// vscode package
BMC-IZOT-UAP-Internship-TE-TEAM-3.static-sla-guardian-performance-impact-agent
Static COBOL analyzer: syntax check, dead code detection, feature extraction, SLA performance prediction, and Validate & Push gate.
versions
1
first publish
2026-06-02
publisher
BMC-IZOT-UAP-Internship-TE-TEAM-3
tarball
5,655,056 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-06-02
// exfil path
what is read → where it shipssteals
- ● AI API keys
sends to
- ⌖ 44.223.144.244
// offending code· @65.0.0· 1 file flagged
llm: malicious · 0.95→ Credential read (reads-ai-api-keys) paired with http-to-public-ip destination — classic exfiltration signature.
- @65.0.0··AUTO-PUBLISHED·publisher: BMC-IZOT-UAP-Internship-TE-TEAM-3heuristic 40/100static flags 2llm malicious (0.95) via fast-tracknew-publisher:0dfirst-version-of-packagereads-ai-api-keyshttp-to-public-ip
→ Credential read (reads-ai-api-keys) paired with http-to-public-ip destination — classic exfiltration signature.
// offending code· 1 file flaggedpatterns: 2
--- .env --- BMC_INTEGRATION_PATH=http://44.223.144.244:8000/appserver/integration BMC_INTEGRATION_ID=it8AVxmAKeLOWXjvzhrvTwuviCjN9rqV BMC_INTEGRATION_KEY=xbeSVuyF7Ss6w0BZUluvidaKJ2lA2gK8 GROQ_API_KEY=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