registry / sap-ux-sap-systems-ext / 1.0.45
sap-ux-sap-systems-ext@1.0.45
⚠ Under reviewEnables you to store connection information for remote SAP systems.
AI Security Review
scanned 7d ago · by lpm-firewall-aiStatic inspection confirms the extension dynamically loads native keyring binaries, but their behavior remains unresolved and no attack is established. Manual review is needed to assess those executable artifacts.
Static reason
One or more suspicious static signals were detected.
Trigger
Opening the extension view or invoking one of its commands can activate the extension and load the platform-specific binary.
Impact
The binary's effects cannot be determined from the inspected evidence.
Mechanism
The wrapper selects a binary for the current platform and loads it with require; available analysis leaves native call targets uninspected.
AI rationale
Static inspection confirms the extension dynamically loads native keyring binaries, but their behavior remains unresolved and no attack is established. Manual review is needed to assess those executable artifacts.
Evidence
dist/zowe-keyring-wrapper.jsdist/extension.js.lpm-inspection-RXA6QU/9-c329cf10ae32.txtpackage.jsonprebuilds/keyring.linux-x64-musl.nodeprebuilds/keyring.darwin-arm64.nodeprebuilds/keyring.linux-x64-gnu.nodeprebuilds/keyring.darwin-x64.nodeprebuilds/keyring.win32-ia32-msvc.nodeprebuilds/keyring.linux-arm64-musl.nodeprebuilds/keyring.linux-ia32-gnu.nodeprebuilds/keyring.linux-arm-gnueabihf.nodeprebuilds/keyring.linux-arm64-gnu.nodeprebuilds/keyring.win32-x64-msvc.nodeprebuilds/keyring.win32-arm64-msvc.node
Decision evidence
public snapshotAI called this Manual Review at 98.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The extension loads a platform-specific native keyring binary through a wrapper.
- The offline analysis of one native binary reports uninspected call targets, so its behavior is unresolved.
Evidence against
- The manifest has no install lifecycle hook and activates on the extension view or user commands.
Behavioral surface
DynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Oversized source lightweight scan
dist/extension.js11.1 MB file, sampled 256 KB
Source & flagged code
4 flaggeddist/webapp/store.jsView file
68patternName = generic_password
severity = medium
line = 68
Medium
dist/zowe-keyring-wrapper.jsView file
5L6: const { join } = require('path');
L7: const { existsSync } = require('fs');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/zowe-keyring-wrapper.jsView on unpkg · L5prebuilds/keyring.linux-x64-musl.nodeView file
•path = prebuilds/keyring.linux-x64-musl.node
kind = native_binary
sizeBytes = 393832
magicHex = [redacted]
Findings
7 Medium6 Low
MediumSecret Patterndist/webapp/store.js
MediumDynamic Requiredist/zowe-keyring-wrapper.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryprebuilds/keyring.linux-x64-musl.node
MediumOversized Source Filedist/extension.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to sap-ux-sap-systems-ext@1.0.45.
See all versions of sap-ux-sap-systems-ext for other recorded verdicts.
- Review the evidence and your use of sap-ux-sap-systems-ext@1.0.45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.