registry / sass-template-common / 0.9.221

sass-template-common@0.9.221

Librería web, maqueta de configuración y componentes para proyectos sass.

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 2 file(s), 1.27 MB of source, external domains: api.issuu.com, blob.diariodelistmo.com, es.wikipedia.org, example.com, fb.me, fonts.googleapis.com, fonts.gstatic.com, goamg.amplifyapp.com, imagendelgolfo.cms-medios.com, imagendelgolfo.mx, platform.twitter.com, recaptchaenterprise.googleapis.com, sb.scorecardresearch.com, schema.org, sdk.mrf.io, twitter.com, wa.me, www.bluestack.la, www.facebook.com, www.google.com, www.googletagmanager.com, www.gstatic.com, www.linkedin.com, www.w3.org, www.youtube.com

Source & flagged code

6 flagged

dist/sass-template-common.umd.cjsView file

537patternName = generic_password severity = medium line = 537 matchedText = `}}catch...")+`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L537

538patternName = generic_password severity = medium line = 538 matchedText = Valid ke...}));

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L538

package.jsonView file

Lines 4-44json

4 "type": "module",

5 "files": [

6 "dist"

7 ],

8 "main": "./dist/sass-template-common.umd.cjs",

9 "module": "./dist/sass-template-common.js",

10 "types": "./dist/sass-template-common.d.ts",

11 "exports": {

12 ".": {

13 "import": "./dist/sass-template-common.js",

14 "require": "./dist/sass-template-common.umd.cjs",

15 "types": "./dist/sass-template-common.d.ts",

16 "style": "./dist/sass-template-common.css"

17 },

18 "./styles.css": "./dist/sass-template-common.css",

19 "./layout.css": "./dist/layout.css",

20 "./note.css": "./dist/note.css",

21 "./ficha-video.css": "./dist/ficha-video.css",

22 "./ui/": "./dist/ui/"

23 },

24 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L24

25 "dev": "node server",

26 "build:audit": "vite build --config vite.audit.config.ts",

27 "build": "pnpm run build:audit && tsc -b && vite build && vite build --config vite.styles.config.ts",

28 "clean": "rm -rf dist node_modules/.tmp/tsconfig.app.tsbuildinfo node_modules/.tmp/tsconfig.node.tsbuildinfo tsconfig.tsbuildinfo",

29 "prepublishOnly": "pnpm run clean && pnpm run build",

30 "version:patch": "pnpm version patch --no-git-tag-version",

31 "version:minor": "pnpm version minor --no-git-tag-version",

32 "version:major": "pnpm version major --no-git-tag-version",

33 "release:patch": "pnpm run clean && pnpm run build && pnpm version patch && pnpm publish",

34 "release:minor": "pnpm run clean && pnpm run build && pnpm version minor && pnpm publish",

35 "lint": "eslint .",

36 "preview": "vite preview",

37 "build:client": "vite build --outDir dist/client --ssrManifest",

38 "build:server": "vite build --outDir dist/server --ssr ./entry-server.js"

39 },

40 "peerDependencies": {

41 "axios": "^1.13.2",

42 "dayjs": "^1.11.19",

43 "react": "^19.1.1",

44 "react-dom": "^19.1.1",

dist/sass-template-common.jsView file

13333patternName = generic_password severity = medium line = 13333 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L13333

15756patternName = generic_password severity = medium line = 15756 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L15756

16744patternName = generic_password severity = medium line = 16744 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16744

Source & flagged code

6 flagged · loading source

dist/sass-template-common.umd.cjsView file

537patternName = generic_password severity = medium line = 537 matchedText = `}}catch...")+`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L537

538patternName = generic_password severity = medium line = 538 matchedText = Valid ke...}));

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L538

package.jsonView file

•scripts registry_only=start

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

dist/sass-template-common.jsView file

13333patternName = generic_password severity = medium line = 13333 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L13333

15756patternName = generic_password severity = medium line = 15756 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L15756

16744patternName = generic_password severity = medium line = 16744 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16744

Findings

1 Critical8 Medium5 Low

CriticalManifest Confusionpackage.json

MediumSecret Patterndist/sass-template-common.umd.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/sass-template-common.umd.cjs

MediumSecret Patterndist/sass-template-common.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

dist/sass-template-common.umd.cjsView file

537patternName = generic_password severity = medium line = 537 matchedText = `}}catch...")+`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L537

538patternName = generic_password severity = medium line = 538 matchedText = Valid ke...}));

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L538

package.jsonView file

Lines 4-44json

4 "type": "module",

5 "files": [

6 "dist"

7 ],

8 "main": "./dist/sass-template-common.umd.cjs",

9 "module": "./dist/sass-template-common.js",

10 "types": "./dist/sass-template-common.d.ts",

11 "exports": {

12 ".": {

13 "import": "./dist/sass-template-common.js",

14 "require": "./dist/sass-template-common.umd.cjs",

15 "types": "./dist/sass-template-common.d.ts",

16 "style": "./dist/sass-template-common.css"

17 },

18 "./styles.css": "./dist/sass-template-common.css",

19 "./layout.css": "./dist/layout.css",

20 "./note.css": "./dist/note.css",

21 "./ficha-video.css": "./dist/ficha-video.css",

22 "./ui/": "./dist/ui/"

23 },

24 "scripts": {

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg · L24

25 "dev": "node server",

26 "build:audit": "vite build --config vite.audit.config.ts",

27 "build": "pnpm run build:audit && tsc -b && vite build && vite build --config vite.styles.config.ts",

28 "clean": "rm -rf dist node_modules/.tmp/tsconfig.app.tsbuildinfo node_modules/.tmp/tsconfig.node.tsbuildinfo tsconfig.tsbuildinfo",

29 "prepublishOnly": "pnpm run clean && pnpm run build",

30 "version:patch": "pnpm version patch --no-git-tag-version",

31 "version:minor": "pnpm version minor --no-git-tag-version",

32 "version:major": "pnpm version major --no-git-tag-version",

33 "release:patch": "pnpm run clean && pnpm run build && pnpm version patch && pnpm publish",

34 "release:minor": "pnpm run clean && pnpm run build && pnpm version minor && pnpm publish",

35 "lint": "eslint .",

36 "preview": "vite preview",

37 "build:client": "vite build --outDir dist/client --ssrManifest",

38 "build:server": "vite build --outDir dist/server --ssr ./entry-server.js"

39 },

40 "peerDependencies": {

41 "axios": "^1.13.2",

42 "dayjs": "^1.11.19",

43 "react": "^19.1.1",

44 "react-dom": "^19.1.1",

dist/sass-template-common.jsView file

13333patternName = generic_password severity = medium line = 13333 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L13333

15756patternName = generic_password severity = medium line = 15756 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L15756

16744patternName = generic_password severity = medium line = 16744 matchedText = password...ña",

Medium

Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16744