registry  /  sass-template-common  /  0.10.10

sass-template-common@0.10.10

Librería web, maqueta de configuración y componentes para proyectos sass.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.34 MB of source, external domains: api.issuu.com, blob.diariodelistmo.com, es.wikipedia.org, example.com, fb.me, fonts.googleapis.com, fonts.gstatic.com, goamg.amplifyapp.com, googleads.g.doubleclick.net, imagendelgolfo.cms-medios.com, imagendelgolfo.mx, pagead2.googlesyndication.com, platform.twitter.com, recaptchaenterprise.googleapis.com, sb.scorecardresearch.com, schema.org, sdk.mrf.io, securepubads.g.doubleclick.net, tpc.googlesyndication.com, twitter.com, wa.me, www.bluestack.la, www.facebook.com, www.google.com, www.googletagmanager.com, www.gstatic.com, www.linkedin.com, www.w3.org, www.youtube.com

Source & flagged code

11 flagged · loading source
dist/sass-template-common.umd.cjsView file
406patternName = generic_password severity = medium line = 406 matchedText = `,td="__....6\r
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L406
540patternName = generic_password severity = medium line = 540 matchedText = `}}catch...")+`
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L540
541patternName = generic_password severity = medium line = 541 matchedText = Valid ke...}));
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L541
package.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg
dist/sass-template-common.jsView file
6719patternName = generic_password severity = medium line = 6719 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6719
6779patternName = generic_password severity = medium line = 6779 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6779
6841patternName = generic_password severity = medium line = 6841 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6841
6901patternName = generic_password severity = medium line = 6901 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6901
14413patternName = generic_password severity = medium line = 14413 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L14413
16836patternName = generic_password severity = medium line = 16836 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16836
17824patternName = generic_password severity = medium line = 17824 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L17824

Findings

1 Critical13 Medium5 Low
CriticalManifest Confusionpackage.json
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License