Is "h3" on n8n Safe to Install?

pi0 · n8n · v2.0.1-rc.16

Minimal H(TTP) framework built for high performance and portability.

Risk Assessment

Analyzed
93.02
out of 100
CRITICAL

495 security findings detected across all analyzers

Severity Breakdown

0
Critical
0
High
342
Medium
153
Low
0
Info

Finding Categories

340
IoC Indicators

YARA Rules Matched

14 rules(151 hits)
postinstall network communication postinstall obfuscation postinstall file manipulation postinstall file download postinstall system command postinstall environment access postinstall persistence mechanism postinstall crypto operations RedirectToUnknownPath credential env files NoUseWeakRandom HavingAPermissiveCrossOriginResourceSharingPolicy UsingCommandLineArguments UsingShellInterpreterWhenExecutingOSCommands

About This Extension

Minimal H(TTP) framework built for high performance and portability.

Detailed Findings

153 total

YARA Rule Matches

14 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
137
IP Addresses
15
Domains
197
Strings
340

All Indicators · 340

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API)-compatible

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API)-compatible

extracted_from_files

Domain
detected Domain: automd.unjs.io

XIOC detected Domain: automd.unjs.io

extracted_from_files

Domain
detected Domain: h3.dev

XIOC detected Domain: h3.dev

extracted_from_files

Domain
detected Domain: npm.chart.dev

XIOC detected Domain: npm.chart.dev

extracted_from_files

Domain
detected Domain: npmjs.com

XIOC detected Domain: npmjs.com

extracted_from_files

Domain
detected Domain: params.name

XIOC detected Domain: params.name

extracted_from_files

Domain
detected Domain: app.post

XIOC detected Domain: app.post

extracted_from_files

Domain
detected Domain: www.jsonrpc.org

XIOC detected Domain: www.jsonrpc.org

extracted_from_files

Domain
detected Domain: fetch.spec.whatwg.org

XIOC detected Domain: fetch.spec.whatwg.org

extracted_from_files

Domain
detected Domain: www.rfc-editor.org

XIOC detected Domain: www.rfc-editor.org

extracted_from_files

Domain
detected Domain: example.com

XIOC detected Domain: example.com

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

URL
detected Domain: url.host

XIOC detected Domain: url.host

extracted_from_files

Domain
detected Domain: val.stream

XIOC detected Domain: val.stream

extracted_from_files

Domain
detected Domain: val.name

XIOC detected Domain: val.name

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

URL
detected Domain: this.url.search

XIOC detected Domain: this.url.search

extracted_from_files

Domain
detected Domain: this.app

XIOC detected Domain: this.app

extracted_from_files

Domain
detected Domain: peer.id

XIOC detected Domain: peer.id

extracted_from_files

Domain
detected Domain: parsed.name

XIOC detected Domain: parsed.name

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: opt.secure

XIOC detected Domain: opt.secure

extracted_from_files

Domain
detected Domain: cookies.map

XIOC detected Domain: cookies.map

extracted_from_files

Domain
detected Domain: reader.read

XIOC detected Domain: reader.read

extracted_from_files

Domain
detected Domain: iterator.next

XIOC detected Domain: iterator.next

extracted_from_files

Domain
detected Domain: route.data

XIOC detected Domain: route.data

extracted_from_files

Domain
detected Domain: config.name

XIOC detected Domain: config.name

extracted_from_files

Domain
detected Domain: password.id

XIOC detected Domain: password.id

extracted_from_files

Domain
detected Domain: algorithm.name

XIOC detected Domain: algorithm.name

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: message.data

XIOC detected Domain: message.data

extracted_from_files

Domain
detected Domain: message.id

XIOC detected Domain: message.id

extracted_from_files

Domain
detected Domain: cookie.secure

XIOC detected Domain: cookie.secure

extracted_from_files

Domain
detected Domain: error.data

XIOC detected Domain: error.data

extracted_from_files

Domain
detected Domain: h3error.data

XIOC detected Domain: h3error.data

extracted_from_files

Domain
detected Domain: rpcreq.id

XIOC detected Domain: rpcreq.id

extracted_from_files

Domain
detected Domain: req.id

XIOC detected Domain: req.id

extracted_from_files

Domain
detected Domain: requests.map

XIOC detected Domain: requests.map

extracted_from_files

Domain
detected Domain: session.data

XIOC detected Domain: session.data

extracted_from_files

Domain
detected Domain: session.id

XIOC detected Domain: session.id

extracted_from_files

Domain
detected Domain: vnd.3m.post

XIOC detected Domain: vnd.3m.post

extracted_from_files

Domain
detected Domain: vnd.3gpp.mc

XIOC detected Domain: vnd.3gpp.mc

extracted_from_files

Domain
detected Domain: vnd.3gpp.crs

XIOC detected Domain: vnd.3gpp.crs

extracted_from_files

Domain
detected Domain: emergencycalldata.ecall.msd

XIOC detected Domain: emergencycalldata.ecall.msd

extracted_from_files

Domain
detected Domain: datatracker.ietf.org

XIOC detected Domain: datatracker.ietf.org

extracted_from_files

Domain
detected Domain: tools.ietf.org

XIOC detected Domain: tools.ietf.org

extracted_from_files

Domain
detected Domain: value.name

XIOC detected Domain: value.name

extracted_from_files

Domain
detected Domain: vnd.cab

XIOC detected Domain: vnd.cab

extracted_from_files

Domain
detected Domain: vnd.bint.med

XIOC detected Domain: vnd.bint.med

extracted_from_files

Domain
detected Domain: vnd.apache.arrow.stream

XIOC detected Domain: vnd.apache.arrow.stream

extracted_from_files

Domain
detected Domain: vnd.antix.game

XIOC detected Domain: vnd.antix.game

extracted_from_files

Domain
detected Domain: vnd.amazon.mobi

XIOC detected Domain: vnd.amazon.mobi

extracted_from_files

Domain
detected Domain: vnd.ahead.space

XIOC detected Domain: vnd.ahead.space

extracted_from_files

Domain
detected Domain: vnd.adobe.flash.movie

XIOC detected Domain: vnd.adobe.flash.movie

extracted_from_files

Domain
detected Domain: vnd.desmume.movie

XIOC detected Domain: vnd.desmume.movie

extracted_from_files

IP
detected Domain: vnd.dece.zip

XIOC detected Domain: vnd.dece.zip

extracted_from_files

Domain
detected Domain: vnd.dece.data

XIOC detected Domain: vnd.dece.data

extracted_from_files

Domain
detected Domain: vnd.ctct.ws

XIOC detected Domain: vnd.ctct.ws

extracted_from_files

Domain
detected Domain: vnd.collection.next

XIOC detected Domain: vnd.collection.next

extracted_from_files

Domain
detected Domain: vnd.citationstyles.style

XIOC detected Domain: vnd.citationstyles.style

extracted_from_files

Domain
detected Domain: vnd.canon

XIOC detected Domain: vnd.canon

extracted_from_files

Domain
detected Domain: vnd.fujixerox.art

XIOC detected Domain: vnd.fujixerox.art

extracted_from_files

Domain
detected Domain: vnd.f-secure.mobile

XIOC detected Domain: vnd.f-secure.mobile

extracted_from_files

Domain
detected Domain: vnd.eudora.data

XIOC detected Domain: vnd.eudora.data

extracted_from_files

Domain
detected Domain: vnd.eu.kasparian.car

XIOC detected Domain: vnd.eu.kasparian.car

extracted_from_files

Domain
detected Domain: vnd.eprints.data

XIOC detected Domain: vnd.eprints.data

extracted_from_files

Domain
detected Domain: vnd.drive

XIOC detected Domain: vnd.drive

extracted_from_files

Domain
detected Domain: vnd.dolby.mobile

XIOC detected Domain: vnd.dolby.mobile

extracted_from_files

Domain
detected Domain: vnd.ims.lti.v2.toolproxy.id

XIOC detected Domain: vnd.ims.lti.v2.toolproxy.id

extracted_from_files

Domain
detected Domain: vnd.ieee

XIOC detected Domain: vnd.ieee

extracted_from_files

Domain
detected Domain: vnd.ibm.secure

XIOC detected Domain: vnd.ibm.secure

extracted_from_files

Domain
detected Domain: vnd.gpxsee.map

XIOC detected Domain: vnd.gpxsee.map

extracted_from_files

Domain
detected Domain: vnd.gov.sk

XIOC detected Domain: vnd.gov.sk

extracted_from_files

Domain
detected Domain: vnd.gnu.taler.exchange

XIOC detected Domain: vnd.gnu.taler.exchange

extracted_from_files

Domain
detected Domain: vnd.gmx

XIOC detected Domain: vnd.gmx

extracted_from_files

Domain
detected Domain: vnd.nokia.n-gage.data

XIOC detected Domain: vnd.nokia.n-gage.data

extracted_from_files

Domain
detected Domain: vnd.nokia.n-gage.ac

XIOC detected Domain: vnd.nokia.n-gage.ac

extracted_from_files

Domain
detected Domain: vnd.muvee.style

XIOC detected Domain: vnd.muvee.style

extracted_from_files

Domain
detected Domain: vnd.ms

XIOC detected Domain: vnd.ms

extracted_from_files

Domain
detected Domain: vnd.llamagraphics.life-balance.exchange

XIOC detected Domain: vnd.llamagraphics.life-balance.exchange

extracted_from_files

Domain
detected Domain: vnd.is

XIOC detected Domain: vnd.is

extracted_from_files

IP
detected Domain: vnd.ipld.car

XIOC detected Domain: vnd.ipld.car

extracted_from_files

Domain
detected Domain: vnd.openstreetmap.data

XIOC detected Domain: vnd.openstreetmap.data

extracted_from_files

Domain
detected Domain: vnd.openblox.game

XIOC detected Domain: vnd.openblox.game

extracted_from_files

Domain
detected Domain: vnd.oma.poc.final

XIOC detected Domain: vnd.oma.poc.final

extracted_from_files

Domain
detected Domain: vnd.oma.group

XIOC detected Domain: vnd.oma.group

extracted_from_files

Domain
detected Domain: vnd.oma.cab

XIOC detected Domain: vnd.oma.cab

extracted_from_files

Domain
detected Domain: vnd.oasis.opendocument.graphics

XIOC detected Domain: vnd.oasis.opendocument.graphics

extracted_from_files

Domain
detected Domain: vnd.nokia.radio

XIOC detected Domain: vnd.nokia.radio

extracted_from_files

Domain
detected Domain: vnd.ruckus.download

XIOC detected Domain: vnd.ruckus.download

extracted_from_files

Domain
detected Domain: vnd.rs

XIOC detected Domain: vnd.rs

extracted_from_files

Domain
detected Domain: vnd.route66.link

XIOC detected Domain: vnd.route66.link

extracted_from_files

Domain
detected Domain: vnd.rainstor.data

XIOC detected Domain: vnd.rainstor.data

extracted_from_files

Domain
detected Domain: vnd.previewsystems.box

XIOC detected Domain: vnd.previewsystems.box

extracted_from_files

Domain
detected Domain: vnd.poc.group

XIOC detected Domain: vnd.poc.group

extracted_from_files

Domain
detected Domain: vnd.openxmlformats-package.digital

XIOC detected Domain: vnd.openxmlformats-package.digital

extracted_from_files

Domain
detected Domain: vnd.digital

XIOC detected Domain: vnd.digital

extracted_from_files

Domain
detected Domain: vnd.dece.audio

XIOC detected Domain: vnd.dece.audio

extracted_from_files

Domain
detected Domain: vnd.cmles.radio

XIOC detected Domain: vnd.cmles.radio

extracted_from_files

Domain
detected Domain: vnd.youtube.yt

XIOC detected Domain: vnd.youtube.yt

extracted_from_files

Domain
detected Domain: vnd.uplanet.channel

XIOC detected Domain: vnd.uplanet.channel

extracted_from_files

Domain
detected Domain: vnd.syncml.dm

XIOC detected Domain: vnd.syncml.dm

extracted_from_files

Domain
detected Domain: vnd.sealed.net

XIOC detected Domain: vnd.sealed.net

extracted_from_files

Domain
detected Domain: vnd.abc

XIOC detected Domain: vnd.abc

extracted_from_files

Domain
detected Domain: vnd.gs

XIOC detected Domain: vnd.gs

extracted_from_files

Domain
detected Domain: vnd.net

XIOC detected Domain: vnd.net

extracted_from_files

IP
detected Domain: vnd.rip

XIOC detected Domain: vnd.rip

extracted_from_files

Domain
detected Domain: vnd.nokia.mobile

XIOC detected Domain: vnd.nokia.mobile

extracted_from_files

Domain
detected Domain: vnd.hns.audio

XIOC detected Domain: vnd.hns.audio

extracted_from_files

Domain
detected Domain: vnd.dolby.pl

XIOC detected Domain: vnd.dolby.pl

extracted_from_files

Domain
detected Domain: vnd.dece.mobile

XIOC detected Domain: vnd.dece.mobile

extracted_from_files

Domain
detected Domain: vnd.wap.sl

XIOC detected Domain: vnd.wap.sl

extracted_from_files

Domain
detected Domain: vnd.wap.si

XIOC detected Domain: vnd.wap.si

extracted_from_files

Domain
detected Domain: vnd.sun.j2me.app

XIOC detected Domain: vnd.sun.j2me.app

extracted_from_files

Domain
detected Domain: vnd.in3d.spot

XIOC detected Domain: vnd.in3d.spot

extracted_from_files

Domain
detected Domain: vnd.in

XIOC detected Domain: vnd.in

extracted_from_files

Domain
detected Domain: vnd.fly

XIOC detected Domain: vnd.fly

extracted_from_files

Domain
detected Domain: vnd.sealedmedia.softseal.mov

XIOC detected Domain: vnd.sealedmedia.softseal.mov

extracted_from_files

Domain
detected Domain: vnd.nokia.mp

XIOC detected Domain: vnd.nokia.mp

extracted_from_files

Domain
detected Domain: vnd.motorola.video

XIOC detected Domain: vnd.motorola.video

extracted_from_files

Domain
detected Domain: vnd.hns.video

XIOC detected Domain: vnd.hns.video

extracted_from_files

Domain
detected Domain: vnd.dece.video

XIOC detected Domain: vnd.dece.video

extracted_from_files

Domain
detected Domain: vnd.dece.sd

XIOC detected Domain: vnd.dece.sd

extracted_from_files

Domain
detected Domain: vnd.dece.mp

XIOC detected Domain: vnd.dece.mp

extracted_from_files

Domain
detected Domain: toc.md

XIOC detected Domain: toc.md

extracted_from_files

Domain
detected Domain: originalmount.call

XIOC detected Domain: originalmount.call

extracted_from_files

Domain
detected Domain: originaluse.call

XIOC detected Domain: originaluse.call

extracted_from_files

Domain
detected Domain: route.middleware.map

XIOC detected Domain: route.middleware.map

extracted_from_files

URL
detected Domain: event.url.search

XIOC detected Domain: event.url.search

extracted_from_files

Domain
detected Domain: vnd.vivo

XIOC detected Domain: vnd.vivo

extracted_from_files

Domain
detected Domain: vnd.uvvu.mp

XIOC detected Domain: vnd.uvvu.mp

extracted_from_files

Domain
detected Domain: error.md

XIOC detected Domain: error.md

extracted_from_files

Domain
detected Domain: response.md

XIOC detected Domain: response.md

extracted_from_files

Domain
detected Domain: handler.md

XIOC detected Domain: handler.md

extracted_from_files

Domain
detected Domain: middleware.md

XIOC detected Domain: middleware.md

extracted_from_files

Domain
detected Domain: routing.md

XIOC detected Domain: routing.md

extracted_from_files

Domain
detected Domain: lifecycle.md

XIOC detected Domain: lifecycle.md

extracted_from_files

Domain
detected Domain: index.md

XIOC detected Domain: index.md

extracted_from_files

Domain
detected Domain: request.md

XIOC detected Domain: request.md

extracted_from_files

Domain
detected Domain: nightly.md

XIOC detected Domain: nightly.md

extracted_from_files

Domain
detected Domain: websocket.md

XIOC detected Domain: websocket.md

extracted_from_files

Domain
detected Domain: plugins.md

XIOC detected Domain: plugins.md

extracted_from_files

Domain
detected Domain: h3event.md

XIOC detected Domain: h3event.md

extracted_from_files

Domain
detected Domain: h3.md

XIOC detected Domain: h3.md

extracted_from_files

Domain
detected Domain: nested-apps.md

XIOC detected Domain: nested-apps.md

extracted_from_files

Domain
detected Domain: handle-cookie.md

XIOC detected Domain: handle-cookie.md

extracted_from_files

Domain
detected Domain: community.md

XIOC detected Domain: community.md

extracted_from_files

Domain
detected Domain: more.md

XIOC detected Domain: more.md

extracted_from_files

Domain
detected Domain: mcp.md

XIOC detected Domain: mcp.md

extracted_from_files

Domain
detected Domain: proxy.md

XIOC detected Domain: proxy.md

extracted_from_files

Domain
detected Domain: security.md

XIOC detected Domain: security.md

extracted_from_files

Domain
detected Domain: cookie.md

XIOC detected Domain: cookie.md

extracted_from_files

Domain
detected Domain: badge.fury.io

XIOC detected Domain: badge.fury.io

extracted_from_files

Domain
detected Domain: www.npmjs.com

XIOC detected Domain: www.npmjs.com

extracted_from_files

Domain
detected Domain: postcss.github.io

XIOC detected Domain: postcss.github.io

extracted_from_files

Domain
detected Domain: validate-data.md

XIOC detected Domain: validate-data.md

extracted_from_files

Domain
detected Domain: somethingdoug.com

XIOC detected Domain: somethingdoug.com

extracted_from_files

Domain
detected Domain: serve-static-assets.md

XIOC detected Domain: serve-static-assets.md

extracted_from_files

IP
detected IP: 4.1.2.7

XIOC detected IP: 4.1.2.7

extracted_from_files

Domain
detected Domain: arktype.io

XIOC detected Domain: arktype.io

extracted_from_files

Domain
detected Domain: render.com

XIOC detected Domain: render.com

extracted_from_files

Domain
detected Domain: platform.sh

XIOC detected Domain: platform.sh

extracted_from_files

Domain
detected Domain: engine.io

XIOC detected Domain: engine.io

extracted_from_files

Domain
detected Domain: sqlite.org

XIOC detected Domain: sqlite.org

extracted_from_files

Domain
detected Domain: socket.io

XIOC detected Domain: socket.io

extracted_from_files

Domain
detected Domain: bomb.sh

XIOC detected Domain: bomb.sh

extracted_from_files

Domain
detected Domain: srvx.h3.dev

XIOC detected Domain: srvx.h3.dev

extracted_from_files

Domain
detected Domain: raw.githubusercontent.com

XIOC detected Domain: raw.githubusercontent.com

extracted_from_files

Domain
detected Domain: crossws.h3.dev

XIOC detected Domain: crossws.h3.dev

extracted_from_files

Domain
detected Domain: body.name

XIOC detected Domain: body.name

extracted_from_files

Domain
detected Domain: query.page

XIOC detected Domain: query.page

extracted_from_files

Domain
detected Domain: valibot.dev

XIOC detected Domain: valibot.dev

extracted_from_files

Domain
detected Domain: zod.dev

XIOC detected Domain: zod.dev

extracted_from_files

Domain
detected Domain: deno.com

XIOC detected Domain: deno.com

extracted_from_files

Domain
detected Domain: stackblitz.com

XIOC detected Domain: stackblitz.com

extracted_from_files

Domain
detected Domain: event.context.params.name

XIOC detected Domain: event.context.params.name

extracted_from_files

Domain
detected Domain: elysiajs.com

XIOC detected Domain: elysiajs.com

extracted_from_files

Domain
detected Domain: hono.dev

XIOC detected Domain: hono.dev

extracted_from_files

Domain
detected Domain: h3event.app

XIOC detected Domain: h3event.app

extracted_from_files

Domain
detected Domain: telemetry.example.com

XIOC detected Domain: telemetry.example.com

extracted_from_files

Domain
detected Domain: docs.apitally.io

XIOC detected Domain: docs.apitally.io

extracted_from_files

Domain
detected Domain: apitally.io

XIOC detected Domain: apitally.io

extracted_from_files

Domain
detected Domain: destr.unjs.io

XIOC detected Domain: destr.unjs.io

extracted_from_files

Domain
detected Domain: medium.com

XIOC detected Domain: medium.com

extracted_from_files

Domain
detected Domain: rou3.h3.dev

XIOC detected Domain: rou3.h3.dev

extracted_from_files

Domain
detected Domain: esm.sh

XIOC detected Domain: esm.sh

extracted_from_files

Domain
detected Domain: bun.sh

XIOC detected Domain: bun.sh

extracted_from_files

Other
detected Email: node_modules/@bomb.sh

XIOC detected Email: node_modules/@bomb.sh

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: intlify.dev

XIOC detected Domain: intlify.dev

extracted_from_files

Domain
detected Domain: h3ravel.toneflix.net

XIOC detected Domain: h3ravel.toneflix.net

extracted_from_files

URL
detected URL: https://h3.dev)

XIOC detected URL: https://h3.dev)

extracted_from_files

URL
detected URL: https://v1.h3.dev/)

XIOC detected URL: https://v1.h3.dev/)

extracted_from_files

URL
detected URL: https://github.com/h3js/h3/tree/v1)

XIOC detected URL: https://github.com/h3js/h3/tree/v1)

extracted_from_files

URL
detected URL: https://img.shields.io/npm/dm/h3)](https://npm.chart.dev/h3)

XIOC detected URL: https://img.shields.io/npm/dm/h3)](https://npm.chart.dev/h3)

extracted_from_files

URL
detected URL: https://img.shields.io/npm/v/h3)](https://npmjs.com/package/h3)

XIOC detected URL: https://img.shields.io/npm/v/h3)](https://npmjs.com/package/h3)

extracted_from_files

Other
detected Email: node_modules/@sqlite.org

XIOC detected Email: node_modules/@sqlite.org

extracted_from_files

Other
detected Email: node_modules/@socket.io

XIOC detected Email: node_modules/@socket.io

extracted_from_files

URL
detected URL: https://contrib.rocks/image?repo=h3js/h3

XIOC detected URL: https://contrib.rocks/image?repo=h3js/h3

extracted_from_files

URL
detected URL: https://github.com/h3js/h3/graphs/contributors

XIOC detected URL: https://github.com/h3js/h3/graphs/contributors

extracted_from_files

URL
detected URL: https://github.com/h3js/h3/graphs/contributors)

XIOC detected URL: https://github.com/h3js/h3/graphs/contributors)

extracted_from_files

URL
detected URL: https://github.com/pi0)

XIOC detected URL: https://github.com/pi0)

extracted_from_files

URL
detected URL: https://github.com/h3js/h3/blob/main/LICENSE)

XIOC detected URL: https://github.com/h3js/h3/blob/main/LICENSE)

extracted_from_files

URL
detected URL: https://github.com/nodejs/corepack)

XIOC detected URL: https://github.com/nodejs/corepack)

extracted_from_files

URL
detected URL: https://nodejs.org/en/)

XIOC detected URL: https://nodejs.org/en/)

extracted_from_files

URL
detected URL: http://nfriedly.com/)

XIOC detected URL: http://nfriedly.com/)

extracted_from_files

URL
detected URL: https://github.com/nfriedly/set-cookie-parser

XIOC detected URL: https://github.com/nfriedly/set-cookie-parser

extracted_from_files

URL
detected URL: https://github.com/jshttp/cookie

XIOC detected URL: https://github.com/jshttp/cookie

extracted_from_files

URL
detected URL: https://github.com/unjs/cookie-es

XIOC detected URL: https://github.com/unjs/cookie-es

extracted_from_files

URL
detected URL: https://github.com/h3js/h3/issues

XIOC detected URL: https://github.com/h3js/h3/issues

extracted_from_files

URL
detected URL: https://h3.dev

XIOC detected URL: https://h3.dev

extracted_from_files

URL
detected URL: https://automd.unjs.io)_

XIOC detected URL: https://automd.unjs.io)_

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events#fields

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events#fields

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events#event_stream_format)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events#event_stream_format)

extracted_from_files

URL
detected URL: https://example.com

XIOC detected URL: https://example.com

extracted_from_files

URL
detected URL: https://example.com/path

XIOC detected URL: https://example.com/path

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request).

extracted_from_files

URL
detected URL: https://github.com/unjs/fetchdts

XIOC detected URL: https://github.com/unjs/fetchdts

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Credentials

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Expose-Headers

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Headers

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Methods

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin

extracted_from_files

URL
detected URL: https://www.rfc-editor.org/rfc/rfc7230#section-3.1.2

XIOC detected URL: https://www.rfc-editor.org/rfc/rfc7230#section-3.1.2

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events/Using_server-sent_events)

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.1

XIOC detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.1

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.3

XIOC detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.3

extracted_from_files

URL
detected URL: http://_

XIOC detected URL: http://_

extracted_from_files

URL
detected URL: https://www.jsonrpc.org/specification

XIOC detected URL: https://www.jsonrpc.org/specification

extracted_from_files

URL
detected URL: https://h3.dev/guide/websocket

XIOC detected URL: https://h3.dev/guide/websocket

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Max-Age

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Max-Age

extracted_from_files

URL
detected URL: https://fetch.spec.whatwg.org/#cors-protocol-and-credentials

XIOC detected URL: https://fetch.spec.whatwg.org/#cors-protocol-and-credentials

extracted_from_files

URL
detected URL: https://datatracker.ietf.org/doc/html/draft-cutler-httpbis-partitioned-cookies#section-2.1)

XIOC detected URL: https://datatracker.ietf.org/doc/html/draft-cutler-httpbis-partitioned-cookies#section-2.1)

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.5

XIOC detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.5

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-03#section-4.1.2.7

XIOC detected URL: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-03#section-4.1.2.7

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.4

XIOC detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.4

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.6

XIOC detected URL: https://tools.ietf.org/html/rfc6265#section-5.2.6

extracted_from_files

URL
detected URL: https://tools.ietf.org/html/rfc6265#section-5.3

XIOC detected URL: https://tools.ietf.org/html/rfc6265#section-5.3

extracted_from_files

URL
detected URL: https://developer.mozilla.org/docs/Web/API/Headers/set)

XIOC detected URL: https://developer.mozilla.org/docs/Web/API/Headers/set)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/docs/Web/API/Headers/has)

XIOC detected URL: https://developer.mozilla.org/docs/Web/API/Headers/has)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/docs/Web/API/Headers/getSetCookie)

XIOC detected URL: https://developer.mozilla.org/docs/Web/API/Headers/getSetCookie)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/docs/Web/API/Headers/get)

XIOC detected URL: https://developer.mozilla.org/docs/Web/API/Headers/get)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/docs/Web/API/Headers/delete)

XIOC detected URL: https://developer.mozilla.org/docs/Web/API/Headers/delete)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/docs/Web/API/Headers/append)

XIOC detected URL: https://developer.mozilla.org/docs/Web/API/Headers/append)

extracted_from_files

URL
detected URL: https://github.com/privacycg/CHIPS).

XIOC detected URL: https://github.com/privacycg/CHIPS).

extracted_from_files

URL
detected URL: https://www.npmjs.com/package/yaml

XIOC detected URL: https://www.npmjs.com/package/yaml

extracted_from_files

URL
detected URL: https://postcss.github.io/postcss/logo.svg

XIOC detected URL: https://postcss.github.io/postcss/logo.svg

extracted_from_files

URL
detected URL: https://h3.dev/llms.txt

XIOC detected URL: https://h3.dev/llms.txt

extracted_from_files

Domain
detected Domain: contrib.rocks

XIOC detected Domain: contrib.rocks

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request)

extracted_from_files

Domain
detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

URL
detected URL: https://valibot.dev),

XIOC detected URL: https://valibot.dev),

extracted_from_files

URL
detected URL: https://zod.dev),

XIOC detected URL: https://zod.dev),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ReadableStream)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/ReadableStream)

extracted_from_files

URL
detected URL: http://localhost:3000.

XIOC detected URL: http://localhost:3000.

extracted_from_files

URL
detected URL: https://github.com/h3js/h3/tree/main/examples)

XIOC detected URL: https://github.com/h3js/h3/tree/main/examples)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie):

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie):

extracted_from_files

URL
detected URL: https://badge.fury.io/js/yaml.svg

XIOC detected URL: https://badge.fury.io/js/yaml.svg

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Server-sent_events).

extracted_from_files

URL
detected URL: https://raw.githubusercontent.com/h3js/crossws/refs/heads/main/playground/public/index.html

XIOC detected URL: https://raw.githubusercontent.com/h3js/crossws/refs/heads/main/playground/public/index.html

extracted_from_files

URL
detected URL: https://crossws.h3.dev/).

XIOC detected URL: https://crossws.h3.dev/).

extracted_from_files

URL
detected URL: https://valibot.dev).

XIOC detected URL: https://valibot.dev).

extracted_from_files

URL
detected URL: https://zod.dev)

XIOC detected URL: https://zod.dev)

extracted_from_files

URL
detected URL: https://github.com/standard-schema/standard-schema)).

XIOC detected URL: https://github.com/standard-schema/standard-schema)).

extracted_from_files

URL
detected URL: https://arktype.io/),

XIOC detected URL: https://arktype.io/),

extracted_from_files

URL
detected URL: https://srvx.h3.dev/guide/node).

XIOC detected URL: https://srvx.h3.dev/guide/node).

extracted_from_files

URL
detected URL: https://srvx.h3.dev)

XIOC detected URL: https://srvx.h3.dev)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URL).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URL).

extracted_from_files

URL
detected URL: https://srvx.h3.dev/guide/handler#extended-request-context)).

XIOC detected URL: https://srvx.h3.dev/guide/handler#extended-request-context)).

extracted_from_files

URL
detected URL: https://telemetry.example.com

XIOC detected URL: https://telemetry.example.com

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URL),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URL),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/async_function),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/async_function),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise)

extracted_from_files

URL
detected URL: https://elysiajs.com/patterns/mount#mount-1).

XIOC detected URL: https://elysiajs.com/patterns/mount#mount-1).

extracted_from_files

URL
detected URL: https://hono.dev/docs/api/hono#mount)

XIOC detected URL: https://hono.dev/docs/api/hono#mount)

extracted_from_files

URL
detected URL: https://elysiajs.com/)

XIOC detected URL: https://elysiajs.com/)

extracted_from_files

URL
detected URL: https://hono.dev/)

XIOC detected URL: https://hono.dev/)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/ArrayBuffer),

extracted_from_files

URL
detected URL: https://nodejs.org/api/stream.html#readable-streams)

XIOC detected URL: https://nodejs.org/api/stream.html#readable-streams)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response/Response),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response/Response),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/stringify)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/stringify)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response/Response).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response/Response).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response/Response)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response/Response)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request),

extracted_from_files

URL
detected URL: https://github.com/h3js/rou3),

XIOC detected URL: https://github.com/h3js/rou3),

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Error)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Error)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/File)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/File)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Blob)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Blob)

extracted_from_files

URL
detected URL: https://nodejs.org/api/buffer.html#buffer).

XIOC detected URL: https://nodejs.org/api/buffer.html#buffer).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array)

extracted_from_files

URL
detected URL: https://esm.sh/h3

XIOC detected URL: https://esm.sh/h3

extracted_from_files

URL
detected URL: https://bun.sh/).

XIOC detected URL: https://bun.sh/).

extracted_from_files

URL
detected URL: https://nodejs.org/)

XIOC detected URL: https://nodejs.org/)

extracted_from_files

URL
detected URL: https://deno.com/),

XIOC detected URL: https://deno.com/),

extracted_from_files

URL
detected URL: https://srvx.h3.dev/),

XIOC detected URL: https://srvx.h3.dev/),

extracted_from_files

URL
detected URL: https://stackblitz.com/github/h3js/h3/tree/main/playground?file=server.mjs).

XIOC detected URL: https://stackblitz.com/github/h3js/h3/tree/main/playground?file=server.mjs).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers).

extracted_from_files

URL
detected URL: https://rou3.h3.dev/)).

XIOC detected URL: https://rou3.h3.dev/)).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request)).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request)).

extracted_from_files

URL
detected URL: https://srvx.h3.dev/guide/node))

XIOC detected URL: https://srvx.h3.dev/guide/node))

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response)).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Response)).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers),

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers),

extracted_from_files

URL
detected URL: https://deno.com/).

XIOC detected URL: https://deno.com/).

extracted_from_files

URL
detected URL: https://bun.sh/)

XIOC detected URL: https://bun.sh/)

extracted_from_files

URL
detected URL: https://destr.unjs.io)

XIOC detected URL: https://destr.unjs.io)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/body).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/body).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/formData).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/formData).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/json).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/json).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/text).

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Request/text).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URLSearchParams)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URLSearchParams)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/parse)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON/parse)

extracted_from_files

URL
detected URL: https://docs.apitally.io/frameworks/h3).

XIOC detected URL: https://docs.apitally.io/frameworks/h3).

extracted_from_files

URL
detected URL: https://apitally.io/h3)

XIOC detected URL: https://apitally.io/h3)

extracted_from_files

URL
detected URL: https://github.com/unjs/cookie-es).

XIOC detected URL: https://github.com/unjs/cookie-es).

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers/getSetCookie)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers/getSetCookie)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie)

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Headers)

extracted_from_files

URL
detected URL: https://medium.com/intrinsic-blog/javascript-prototype-poisoning-vulnerabilities-in-the-wild-7bc15347c96).

XIOC detected URL: https://medium.com/intrinsic-blog/javascript-prototype-poisoning-vulnerabilities-in-the-wild-7bc15347c96).

extracted_from_files

URL
detected URL: https://www.rfc-editor.org/rfc/rfc7230#section-3.1.2](https://www.rfc-editor.org/rfc/rfc7230#section-3.1.2)

XIOC detected URL: https://www.rfc-editor.org/rfc/rfc7230#section-3.1.2](https://www.rfc-editor.org/rfc/rfc7230#section-3.1.2)

extracted_from_files

URL
detected URL: https://github.com/intlify/srvmid)

XIOC detected URL: https://github.com/intlify/srvmid)

extracted_from_files

URL
detected URL: https://intlify.dev/)

XIOC detected URL: https://intlify.dev/)

extracted_from_files

URL
detected URL: https://h3ravel.toneflix.net/guide/get-started).

XIOC detected URL: https://h3ravel.toneflix.net/guide/get-started).

extracted_from_files

URL
detected URL: https://h3ravel.toneflix.net)

XIOC detected URL: https://h3ravel.toneflix.net)

extracted_from_files

IP
detected IP: 192.0.2.0

XIOC detected IP: 192.0.2.0

extracted_from_files

Domain
detected Domain: pi0.io

XIOC detected Domain: pi0.io

extracted_from_files

Domain
detected Domain: img.shields.io

XIOC detected Domain: img.shields.io

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: v1.h3.dev

XIOC detected Domain: v1.h3.dev

extracted_from_files

Domain
detected Domain: nodejs.org

XIOC detected Domain: nodejs.org

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URL)

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/URL)

extracted_from_files

Domain
detected Domain: stream-response.md

XIOC detected Domain: stream-response.md

extracted_from_files

Domain
detected Domain: nfriedly.com

XIOC detected Domain: nfriedly.com

extracted_from_files

Domain
detected Domain: handle-session.md

XIOC detected Domain: handle-session.md

extracted_from_files

Security Analysis Summary

Security Analysis Overview

h3 is a n8n extension published by pi0. Version 2.0.1-rc.16 has been analyzed by the Risky Plugins security platform, receiving a risk score of 93.02/100 (CRITICAL risk) based on 495 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 342 finding(s)
  • Low: 153 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

h3 is published by pi0 on the n8n marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions