registry / tina4-nodejs / 3.13.71
tina4-nodejs@3.13.71
⚠ Under reviewTina4 for Node.js/TypeScript - 54 built-in features, zero dependencies
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 20 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
12 flaggedpackages/cli/src/commands/generate.tsView file
1897patternName = generic_password
severity = medium
line = 1897
matchedText = const re... });
Medium
Secret Pattern
Package contains a possible secret pattern.
packages/cli/src/commands/generate.tsView on unpkg · L18971900patternName = generic_password
severity = medium
line = 1900
matchedText = const du... });
Medium
Secret Pattern
Hardcoded password in packages/cli/src/commands/generate.ts
packages/cli/src/commands/generate.tsView on unpkg · L19001903patternName = generic_password
severity = medium
line = 1903
matchedText = const lo... });
Medium
Secret Pattern
Hardcoded password in packages/cli/src/commands/generate.ts
packages/cli/src/commands/generate.tsView on unpkg · L1903Findings
1 Critical7 High7 Medium5 Low
CriticalPrevious Version Dangerous Deltapackages/core/src/ai.ts
HighChild Processpackages/core/public/js/tina4-dev-admin.min.js
HighShell
HighSame File Env Network Executionpackages/core/public/js/tina4-dev-admin.min.js
HighCommand Output Exfiltrationpackages/core/src/ai.ts
HighSandbox Evasion Gated Capabilitypackages/core/src/server.ts
HighCross File Remote Execution Contextpackages/core/src/ai.ts
HighRuntime Package Installpackages/core/src/devAdmin.ts
MediumSecret Patternpackages/cli/src/commands/generate.ts
MediumDynamic Requirepackages/core/src/fakeData.ts
MediumNetwork
Medium
Affected versions and remediation
This report applies to tina4-nodejs@3.13.71.
See all versions of tina4-nodejs for other recorded verdicts.
- Review the evidence and your use of tina4-nodejs@3.13.71 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.