registry  /  sass-template-common  /  0.9.237

sass-template-common@0.9.237

Librería web, maqueta de configuración y componentes para proyectos sass.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.30 MB of source, external domains: api.issuu.com, blob.diariodelistmo.com, es.wikipedia.org, example.com, fb.me, fonts.googleapis.com, fonts.gstatic.com, goamg.amplifyapp.com, googleads.g.doubleclick.net, imagendelgolfo.cms-medios.com, imagendelgolfo.mx, pagead2.googlesyndication.com, platform.twitter.com, recaptchaenterprise.googleapis.com, sb.scorecardresearch.com, schema.org, sdk.mrf.io, securepubads.g.doubleclick.net, tpc.googlesyndication.com, twitter.com, wa.me, www.bluestack.la, www.facebook.com, www.google.com, www.googletagmanager.com, www.gstatic.com, www.linkedin.com, www.w3.org, www.youtube.com

Source & flagged code

11 flagged · loading source
dist/sass-template-common.umd.cjsView file
404patternName = generic_password severity = medium line = 404 matchedText = `,hc="__....6\r
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L404
538patternName = generic_password severity = medium line = 538 matchedText = `}}catch...")+`
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L538
539patternName = generic_password severity = medium line = 539 matchedText = Valid ke...}));
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L539
package.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg
dist/sass-template-common.jsView file
6236patternName = generic_password severity = medium line = 6236 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6236
6296patternName = generic_password severity = medium line = 6296 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6296
6358patternName = generic_password severity = medium line = 6358 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6358
6418patternName = generic_password severity = medium line = 6418 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6418
13919patternName = generic_password severity = medium line = 13919 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L13919
16342patternName = generic_password severity = medium line = 16342 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16342
17330patternName = generic_password severity = medium line = 17330 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L17330

Findings

1 Critical13 Medium5 Low
CriticalManifest Confusionpackage.json
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License