{"id":"moonshot.ai/kimi-code","name":"Kimi Code CLI","commands":["kimi"],"examples":[{"run":"kimi","does":"Open the interactive UI; run /login inside on first launch"},{"run":"kimi -p \"<instruction>\"","does":"Run a single instruction without the interactive UI"},{"run":"kimi -c","does":"Resume the previous session"},{"run":"kimi acp","does":"Serve the Agent Client Protocol so Zed or JetBrains can drive it"}],"description":"Terminal AI coding agent that works with Kimi models and other compatible providers.","homepage":"https://moonshotai.github.io/kimi-code/en/","repository":"https://github.com/MoonshotAI/kimi-code","license":"MIT","agentic":true,"latest_version":"2.1.1","vendor":"Moonshot AI","install":"curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash","publisher":"third-party","w3bs":"w3bs install moonshot.ai/kimi-code","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":4315,"summary":{"critical":0,"high":4,"medium":80,"low":76,"info":0},"malware":0,"truncated":true,"version":"2.1.1","sources":{"installer":"https://code.kimi.com/kimi-code/install.sh","installerSha256":"270a86f2d2304529b6d8a3783fca9534874ebaeecb6cfcc1aebcdb6ce20ae1d7","repository":"github.com/MoonshotAI/kimi-code","commit":"fc3b521b8b68468268bb4cfe7f45008ce08b2b99"},"notes":[],"scannedAt":"2026-11-02T22:59:58.005Z","findings":[{"ruleId":"manifest-typosquat","title":"dependency name close to a popular package","severity":"high","category":"manifest","cwe":"CWE-1357","file":"source/packages/agent-core-v2/package.json","line":95,"malware":false},{"ruleId":"manifest-typosquat","title":"dependency name close to a popular package","severity":"high","category":"manifest","cwe":"CWE-1357","file":"source/packages/kap-server/package.json","line":46,"malware":false},{"ruleId":"manifest-typosquat","title":"dependency name close to a popular package","severity":"high","category":"manifest","cwe":"CWE-1357","file":"source/packages/klient/package.json","line":52,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"high","category":"secret","cwe":"CWE-798","file":"source/packages/node-sdk/examples/kimi-harness-logging-smoke.ts","line":98,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/actionscript-3-CoDkCxhg.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/c-BIGW1oBm.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/cobol-nBiQ_Alo.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/cynefin-VYW2F7L2-C-EfYT07.js","line":160,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/cynefin-VYW2F7L2-DH-wDJuX.js","line":160,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/erlang-DsQrWhSR.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/gdscript-C5YyOfLZ.js","line":1,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/kimi-code/dist-web/assets/index-_mdBonhR.js","line":13,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/kimi-code/dist-web/assets/index-_mdBonhR.js","line":1401,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/kimi-code/dist-web/assets/index-_mdBonhR.js","line":1415,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/kimi-code/dist-web/assets/index10-DXBCRIm3.js","line":1,"malware":false},{"ruleId":"js-unescaped-html-sink","title":"unescaped HTML rendering","severity":"medium","category":"code","cwe":"CWE-79","file":"source/apps/kimi-code/dist-web/assets/index8-Bul4vJWm.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/katex-DnlPpQZa.js","line":252,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/katex-DnlPpQZa.js","line":256,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/katex-HP8lGamR.js","line":252,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/katex-HP8lGamR.js","line":256,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/katexRenderer.worker-CO_gEm4q.js","line":252,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/katexRenderer.worker-CO_gEm4q.js","line":256,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/mdx-Cmh6b_Ma.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/mermaid.core-CaI4CgOv.js","line":165,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/mermaidParser.worker-BFSlSHEW.js","line":164,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/nix-CwoSXNpI.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/objective-c-DXmwc3jG.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/objective-cpp-CLxacb5B.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/pug-DKIMFp6K.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/puppet-BMWR74SV.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/shellscript-Yzrsuije.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/turnDiff.worker-BzC1nIn4.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/wolfram-lXgVvXCa.js","line":1,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/dist-web/assets/yaml-Buea-lGh.js","line":1,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/apps/kimi-code/src/cli/sub/update-download.ts","line":75,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/apps/kimi-code/src/cli/update/native-stage.ts","line":485,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/src/tui/components/editor/custom-editor.ts","line":37,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/kimi-code/src/tui/theme/pi-tui-theme.ts","line":24,"malware":false},{"ruleId":"insecure-randomness-for-secret","title":"predictable randomness used for a security value","severity":"medium","category":"code","cwe":"CWE-338","file":"source/apps/kimi-code/src/utils/persistence.ts","line":41,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/vis/server/src/lib/task-store.ts","line":26,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/apps/vis/server/src/lib/task-store.ts","line":177,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/apps/vscode/webview-ui/src/lib/text-enrichment.ts","line":9,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/packages/agent-core-v2/src/agent/loop/projector.ts","line":63,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/agent/media/image-format-policy.ts","line":69,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/agent/task/persist.ts","line":11,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/app/config/tomlWriteback.ts","line":69,"malware":false},{"ruleId":"js-archive-entry-path","title":"archive entry written to a path built from its own name","severity":"medium","category":"code","cwe":"CWE-22","file":"source/packages/agent-core-v2/src/app/plugin/archive.ts","line":149,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/app/plugin/types.ts","line":196,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/app/telemetry/privacy.ts","line":14,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/app/telemetry/privacy.ts","line":15,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/packages/agent-core-v2/src/features/skill/workspace/rootFileSkillSource.ts","line":117,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/agent-core-v2/src/features/tower/protocol/frontmatter.ts","line":42,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/agent-core-v2/src/features/tower/protocol/store.ts","line":2420,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/human/llm/protocol/kit/media.ts","line":85,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/agent-core-v2/src/workspace/workspaceAgentProfileLoader/internal/agentFile.ts","line":25,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/kap-server/src/search/indexCore.ts","line":943,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/kap-server/src/services/transcript/wireCache.ts","line":101,"malware":false},{"ruleId":"sh-predictable-temp-path","title":"predictable temporary file","severity":"medium","category":"code","cwe":"CWE-377","file":"source/packages/klient/scripts/run-docker-e2e.sh","line":127,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":347,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":365,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":371,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":378,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":382,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":399,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":522,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":540,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":546,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":553,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":557,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/codec.ts","line":648,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/compaction.ts","line":187,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/gen-codec.ts","line":408,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/gen-codec.ts","line":437,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/recovery.ts","line":99,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/value-reader.ts","line":69,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/value-reader.ts","line":85,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/worker/text-build-core.ts","line":138,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/worker/text-build-core.ts","line":227,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/minidb/src/worker/text-build.ts","line":78,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/pi-tui/src/components/markdown.ts","line":194,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"medium","category":"code","cwe":"CWE-1333","file":"source/packages/pi-tui/src/stdin-buffer.ts","line":29,"malware":false},{"ruleId":"insecure-randomness-for-secret","title":"predictable randomness used for a security value","severity":"medium","category":"code","cwe":"CWE-338","file":"source/packages/product/src/shared/node/json-file.ts","line":14,"malware":false},{"ruleId":"js-uninitialized-buffer","title":"buffer allocated without zeroing","severity":"medium","category":"code","cwe":"CWE-908","file":"source/packages/session-import/src/images.ts","line":78,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/packages/session-import/src/rollout.ts","line":482,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/kimi-code/scripts/native/smoke.mjs","line":124,"malware":false},{"ruleId":"redos-nested-quantifier","title":"regex with nested unbounded quantifiers","severity":"low","category":"code","cwe":"CWE-1333","file":"source/apps/vis/web/test/renderers.test.ts","line":66,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":49,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":474,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":652,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":687,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":730,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":739,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":749,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":820,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":948,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/apps/vscode/test/kimi-harness.integration.test.ts","line":976,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/packages/agent-core-v2/test/_base/di/cascade.test.ts","line":257,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/packages/agent-core-v2/test/_base/di/cascade.test.ts","line":259,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/packages/agent-core-v2/test/_base/di/cascade.test.ts","line":260,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/packages/agent-core-v2/test/_base/di/cascade.test.ts","line":718,"malware":false}]}}