registry  /  sass-template-common  /  0.9.241

sass-template-common@0.9.241

Librería web, maqueta de configuración y componentes para proyectos sass.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.31 MB of source, external domains: api.issuu.com, blob.diariodelistmo.com, es.wikipedia.org, example.com, fb.me, fonts.googleapis.com, fonts.gstatic.com, goamg.amplifyapp.com, googleads.g.doubleclick.net, imagendelgolfo.cms-medios.com, imagendelgolfo.mx, pagead2.googlesyndication.com, platform.twitter.com, recaptchaenterprise.googleapis.com, sb.scorecardresearch.com, schema.org, sdk.mrf.io, securepubads.g.doubleclick.net, tpc.googlesyndication.com, twitter.com, wa.me, www.bluestack.la, www.facebook.com, www.google.com, www.googletagmanager.com, www.gstatic.com, www.linkedin.com, www.w3.org, www.youtube.com

Source & flagged code

11 flagged · loading source
dist/sass-template-common.umd.cjsView file
404patternName = generic_password severity = medium line = 404 matchedText = `,uc="__....6\r
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/sass-template-common.umd.cjsView on unpkg · L404
538patternName = generic_password severity = medium line = 538 matchedText = `}}catch...")+`
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L538
539patternName = generic_password severity = medium line = 539 matchedText = Valid ke...}));
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.umd.cjs

dist/sass-template-common.umd.cjsView on unpkg · L539
package.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg
dist/sass-template-common.jsView file
6280patternName = generic_password severity = medium line = 6280 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6280
6340patternName = generic_password severity = medium line = 6340 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6340
6402patternName = generic_password severity = medium line = 6402 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6402
6462patternName = generic_password severity = medium line = 6462 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L6462
13974patternName = generic_password severity = medium line = 13974 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L13974
16397patternName = generic_password severity = medium line = 16397 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L16397
17385patternName = generic_password severity = medium line = 17385 matchedText = password...ña",
Medium
Secret Pattern

Hardcoded password in dist/sass-template-common.js

dist/sass-template-common.jsView on unpkg · L17385

Findings

1 Critical13 Medium5 Low
CriticalManifest Confusionpackage.json
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.umd.cjs
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
MediumSecret Patterndist/sass-template-common.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License