registry  /  vue-oidc-monorepo  /  1.0.3

vue-oidc-monorepo@1.0.3

⚠ Under review

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicenseWildcardDependency
scanned 29 file(s), 416 KB of source, external domains: app.com, auth.com, www.w3.org

Source & flagged code

5 flagged · loading source
.cert/key.pemView file
1patternName = private_key_rsa severity = critical line = 1 matchedText = -----BEG...----
Critical
Critical Secret

Package contains a critical-looking secret pattern.

.cert/key.pemView on unpkg · L1
1patternName = private_key_rsa severity = critical line = 1 matchedText = -----BEG...----
Critical
Secret Pattern

RSA private key in .cert/key.pem

.cert/key.pemView on unpkg · L1
apps/app/dist/assets/index-DXG6UkDh.jsView file
20contains invisible/control Unicode U+FEFF (zero width no-break space) }`}),u=fn(()=>t.isDisabled?void 0:`${t.prefix}theme--${a.value}`),d=fn(()=>Object.keys(o.value));if(fp){let e=window.matchMedia(`(prefers-color-scheme: dark)`);function t(){i.value=e.matches?`dark`:`light`}t(),e.addEventListener(`change`,t,
Critical
Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/app/dist/assets/index-DXG6UkDh.jsView on unpkg · L20
apps/app/src/i18n/en.tsView file
9patternName = generic_password severity = medium line = 9 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in apps/app/src/i18n/en.ts

apps/app/src/i18n/en.tsView on unpkg · L9
apps/lib/README.mdView file
112patternName = generic_password severity = medium line = 112 matchedText = password...rd',
Medium
Secret Pattern

Hardcoded password in apps/lib/README.md

apps/lib/README.mdView on unpkg · L112

Findings

3 Critical6 Medium5 Low
CriticalCritical Secret.cert/key.pem
CriticalTrojan Source Unicodeapps/app/dist/assets/index-DXG6UkDh.js
CriticalSecret Pattern.cert/key.pem
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
MediumSecret Patternapps/app/src/i18n/en.ts
MediumSecret Patternapps/lib/README.md
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License