The Hashgraph Online Standards SDK provides a complete implementation of the Hiero Consensus Standards (HCS), giving developers all the tools needed to build wonderful decentralized applications on the Hashgraph network. https://hol.org
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×7, dynamic code execution ×3 in @hashgraphonline/standards-sdk
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.1.184 · analyzer v18 · 8h ago
danger signals1
- committed secretprivate keypackage/dist/es/standards-sdk.es131.js:29
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
network 11
- net package/dist/cjs/standards-sdk.cjs :1
"use strict";var e;Object.create,Object.defineProperty,Object.getOwnPropertyDescriptor,Object.getOwnPropertyNames,Object.getPrototypeOf,Object.prototype.hasOwnProperty;Object.defineProperty(exports,Sy - net package/dist/es/standards-sdk.es127.js :1
import axios from "axios"; - net package/dist/es/standards-sdk.es14.js :112
const response = await fetch( - net package/dist/es/standards-sdk.es142.js :884
const response = await fetch(url, options); - net package/dist/es/standards-sdk.es144.js :2
import axios from "axios"; - net package/dist/es/standards-sdk.es16.js :775
const response = await fetch(`${baseUrl}/api/request-confirm`, { - net package/dist/es/standards-sdk.es162.js :3748
let response = await fetch(request, fetchOptions); - net package/dist/es/standards-sdk.es2.js :114
const response = await fetch(url); - net package/dist/es/standards-sdk.es20.js :15
const response = await fetch(`${baseUrl}/api/request-confirm`, { - net package/dist/es/standards-sdk.es27.js :817
const response = await fetch(cdnUrl); - net package/dist/es/standards-sdk.es63.js :25
const response = await globalThis.fetch(url, {
database 2
- db package/dist/cjs/standards-sdk.cjs :10
!function(e){const t=H,r=Z,i="function"==typeof Symbol&&"function"==typeof Symbol.for?Symbol.for("nodejs.util.inspect.custom"):null;e.Buffer=l,e.SlowBuffer=function(e){+e!=e&&(e=0);return l.alloc(+e)} - db package/dist/es/standards-sdk.es15.js :123
const loaded = require("ioredis");
declared dependencies 51
- @hashgraph/proto@^2.24.0
- @hashgraph/sdk@^2.78.0
- @hashgraph/hedera-wallet-connect@^2.0.4
- @hashgraphonline/hashinal-wc@^2.0.64
- @kiloscribe/inscription-sdk@2.0.10-canary.9
- @noble/curves@^2.0.1
- @types/localtunnel@^2.0.4
- axios@^1.13.6
- bignumber.js@^9.3.1
- buffer@^6.0.3
- chalk@^5.4.1
- date-fns@^4.1.0
- dotenv@^16.6.1
- ethers@^6.15.0
- file-type@^20.5.0
- long@^5.3.2
- mime-types@^2.1.35
- viem@^2.19.9
- x402-axios@^0.7.0
- zod@^3.25.76
- @hashgraphonline/conversational-agent@0.2.220
- @hiero-did-sdk/registrar@0.1.8
- @hiero-did-sdk/resolver@0.1.8
- @swc/jest@^0.2.39
- @types/jest@^29.5.14
- @types/lodash@^4.17.20
- @types/mime-types@^2.1.4
- @types/node@^22.18.12
- @typescript-eslint/eslint-plugin@^8.46.2
- @typescript-eslint/parser@^8.46.2
- agent0-sdk@0.2.1
- concurrently@^8.2.2
- eslint-plugin-sonarjs@^3.0.5
- ioredis@^5.8.2
- jest@^29.7.0
- jest-environment-jsdom@^29.7.0
- json-to-plain-text@^1.2.0
- jszip@^3.10.1
- localtunnel@^2.0.2
- nodemon@^3.1.10
- openai@^4.104.0
- prettier@^3.6.2
- process@^0.11.10
- rimraf@^6.1.3
- terser@^5.44.0
- ts-jest@^29.4.5
- tsx@^4.20.6
- typescript@^5.9.3
- vite@^6.4.1
- vite-plugin-dts@^4.5.4
- vite-plugin-node-polyfills@^0.24.0