registry  /  secureauth-nodejs  /  2.1.0

secureauth-nodejs@2.1.0

SecureAuth - Enterprise Two-Factor Authentication System with Application Flood Protection (Node.js/Express)

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 41 file(s), 176 KB of source, external domains: cdn.jsdelivr.net, cdn.tailwindcss.com, fonts.googleapis.com, fonts.gstatic.com, secureauth106293.netlify.app, unpkg.com

Source & flagged code

5 flagged · loading source
cli/src/installer.jsView file
1const { execSync } = require('child_process'); L2: const { logger } = require('./logger');
High
Child Process

Package source references child process execution.

cli/src/installer.jsView on unpkg · L1
24try { L25: execSync(`npm install ${allDeps.join(' ')} --save --progress=false`, { L26: cwd,
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/src/installer.jsView on unpkg · L24
SecureAuth_DDoS_Protection.zipView file
•path = SecureAuth_DDoS_Protection.zip kind = high_entropy_blob sizeBytes = 13063 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

SecureAuth_DDoS_Protection.zipView on unpkg
•path = SecureAuth_DDoS_Protection.zip kind = compressed_blob sizeBytes = 13063 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

SecureAuth_DDoS_Protection.zipView on unpkg
•path = SecureAuth_DDoS_Protection.zip kind = nested_archive_needs_inspection sizeBytes = 13063 magicHex = [redacted]
Low
Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

SecureAuth_DDoS_Protection.zipView on unpkg

Findings

4 High4 Medium5 Low
HighChild Processcli/src/installer.js
HighShell
HighRuntime Package Installcli/src/installer.js
HighShips High Entropy BlobSecureAuth_DDoS_Protection.zip
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed BlobSecureAuth_DDoS_Protection.zip
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs InspectionSecureAuth_DDoS_Protection.zip