registry / volleyballsimtypes / 0.0.470

volleyballsimtypes@0.0.470

vbsim types

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVars

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 464 file(s), 1.14 MB of source

Source & flagged code

2 flagged

dist/esm/src/data/common/auth-admin.jsView file

Lines 1-34javascript

1import { randomBytes, randomUUID, scryptSync } from 'crypto';

2import { QueryTypes } from 'sequelize';

3function hashPassword(password) {

4 const salt = randomBytes(16).toString('hex');

5 const n = 16384;

6 const r = 8;

7 const p = 1;

8 const keyLength = 64;

9 const derived = scryptSync(password, salt, keyLength, { N: n, r, p });

10 return `scrypt$${n}$${r}$${p}$${salt}$${derived.toString('hex')}`;

11}

12export async function ensureDefaultAdminUser(sequelize, transaction) {

13 const email = 'admin@example.com';

14 const password = 'admin123';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/esm/src/data/common/auth-admin.jsView on unpkg · L14

15 const displayName = 'Admin';

16 const now = new Date();

17 const passwordHash = hashPassword(password);

18 const run = async (tx) => {

19 const existingUsers = await sequelize.query(`

20 SELECT user_id

21 FROM "AuthUser"

22 WHERE lower(email) = lower(:email)

23 LIMIT 1

24 FOR UPDATE

25 `, {

26 replacements: { email },

27 type: QueryTypes.SELECT,

28 transaction: tx

29 });

30 let userId;

31 let createdUser = false;

32 if (existingUsers.length === 0) {

33 userId = randomUUID();

34 createdUser = true;

dist/cjs/src/data/common/auth-admin.jsView file

Lines 1-37javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.ensureDefaultAdminUser = ensureDefaultAdminUser;

4const crypto_1 = require("crypto");

5const sequelize_1 =

Source & flagged code

2 flagged · loading source

dist/esm/src/data/common/auth-admin.jsView file

14patternName = generic_password severity = medium line = 14 matchedText = const pa...23';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/esm/src/data/common/auth-admin.jsView on unpkg · L14

dist/cjs/src/data/common/auth-admin.jsView file

17patternName = generic_password severity = medium line = 17 matchedText = const pa...23';

Medium

Secret Pattern

Hardcoded password in dist/cjs/src/data/common/auth-admin.js

dist/cjs/src/data/common/auth-admin.jsView on unpkg · L17

Findings

3 Medium2 Low

MediumSecret Patterndist/esm/src/data/common/auth-admin.js

MediumEnvironment Vars

MediumSecret Patterndist/cjs/src/data/common/auth-admin.js

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

2 flagged

dist/esm/src/data/common/auth-admin.jsView file

Lines 1-34javascript

1import { randomBytes, randomUUID, scryptSync } from 'crypto';

2import { QueryTypes } from 'sequelize';

3function hashPassword(password) {

4 const salt = randomBytes(16).toString('hex');

5 const n = 16384;

6 const r = 8;

7 const p = 1;

8 const keyLength = 64;

9 const derived = scryptSync(password, salt, keyLength, { N: n, r, p });

10 return `scrypt$${n}$${r}$${p}$${salt}$${derived.toString('hex')}`;

11}

12export async function ensureDefaultAdminUser(sequelize, transaction) {

13 const email = 'admin@example.com';

14 const password = 'admin123';

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/esm/src/data/common/auth-admin.jsView on unpkg · L14

15 const displayName = 'Admin';

16 const now = new Date();

17 const passwordHash = hashPassword(password);

18 const run = async (tx) => {

19 const existingUsers = await sequelize.query(`

20 SELECT user_id

21 FROM "AuthUser"

22 WHERE lower(email) = lower(:email)

23 LIMIT 1

24 FOR UPDATE

25 `, {

26 replacements: { email },

27 type: QueryTypes.SELECT,

28 transaction: tx

29 });

30 let userId;

31 let createdUser = false;

32 if (existingUsers.length === 0) {

33 userId = randomUUID();

34 createdUser = true;

dist/cjs/src/data/common/auth-admin.jsView file

Lines 1-37javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.ensureDefaultAdminUser = ensureDefaultAdminUser;

4const crypto_1 = require("crypto");

5const sequelize_1 =