← Back to search

@ifuryst/coldkit-linux-x64

GitHub Actions Scanned 5d ago

Offline-first wallet safety toolkit CLI and MCP server. (darwin/arm64)

npm
? Not scanned yet

Versions

0.1.9latest
Jul 19, 2026
0.1.8
Jul 15, 2026
0.1.7
Jul 15, 2026
0.1.6
Jul 14, 2026
0.1.5
Jul 11, 2026
+ show 5 moreshow less
0.1.4
Jul 11, 2026
0.1.3
Jul 11, 2026
0.1.2
Jul 11, 2026
0.1.1
Jul 11, 2026
0.1.0
Jul 10, 2026

Tools 0

No tools indexed yet.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 49

medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5006) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5013) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5014) dependency_analyzer · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-45gg-vh54-h5m9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-5cgq-3rg8-m6cv) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-78mq-xcr3-xm33) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-89gr-r52h-f8rx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-9m57-25v3-79x9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-f5wc-c3c7-36mc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-jppx-rxg9-jmrx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-q4h4-gmj2-qvw2) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-qpw4-5x99-6vjp) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-rm3j-f69w-wqmq) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-vgwf-h737-ff37) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-w879-237q-wc7r) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GHSA-x527-x647-q7gg) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5005) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5015) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5016) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5017) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5018) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5019) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5020) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5021) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5023) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5033) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.48.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.42.0 (GO-2026-5024) dependency_analyzer · 95%
medium
High-entropy string (5.86 bits/char) in iFurySt-coldkit-018c84e/internal/tron/account.go:15 entropy_analyzer · 52%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/account.go:18 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/account.go:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/account.go:20 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/account.go:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/account.go:196 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/trc20_test.go:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/trc20_test.go:23 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/trc20_test.go:73 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/trc20_test.go:98 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in iFurySt-coldkit-018c84e/internal/tron/account_test.go:101 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 6 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package '@ifuryst/coldkit-linux-x64' matches no manifest in the repo identity_guard · 70%