registry / sap-ux-sap-systems-ext / 1.0.9
sap-ux-sap-systems-ext@1.0.9
Enables you to store connection information for remote SAP systems.
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
dist/extension.js8.90 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsDynamicRequireHighEntropyStringsUrlStringsga.support.sap.comhelp.sap.comschemas.microsoft.comwww.sap.comwww.w3.org
Source & flagged code
4 flaggeddist/webapp/store.jsView file
74patternName = generic_password
severity = medium
line = 74
matchedText = Translat...y();
Medium
dist/zowe-keyring-wrapper.jsView file
5L6: const { join } = require('path');
L7: const { existsSync } = require('fs');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/zowe-keyring-wrapper.jsView on unpkg · L5prebuilds/keyring.linux-x64-musl.nodeView file
•
Findings
2 High6 Medium5 Low
HighObfuscated
HighOversized Source Filedist/extension.js
MediumSecret Patterndist/webapp/store.js
MediumDynamic Requiredist/zowe-keyring-wrapper.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryprebuilds/keyring.linux-x64-musl.node
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to sap-ux-sap-systems-ext@1.0.9.
See all versions of sap-ux-sap-systems-ext for other recorded verdicts.
- Review the evidence and your use of sap-ux-sap-systems-ext@1.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.