JavaScript/Typescript SDK for 1Password Connect
85%
Total Score
75
100
100
100
50
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10479 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @1password/connect is vulnerable to Insertion of Sensitive Information into Log File in versions 1.0.1 - 1.4.1. | 1.0.1 - 1.4.1 | Low |
| Dependency | Last Release | Score |
|---|---|---|
uuid Version ^9.0.1 | — | — |
axios Version ^1.10.0 | — | — |
debug Version ^4.4.1 | — | — |
slugify Version ^1.6.6 | — | — |
lodash.clonedeep Version ^4.5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant