Top issues
Problem
Service access tokens are considered sensitive information that should not be included in released software packages. However, developers frequently release sensitive information alongside their applications to facilitate automated software testing. Testing tokens and keys often proliferate through the software supply chain. Any publicly documented testing keys or service access tokens can safely be ignored. List of such commonly distributed sensitive information is automatically updated and requires no additional user actions.Prevalence in npm community
0 packages
found in
Top 100
0 packages
found in
Top 1k
15 packages
found in
Top 10k
1.89k packages
in community
Next steps
Review the commonly shared sensitive information for evidence of inadvertently exposed secrets.
If the tokens were published unintentionally and the software has been made public, you should revoke the tokens and file a security incident.
Top behaviors
Might contain potentially obfuscated code or data.
anomaly
Prevalence in npm community
Behavior often found in this community (Common)
22 packages
found in
Top 100
136 packages
found in
Top 1k
1267 packages
found in
Top 10k
411.22k packages
in community
Executes files during installation or upon launch.
execution
Prevalence in npm community
Behavior often found in this community (Common)
95 packages
found in
Top 100
726 packages
found in
Top 1k
7488 packages
found in
Top 10k
4.56M packages
in community
Might evaluate code dynamically.
anomaly
Prevalence in npm community
Behavior often found in this community (Common)
22 packages
found in
Top 100
122 packages
found in
Top 1k
1491 packages
found in
Top 10k
357.98k packages
in community
Contains unusually long strings.
anomaly
Prevalence in npm community
Behavior often found in this community (Common)
26 packages
found in
Top 100
134 packages
found in
Top 1k
2067 packages
found in
Top 10k
896.14k packages
in community
Contains URLs with an unusual number of subdomains.
network
Prevalence in npm community
Behavior often found in this community (Common)
0 packages
found in
Top 100
21 packages
found in
Top 1k
524 packages
found in
Top 10k
103.54k packages
in community
Top vulnerabilities
No vulnerabilities found.