virtual-machine: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

virtual-machine: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

10 flagged · loading source

build/node-worker.jsView file

18patternName = aws_access_key severity = critical line = 18 matchedText = var risc...=");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

build/node-worker.jsView on unpkg · L18

18patternName = aws_access_key severity = critical line = 18 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/node-worker.js

build/node-worker.jsView on unpkg · L18

1388imports.wbg.__wbg_new_no_args_cb138f77cf6151ee = function(arg0, arg1) { L1389: const ret = new Function(getStringFromWasm0(arg0, arg1)); L1390: return ret;

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/node-worker.jsView on unpkg · L1388

native/index.jsView file

6L7: const { existsSync, readFileSync } = require('fs') L8: const { join } = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

native/index.jsView on unpkg · L6

native/riscv-vm-native.linux-arm64-gnu.nodeView file

•path = native/riscv-vm-native.linux-arm64-gnu.node kind = native_binary sizeBytes = 3523928 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/riscv-vm-native.linux-arm64-gnu.nodeView on unpkg

build/cli.jsView file

49patternName = aws_access_key severity = critical line = 49 matchedText = riscv_vm...=");

Critical

Secret Pattern

AWS access key ID in build/cli.js

build/cli.jsView on unpkg · L49

•matchType = previous_version_dangerous_delta matchedPackage = virtual-machine@0.7.4 matchedIdentity = npm:dmlydHVhbC1tYWNoaW5l:0.7.4 similarity = 0.444 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/cli.jsView on unpkg

build/worker.jsView file

13patternName = aws_access_key severity = critical line = 13 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/worker.js

build/worker.jsView on unpkg · L13

build/index.jsView file

1741patternName = aws_access_key severity = critical line = 1741 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/index.js

build/index.jsView on unpkg · L1741

build/index.mjsView file

18patternName = aws_access_key severity = critical line = 18 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/index.mjs

build/index.mjsView on unpkg · L18

Source & flagged code

10 flagged

build/node-worker.jsView file

18patternName = aws_access_key severity = critical line = 18 matchedText = var risc...=");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

build/node-worker.jsView on unpkg · L18

18patternName = aws_access_key severity = critical line = 18 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/node-worker.js

build/node-worker.jsView on unpkg · L18

1388imports.wbg.__wbg_new_no_args_cb138f77cf6151ee = function(arg0, arg1) { L1389: const ret = new Function(getStringFromWasm0(arg0, arg1)); L1390: return ret;

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/node-worker.jsView on unpkg · L1388

native/index.jsView file

Lines 1-26javascript

1/* tslint:disable */

2/* eslint-disable */

3/* prettier-ignore */

4

5/* auto-generated by NAPI-RS */

6

7const { existsSync, readFileSync } = require('fs')

8const { join } =

native/riscv-vm-native.linux-arm64-gnu.nodeView file

•path = native/riscv-vm-native.linux-arm64-gnu.node kind = native_binary sizeBytes = 3523928 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

native/riscv-vm-native.linux-arm64-gnu.nodeView on unpkg

build/cli.jsView file

49patternName = aws_access_key severity = critical line = 49 matchedText = riscv_vm...=");

Critical

Secret Pattern

AWS access key ID in build/cli.js

build/cli.jsView on unpkg · L49

•matchType = previous_version_dangerous_delta matchedPackage = virtual-machine@0.7.4 matchedIdentity = npm:dmlydHVhbC1tYWNoaW5l:0.7.4 similarity = 0.444 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/cli.jsView on unpkg

build/worker.jsView file

13patternName = aws_access_key severity = critical line = 13 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/worker.js

build/worker.jsView on unpkg · L13

build/index.jsView file

1741patternName = aws_access_key severity = critical line = 1741 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/index.js

build/index.jsView on unpkg · L1741

build/index.mjsView file

18patternName = aws_access_key severity = critical line = 18 matchedText = var risc...=");

Critical

Secret Pattern

AWS access key ID in build/index.mjs

build/index.mjsView on unpkg · L18