registry  /  sass-template-common  /  0.10.0

sass-template-common@0.10.0

Librería web, maqueta de configuración y componentes para proyectos sass.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.31 MB of source, external domains: api.issuu.com, blob.diariodelistmo.com, es.wikipedia.org, example.com, fb.me, fonts.googleapis.com, fonts.gstatic.com, goamg.amplifyapp.com, googleads.g.doubleclick.net, imagendelgolfo.cms-medios.com, imagendelgolfo.mx, pagead2.googlesyndication.com, platform.twitter.com, recaptchaenterprise.googleapis.com, sb.scorecardresearch.com, schema.org, sdk.mrf.io, securepubads.g.doubleclick.net, tpc.googlesyndication.com, twitter.com, wa.me, www.bluestack.la, www.facebook.com, www.google.com, www.googletagmanager.com, www.gstatic.com, www.linkedin.com, www.w3.org, www.youtube.com

Source & flagged code

11 flagged · loading source
dist/sass-template-common.umd.cjsView file
404patternName = generic_password severity = medium line = 404 matchedText = `,bc="__....6\r
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L404
538patternName = generic_password severity = medium line = 538 matchedText = `}}catch...")+`
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L538
539patternName = generic_password severity = medium line = 539 matchedText = Valid ke...}));
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L539
package.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg
dist/sass-template-common.jsView file
6337patternName = generic_password severity = medium line = 6337 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6337
6397patternName = generic_password severity = medium line = 6397 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6397
6459patternName = generic_password severity = medium line = 6459 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6459
6519patternName = generic_password severity = medium line = 6519 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6519
14031patternName = generic_password severity = medium line = 14031 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L14031
16454patternName = generic_password severity = medium line = 16454 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16454
17442patternName = generic_password severity = medium line = 17442 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L17442

Findings

1 Critical13 Medium5 Low
CriticalManifest Confusionpackage.json
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License