.8.3@@@1/lib/typescript.jsView on unpkg

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView file

Lines 789-905typescript

789 *

790 * * As a `stream` that is both readable and writable, where plain unencrypted

791 * data is written to produce encrypted data on the readable side, or

792 * * Using the `cipher.update()` and `cipher.final()` methods to produce

793 * the encrypted data.

794

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView file

787patternName = generic_password severity = medium line = 787 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L787

831patternName = generic_password severity = medium line = 831 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L831

863patternName = generic_password severity = medium line = 863 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L863

1048patternName = generic_password severity = medium line = 1048 matchedText = * const ...ey';

.bun-cache/commander@10.0.1@@@1/Readme.mdView file

569patternName = generic_password severity = medium line = 569 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .bun-cache/commander@10.0.1@@@1/Readme.md

.bun-cache/commander@10.0.1@@@1/Readme.mdView on unpkg · L569

.bun-cache/commander@9.5.0@@@1/Readme.mdView file

569patternName = generic_password severity = medium line = 569 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .bun-cache/commander@9.5.0@@@1/Readme.md

.bun-cache/commander@9.5.0@@@1/Readme.mdView on unpkg · L569

.bun-cache/socks@2.8.4@@@1/README.mdView file

431patternName = generic_password severity = medium line = 431 matchedText = password...ies.

Medium

Secret Pattern

Hardcoded password in .bun-cache/socks@2.8.4@@@1/README.md

.bun-cache/socks@2.8.4@@@1/README.mdView on unpkg · L431

.bun-cache/commander@11.1.0@@@1/Readme.mdView file

572patternName = generic_password severity = medium line = 572 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .bun-cache/commander@11.1.0@@@1/Readme.md

.bun-cache/commander@11.1.0@@@1/Readme.mdView on unpkg · L572

.bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = import*a...ne};

Critical

Secret Pattern

RSA private key in .bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.js

.bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.jsView on unpkg · L1

.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.tsView file

46patternName = generic_password severity = medium line = 46 matchedText = * pa...ct',

Medium

Secret Pattern

Hardcoded password in .bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.ts

.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.tsView on unpkg · L46

62patternName = generic_password severity = medium line = 62 matchedText = * pa...ct',

Medium

Secret Pattern

Hardcoded password in .bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.ts

.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.tsView on unpkg · L62

.bun-cache/bun-types@1.3.11@@@1/globals.d.tsView file

1972patternName = aws_access_key severity = critical line = 1972 matchedText = * ac...LE",

Critical

Secret Pattern

AWS access key ID in .bun-cache/bun-types@1.3.11@@@1/globals.d.ts

.bun-cache/bun-types@1.3.11@@@1/globals.d.tsView on unpkg · L1972

.bun-cache/bun-types@1.3.11@@@1/sql.d.tsView file

392patternName = generic_password severity = medium line = 392 matchedText = * pass...ss',

Medium

Secret Pattern

Hardcoded password in .bun-cache/bun-types@1.3.11@@@1/sql.d.ts

.bun-cache/bun-types@1.3.11@@@1/sql.d.tsView on unpkg · L392

.bun-cache/firebase-tools@15.11.0@@@1/lib/api.jsView file

48patternName = google_api_key severity = high line = 48 matchedText = const dy...Q");

High

Secret Pattern

Google API key in .bun-cache/firebase-tools@15.11.0@@@1/lib/api.js

.bun-cache/firebase-tools@15.11.0@@@1/lib/api.jsView on unpkg · L48

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView file

102patternName = generic_password severity = medium line = 102 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L102

130patternName = generic_password severity = medium line = 130 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L130

166patternName = generic_password severity = medium line = 166 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L166

.bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.mdView file

109patternName = generic_password severity = medium line = 109 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in .bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.md

.bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.mdView on unpkg · L109

.bun-cache/smart-buffer@4.2.0@@@1/README.mdView file

108patternName = generic_password severity = medium line = 108 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in .bun-cache/smart-buffer@4.2.0@@@1/README.md

.bun-cache/smart-buffer@4.2.0@@@1/README.mdView on unpkg · L108

.bun-cache/basic-ftp@5.0.5@@@1/README.mdView file

38patternName = generic_password severity = medium line = 38 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in .bun-cache/basic-ftp@5.0.5@@@1/README.md

.bun-cache/basic-ftp@5.0.5@@@1/README.mdView on unpkg · L38

.bun-cache/gtoken@7.1.0@@@1/README.mdView file

89patternName = private_key_rsa severity = critical line = 89 matchedText = const ke.....';

Critical

Secret Pattern

RSA private key in .bun-cache/gtoken@7.1.0@@@1/README.md

.bun-cache/gtoken@7.1.0@@@1/README.mdView on unpkg · L89

.bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.jsView file

19patternName = private_key_rsa severity = critical line = 19 matchedText = if (type...0) {

Critical

Secret Pattern

RSA private key in .bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.js

.bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.jsView on unpkg · L19

Source & flagged code

42 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/check-expo-version.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.jsView file

76patternName = aws_access_key severity = critical line = 76 matchedText = R = "dat...==";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.jsView on unpkg · L76

76patternName = aws_access_key severity = critical line = 76 matchedText = R = "dat...==";

Critical

Secret Pattern

AWS access key ID in .bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.js

.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.jsView on unpkg · L76

.bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermescView file

•path = .bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermesc kind = native_binary sizeBytes = 3381664 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

.bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermescView on unpkg

.bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasmView file

•path = .bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasm kind = wasm_module sizeBytes = 8090734 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

.bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasmView on unpkg

.bun-cache/debug@2.6.9@@@1/MakefileView file

•path = .bun-cache/debug@2.6.9@@@1/Makefile kind = payload_in_excluded_dir sizeBytes = 1059 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.bun-cache/debug@2.6.9@@@1/MakefileView on unpkg

•path = .bun-cache/debug@2.6.9@@@1/Makefile kind = build_helper sizeBytes = 1059 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

.bun-cache/debug@2.6.9@@@1/MakefileView on unpkg

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView file

•path = .bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar kind = high_entropy_blob sizeBytes = 63721 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = .bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar kind = compressed_blob sizeBytes = 63721 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView on unpkg

•path = .bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar kind = nested_archive_needs_inspection sizeBytes = 63721 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jarView on unpkg

.bun-cache/typescript@5.8.3@@@1/lib/typescript.jsView file

•path = .bun-cache/typescript@5.8.3@@@1/lib/typescript.js kind = oversized_source_file sizeBytes = 9066411 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

.bun-cache/typescript@5.8.3@@@1/lib/typescript.jsView on unpkg

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView file

809patternName = generic_password severity = medium line = 809 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView on unpkg · L809

853patternName = generic_password severity = medium line = 853 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView on unpkg · L853

885patternName = generic_password severity = medium line = 885 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView on unpkg · L885

1070patternName = generic_password severity = medium line = 1070 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView on unpkg · L1070

1113patternName = generic_password severity = medium line = 1113 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView on unpkg · L1113

1137patternName = generic_password severity = medium line = 1137 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

.bun-cache/@types/node@25.5.0@@@1/crypto.d.tsView on unpkg · L1137

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView file

787patternName = generic_password severity = medium line = 787 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L787

831patternName = generic_password severity = medium line = 831 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L831

863patternName = generic_password severity = medium line = 863 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L863

1048patternName = generic_password severity = medium line = 1048 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L1048

1091patternName = generic_password severity = medium line = 1091 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L1091

1115patternName = generic_password severity = medium line = 1115 matchedText = * const ...ey';

Medium

Secret Pattern

Hardcoded password in .bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

.bun-cache/@types/node@22.15.2@@@1/crypto.d.tsView on unpkg · L1115

.bun-cache/commander@10.0.1@@@1/Readme.mdView file

569patternName = generic_password severity = medium line = 569 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .bun-cache/commander@10.0.1@@@1/Readme.md

.bun-cache/commander@10.0.1@@@1/Readme.mdView on unpkg · L569

.bun-cache/commander@9.5.0@@@1/Readme.mdView file

569patternName = generic_password severity = medium line = 569 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .bun-cache/commander@9.5.0@@@1/Readme.md

.bun-cache/commander@9.5.0@@@1/Readme.mdView on unpkg · L569

.bun-cache/socks@2.8.4@@@1/README.mdView file

431patternName = generic_password severity = medium line = 431 matchedText = password...ies.

Medium

Secret Pattern

Hardcoded password in .bun-cache/socks@2.8.4@@@1/README.md

.bun-cache/socks@2.8.4@@@1/README.mdView on unpkg · L431

.bun-cache/commander@11.1.0@@@1/Readme.mdView file

572patternName = generic_password severity = medium line = 572 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .bun-cache/commander@11.1.0@@@1/Readme.md

.bun-cache/commander@11.1.0@@@1/Readme.mdView on unpkg · L572

.bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.jsView file

1patternName = private_key_rsa severity = critical line = 1 matchedText = import*a...ne};

Critical

Secret Pattern

RSA private key in .bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.js

.bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.jsView on unpkg · L1

.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.tsView file

46patternName = generic_password severity = medium line = 46 matchedText = * pa...ct',

Medium

Secret Pattern

Hardcoded password in .bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.ts

.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.tsView on unpkg · L46

62patternName = generic_password severity = medium line = 62 matchedText = * pa...ct',

Medium

Secret Pattern

Hardcoded password in .bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.ts

.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.tsView on unpkg · L62

.bun-cache/bun-types@1.3.11@@@1/globals.d.tsView file

1972patternName = aws_access_key severity = critical line = 1972 matchedText = * ac...LE",

Critical

Secret Pattern

AWS access key ID in .bun-cache/bun-types@1.3.11@@@1/globals.d.ts

.bun-cache/bun-types@1.3.11@@@1/globals.d.tsView on unpkg · L1972

.bun-cache/bun-types@1.3.11@@@1/sql.d.tsView file

392patternName = generic_password severity = medium line = 392 matchedText = * pass...ss',

Medium

Secret Pattern

Hardcoded password in .bun-cache/bun-types@1.3.11@@@1/sql.d.ts

.bun-cache/bun-types@1.3.11@@@1/sql.d.tsView on unpkg · L392

.bun-cache/firebase-tools@15.11.0@@@1/lib/api.jsView file

48patternName = google_api_key severity = high line = 48 matchedText = const dy...Q");

High

Secret Pattern

Google API key in .bun-cache/firebase-tools@15.11.0@@@1/lib/api.js

.bun-cache/firebase-tools@15.11.0@@@1/lib/api.jsView on unpkg · L48

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView file

102patternName = generic_password severity = medium line = 102 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L102

130patternName = generic_password severity = medium line = 130 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L130

166patternName = generic_password severity = medium line = 166 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L166

490patternName = generic_password severity = medium line = 490 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in .bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.mdView on unpkg · L490

.bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.mdView file

109patternName = generic_password severity = medium line = 109 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in .bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.md

.bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.mdView on unpkg · L109

.bun-cache/smart-buffer@4.2.0@@@1/README.mdView file

108patternName = generic_password severity = medium line = 108 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in .bun-cache/smart-buffer@4.2.0@@@1/README.md

.bun-cache/smart-buffer@4.2.0@@@1/README.mdView on unpkg · L108

.bun-cache/basic-ftp@5.0.5@@@1/README.mdView file

38patternName = generic_password severity = medium line = 38 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in .bun-cache/basic-ftp@5.0.5@@@1/README.md

.bun-cache/basic-ftp@5.0.5@@@1/README.mdView on unpkg · L38

.bun-cache/gtoken@7.1.0@@@1/README.mdView file

89patternName = private_key_rsa severity = critical line = 89 matchedText = const ke.....';

Critical

Secret Pattern

RSA private key in .bun-cache/gtoken@7.1.0@@@1/README.md

.bun-cache/gtoken@7.1.0@@@1/README.mdView on unpkg · L89

.bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.jsView file

19patternName = private_key_rsa severity = critical line = 19 matchedText = if (type...0) {

Critical

Secret Pattern

RSA private key in .bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.js

.bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.jsView on unpkg · L19

Findings

6 Critical5 High33 Medium6 Low

CriticalCritical Secret.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.js

CriticalSecret Pattern.bun-cache/@tootallnate/quickjs-emscripten@0.23.0@@@1/dist/generated/emscripten-module.WASM_RELEASE_SYNC.js

CriticalSecret Pattern.bun-cache/@react-native/debugger-frontend@0.73.3@@@1/dist/third-party/front_end/panels/webauthn/webauthn.js

CriticalSecret Pattern.bun-cache/bun-types@1.3.11@@@1/globals.d.ts

CriticalSecret Pattern.bun-cache/gtoken@7.1.0@@@1/README.md

CriticalSecret Pattern.bun-cache/jose@6.2.2@@@1/dist/webapi/key/import.js

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blob.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar

HighPayload In Excluded Dir.bun-cache/debug@2.6.9@@@1/Makefile

HighOversized Source File.bun-cache/typescript@5.8.3@@@1/lib/typescript.js

HighSecret Pattern.bun-cache/firebase-tools@15.11.0@@@1/lib/api.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binary.bun-cache/react-native@0.73.11@@@1/sdks/hermesc/linux64-bin/hermesc

MediumShips Wasm Module.bun-cache/@electric-sql/pglite@0.2.17@@@1/dist/postgres.wasm

MediumShips Build Helper.bun-cache/debug@2.6.9@@@1/Makefile

MediumShips Compressed Blob.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar

MediumStructural Risk Force Deep Review

MediumSecret Pattern.bun-cache/@types/node@25.5.0@@@1/crypto.d.ts

MediumSecret Pattern.bun-cache/@types/node@22.15.2@@@1/crypto.d.ts

MediumSecret Pattern.bun-cache/commander@10.0.1@@@1/Readme.md

MediumSecret Pattern.bun-cache/commander@9.5.0@@@1/Readme.md

MediumSecret Pattern.bun-cache/socks@2.8.4@@@1/README.md

MediumSecret Pattern.bun-cache/commander@11.1.0@@@1/Readme.md

MediumSecret Pattern.bun-cache/hono@4.12.9@@@1/dist/types/middleware/basic-auth/index.d.ts

MediumSecret Pattern.bun-cache/bun-types@1.3.11@@@1/sql.d.ts

MediumSecret Pattern.bun-cache/@google-cloud/cloud-sql-connector@1.7.1@@@1/README.md

MediumSecret Pattern.bun-cache/smart-buffer@4.2.0@@@1/docs/README_v3.md

MediumSecret Pattern.bun-cache/smart-buffer@4.2.0@@@1/README.md

MediumSecret Pattern.bun-cache/basic-ftp@5.0.5@@@1/README.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspection.bun-cache/@react-native/gradle-plugin@0.73.5@@@1/gradle/wrapper/gradle-wrapper.jar