registry  /  yqform-h5  /  0.2.24

yqform-h5@0.2.24

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 2 file(s), 1.20 MB of source, external domains: cdnjs.cloudflare.com, npms.io

Source & flagged code

2 flagged · loading source
dist/yqform-h5.es.jsView file
12272patternName = generic_password severity = medium line = 12272 matchedText = passwo...
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/yqform-h5.es.jsView on unpkg · L12272
dist/yqform-h5.umd.jsView file
33patternName = generic_password severity = medium line = 33 matchedText = `)}get[S...;/*!
Medium
Secret Pattern

Hardcoded password in dist/yqform-h5.umd.js

dist/yqform-h5.umd.jsView on unpkg · L33

Findings

4 Medium4 Low
MediumSecret Patterndist/yqform-h5.es.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterndist/yqform-h5.umd.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License