AliMerce 商城助手

• Analyzed: May 10, 2026, 7:07 AM
• Findings: 1
• Version: 0.1.0
• Reason codes:
  suspicious.env_credential_access
• Engine: v2.4.23

Overview

Detected: suspicious.env_credential_access

Findings (1)

critical

suspicious.env_credential_access

• Location: index.js:10
• Finding: Environment variable access combined with network send.

Evidence

const baseUrl = process.env.ALIMERCE_API_URL || 'http://localhost:3000/api';