Back to search
medium low low
? Not scanned yet
io.github.benzatkulak-collab/socialperks
Agent-native marketing platform: create campaigns, submit proofs, review submissions.
Versions
0.1.0first seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 3
network Server uses network capabilities via: fetch() filesystem Server uses filesystem capabilities via: path env_vars Server uses env_vars capabilities via: process.env Scan Findings 55
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: next@15.5.15 (GHSA-267c-6grr-h53f)
medium
Vulnerable dependency: next@15.5.15 (GHSA-26hh-7cqf-hhc6)
medium
Vulnerable dependency: next@15.5.15 (GHSA-2xp9-vwfh-vxw4)
medium
Vulnerable dependency: next@15.5.15 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@15.5.15 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@15.5.15 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@15.5.15 (GHSA-492v-c6pp-mqqv)
medium
Vulnerable dependency: next@15.5.15 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@15.5.15 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@15.5.15 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@15.5.15 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@15.5.15 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@15.5.15 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@15.5.15 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@15.5.15 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@15.5.15 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@15.5.15 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@15.5.15 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@15.5.15 (GHSA-p293-qw3h-jr36)
medium
Vulnerable dependency: next@15.5.15 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@15.5.15 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: next@15.5.15 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@15.5.15 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: happy-dom@20.8.4 (GHSA-6q6h-j7hj-3r64)
medium
Vulnerable dependency: happy-dom@20.8.4 (GHSA-w4gp-fjgq-3q4g)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-7fh5-64p2-3v2j)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9)
medium
Buffer.from base64 in benzatkulak-collab-socialperks-f1e4fb0/src/lib/encryption/index.ts:98
medium
Buffer.from base64 in benzatkulak-collab-socialperks-f1e4fb0/src/lib/encryption/index.ts:99
medium
Buffer.from base64 in benzatkulak-collab-socialperks-f1e4fb0/src/lib/encryption/index.ts:100
medium
Buffer.from base64 in benzatkulak-collab-socialperks-f1e4fb0/src/lib/encryption/index.ts:154
info
package.json metadata
info
Required env vars (102)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
low
Permission: env_vars access detected
info
SBOM generated: 752 components
critical
Database URL with Password found in benzatkulak-collab-socialperks-f1e4fb0/docker-compose.yml
high
Authorization Bearer Token found in benzatkulak-collab-socialperks-f1e4fb0/docs/mcp.md
high
Authorization Bearer Token found in benzatkulak-collab-socialperks-f1e4fb0/src/components/enterprise/api-console-types.ts
high
Hardcoded Password found in benzatkulak-collab-socialperks-f1e4fb0/src/app/agents/page.tsx
high
Authorization Bearer Token found in benzatkulak-collab-socialperks-f1e4fb0/src/app/docs/mcp/page.tsx
high
Hardcoded Password found in benzatkulak-collab-socialperks-f1e4fb0/src/lib/i18n/locales/pt.ts
high
Hardcoded Password found in benzatkulak-collab-socialperks-f1e4fb0/src/lib/i18n/locales/es.ts
high
Hardcoded Password found in benzatkulak-collab-socialperks-f1e4fb0/src/lib/i18n/locales/en.ts
critical
Database URL with Password found in benzatkulak-collab-socialperks-f1e4fb0/.github/workflows/launch-gate.yml
medium
No build provenance detected (SLSA L0)