registry / soajs.controller / 4.3.21
soajs.controller@4.3.21
⚠ Under reviewsoajs multi tenant API gateway
AI Security Review
scanned 11h ago · by lpm-firewall-aiThe flagged package code inspected here shows ordinary configured Kubernetes access and build task loading, not concrete attack behavior. Source for some selected runtime dependencies is unavailable, preventing a clean determination.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Importing or using package functionality that loads an unavailable runtime dependency.
Impact
Unknown; no attack impact was established from the inspected package source.
Mechanism
The package manifest declares dependencies whose source was not included for inspection; their runtime behavior could not be assessed.
AI rationale
The flagged package code inspected here shows ordinary configured Kubernetes access and build task loading, not concrete attack behavior. Source for some selected runtime dependencies is unavailable, preventing a clean determination.
Evidence
package.jsonmodules/registry/mongo.jsmodules/driver/kubernetes/model/index.js
Decision evidence
public snapshotAI called this Manual Review at 58.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest defines only a test script and declares runtime dependencies, with no install lifecycle hook.
- The registry code passes a configured Kubernetes URL and token to node lookup; the driver requires both values to connect.
- Some declared runtime dependencies have no source snapshot in the supplied package evidence, so their behavior could not be verified.
Evidence against
- The inspected Grunt entry loads named build tasks; no malicious behavior was established in the flagged source files.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourcetest/unit/mw/key/index.jsView file
17patternName = generic_password
severity = medium
line = 17
Medium
Secret Pattern
Package contains a possible secret pattern.
test/unit/mw/key/index.jsView on unpkg · L17178patternName = generic_password
severity = medium
line = 178
Medium
Secret Pattern
Hardcoded password in test/unit/mw/key/index.js
test/unit/mw/key/index.jsView on unpkg · L178Gruntfile.jsView file
10L11: const fs = require('fs');
L12: const path = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
Gruntfile.jsView on unpkg · L10Findings
2 High7 Medium5 Low
HighKnown Malware Source Similaritymodules/registry/mongo.js
HighKnown Malware Source Fingerprint Signaturemodules/registry/mongo.js
MediumSecret Patterntest/unit/mw/key/index.js
MediumDynamic RequireGruntfile.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterntest/unit/mw/key/index.js
MediumSecret Patterntest/data/provision/urac/users/second_owner.js
MediumSecret Patterntest/data/provision/urac/users/owner.js
LowScripts Present
LowWeak Cryptomw/cache/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to soajs.controller@4.3.21.
See all versions of soajs.controller for other recorded verdicts.
- Review the evidence and your use of soajs.controller@4.3.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.