registry  /  sass-template-common  /  0.10.12

sass-template-common@0.10.12

Librería web, maqueta de configuración y componentes para proyectos sass.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.35 MB of source, external domains: api.issuu.com, blob.diariodelistmo.com, es.wikipedia.org, example.com, fb.me, fonts.googleapis.com, fonts.gstatic.com, goamg.amplifyapp.com, googleads.g.doubleclick.net, imagendelgolfo.cms-medios.com, imagendelgolfo.mx, pagead2.googlesyndication.com, platform.twitter.com, recaptchaenterprise.googleapis.com, sb.scorecardresearch.com, schema.org, sdk.mrf.io, securepubads.g.doubleclick.net, tpc.googlesyndication.com, twitter.com, wa.me, www.bluestack.la, www.facebook.com, www.google.com, www.googletagmanager.com, www.gstatic.com, www.linkedin.com, www.w3.org, www.youtube.com

Source & flagged code

11 flagged · loading source
dist/sass-template-common.umd.cjsView file
407patternName = generic_password severity = medium line = 407 matchedText = `,dd="__....6\r
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L407
541patternName = generic_password severity = medium line = 541 matchedText = `}}catch...")+`
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L541
542patternName = generic_password severity = medium line = 542 matchedText = Valid ke...}));
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L542
package.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg
dist/sass-template-common.jsView file
6878patternName = generic_password severity = medium line = 6878 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6878
6938patternName = generic_password severity = medium line = 6938 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6938
7000patternName = generic_password severity = medium line = 7000 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L7000
7060patternName = generic_password severity = medium line = 7060 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L7060
14572patternName = generic_password severity = medium line = 14572 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L14572
16995patternName = generic_password severity = medium line = 16995 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16995
17983patternName = generic_password severity = medium line = 17983 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L17983

Findings

1 Critical13 Medium5 Low
CriticalManifest Confusionpackage.json
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License