Einstein x402 Blockchain Analytics

• Analyzed: May 10, 2026, 6:51 AM
• Findings: 3
• Version: 1.1.0
• Reason codes:
  suspicious.env_credential_accesssuspicious.exposed_secret_literal
• Engine: v2.4.23

Overview

Detected: suspicious.env_credential_access, suspicious.exposed_secret_literal

Findings (3)

critical

suspicious.env_credential_access

• Location: scripts/einstein-setup.mjs:177
• Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

• Location: scripts/lib/x402-pay.mjs:38
• Finding: Environment variable access combined with network send.

critical

suspicious.exposed_secret_literal

• Location: scripts/einstein-setup.mjs:187
• Finding: File appears to expose a hardcoded API secret or token.