registry / @acedatacloud/nexior / 3.314.0

@acedatacloud/nexior@3.314.0

⚠ Under review

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,089 file(s), 14.9 MB of source, external domains: api-test.acedata.cloud, api.acedata.cloud, api.devnet.solana.com, api.mainnet-beta.solana.com, api.testnet.solana.com, api.web3modal.org, auth-test.acedata.cloud, auth.acedata.cloud, basescan.org, cdn.acedata.cloud, cdn.plyr.io, coding-bridge-test.acedata.cloud, coding-bridge.acedata.cloud, connect.solflare.com, echo.walletconnect.com, element-plus.org, example.com, exemplo.com, fonts.googleapis.com, fpjs.dev, github.com, go.aniview.com, go.cb-w.com, hub-test.acedata.cloud, hub.acedata.cloud, i.ytimg.com, imasdk.googleapis.com, m1.openfpcdn.io, mainnet.base.org, midas.gtimg.cn, next.vuex.vuejs.org, nightly.app, noembed.com, phantom.app, platform-test.acedata.cloud, platform.acedata.cloud, player.vimeo.com, pulse.walletconnect.org, rpc.walletconnect.org, rumt-zh.com, schema.org, secure.walletconnect.org, sepolia.base.org, sepolia.basescan.org, skale-base-explorer.skalenodes.com, skale-base.skalenodes.com, solanamobile.com, solflare.com, solscan.io, static.aipedias.com

Source & flagged code

2 flagged

dist/assets/index-DJu8BXX6.jsView file

Lines 1-21javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/aegis.min-C7H4WXnC.js","assets/rolldown-runtime--c01j_DQ.js","assets/vendor-highlight-BtIeKitL.js","assets/vendor-highlight-DFgTH0rK.css","assets/Auth-CjoD6p4C.js","assets/vendor-chart-BJCvKk8-.js","assets/container-BgEH5azS.js","assets/install-CmiepWqE.js","assets/Auth-CMxg_APQ.css","assets/Login-ZkRB_fWm.js","assets/Callback-BTR5qZwe.js","assets/Callback-BOWlkJeC.css","assets/Console-CMGjgItF.js","assets/index.es-CY1hfDt2.js","assets/Navigator-DCM4DpQV.js","assets/constants-4v-9kyGt.js","assets/preload-helper-zJ_50EbN.js","asse ...

2import{o as e,r as t,t as n}from"./rolldown-runtime--c01j_DQ.js";import{A as r,B as i,Bt as a,C as o,Ct as s,D as c,E as l,Et as u,F as d,G as

3`)>=0)return!1;return!0}function Oe(e,t){var n;if(e.indent===` `)n=` `;else if(typeof e.indent==`number`&&e.indent>0)n=C.call(Array(e.indent+1),` `);else return null;return{base:n,prev:C.call(Array(t+1),n)}}function ke(e,t){if(e.length===0)return``;var n=`

4`+t.prev+t.base;return n+C.call(e,`,`+n)+`

5`+t.prev}function Ae(e,t){var n=ie(e),r=[];if(n){r.length=e.length;for(var i=0;i<e.length;i++)r[i]=pe(e,i)?t(e[i],e):``}var a=typeof D==`function`?D(e):[],o;if(k){o={};for(var s=0;s<a.length;s++)o[`$`+a[s]]=a[s]}for(var c in e)pe(e,c)&&(n&&String(Number(c))===c&&c<e.length||k&&o[`$`+c]instanceof Symbol||(x.call(/[^\w$]/,c)?r.push(t(c,e)+`: `+t(e[c],e)):r.push(c+`: `+t(e[c],e))));if(typeof D==`function`)for(var l=0;l<a.length;l++)j.call(e,a[l])&&r.push(`[`+t(a[l])+`]: `+t(e[a[l]],e));return r}})),Hl=n(((e,t)=>{var n=Vl(),r=zl(),i=function(e,t,n){for(var r=e,i;(i=r.next)!=null;r=i)if(i.key===t)r ...

6`);l=u.pop()||``;for(let e of u){let i=e.trim();if(i&&i.startsWith(`data: `)){let e=i.substring(6).trim();if(e===`[DONE]`){n({answer:s,delta_answer:``});return}try{let n=JSON.parse

7]))+`;e.KANJI=new RegExp(r,`g`),e.BYTE_KANJI=RegExp(`[^A-Z0-9 $%*+\\-./:]+`,`g`),e.BYTE=new RegExp(i,`g`),e.NUMERIC=new RegExp(t,`g`),e.ALPHANUMERIC=new RegExp(n,`g`);var a=RegExp(`^`+r+`$`),o=RegExp(`^[0-9]+$`),s=RegExp(`^[A-Z0-9 $%*+

8Make sure your charset is UTF-8`);n=(n>>>8&255)*192+(n&255),e.put(n,13)}},t.exports=i})),Im=n(((e,t)=>{var n={single_source_shortest_paths:function(e,t,r){var i={},a={};a[t]=0;

9 Suggested mode is: `+t.toString(l));switch(c===t.KANJI&&!s.isKanjiModeEnabled()&&(c=t.BYTE),c){case t.NUMERIC:return new n(e);case t.ALPHANUMERIC:return new r(e);case t.KANJI:return new a(e);case t.BYTE:return new i(e)}}e.fromArray=function(e){return e.reduce(function(e,t){return typeof t==`string`?e.push(g(t,null)):t.data&&e.push(g(t.data,t.mode)),e},[])},e.fromString=function(t,n){let r=h(m(d(t,s.isKanjiModeEnabled())),n),i=c.find_path(r.map,`start`,`end`),a=[];for(let e=1;e<i.length-1;e++)a.push(r.table[i[e]].node);return e.fromArray(p(a))},e.rawSplit=function(t){return e.fromArray(d(t,s.i ...

10The chosen QR Code version cannot contain this amount of data.

11Minimum version required to store current data is: `+c+`.

12`);let l=b(n,r,o),d=new i(t.getSymbolSize(n));return m(d,n),h(d),g(d,n),v(d,r,0),n>=7&&_(d,n),y(d,l),isNaN(a)&&(a=s.getBestMask(d,v.bind(null,d,r))),s.applyMask(a,d),v(d,r,a),{modules:d,version:n,errorCorrectionLevel:r,maskPattern:a,segments:o}}e.create

13`;return typeof a==`function`&&a(null,p),p}})),Hm=e(n((e=>{var t=hm(),n=Rm(),r=Bm(),i=Vm();function a(e,r,i,a,o){let s=[].slice.call

14In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}var a,o=!0,s=!1;return{s:function(){n=n.call(e)},n:function(){var e=n.next();return o=e.done,e},e:function(e){s=!0,a=e},f:function(){try{o||n.return==null||n.return()}finally{if(s)throw a}}}}function J(e,t,n){return(t=Nv(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function Tv(e){if(typeof Symbol<`u`&&e[Symbol.iterator]!=null||e[`@@iterator`]!=null)return Array.from(e)}function Ev(e,t){var n=e==null?null:typeof Symbol<`u`&&e[Symbol.iterator]||e[`@@iterator`];i ...

15In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function Ov(){throw TypeError(`Invalid attempt to spread non-iterable instance.

16In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function kv(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter(function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable})),n.push.apply(n,r)}return n}function Y(e){

17 --fa-font-solid: normal 900 1em/1 'Font Awesome 7 Free';

18 --fa-font-regular: normal 400 1em/1 'Font Awesome 7 Free';

19 --fa-font-light: normal 300 1em/1 'Font Awesome 7 Pro';

20 --fa-font-thin: normal 100 1em/1 'Font Awesome 7 Pro';

21 --fa-font-duotone: normal 900 1em/1 'Font Awesome 7 Duotone';

Long lines were clipped for display.

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

Source & flagged code

2 flagged · loading source

dist/assets/index-DJu8BXX6.jsView file

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/aegis.min-C7H4WXnC.js","assets/rolldown-runtime--c01j_DQ.js","assets/vendor-highlight-BtIeKitL.js","assets/vendor-h... L2: import{o as e,r as t,t as n}from"./rolldown-runtime--c01j_DQ.js";import{A as r,B as i,Bt as a,C as o,Ct as s,D as c,E as l,Et as u,F as d,G as f,H as p,I as m,It as h,J as g,Lt as ... L3: `)>=0)return!1;return!0}function Oe(e,t){var n;if(e.indent===` `)n=` `;else if(typeof e.indent==`number`&&e.indent>0)n=C.call(Array(e.indent+1),` `);else return null;return{base:n,... ... L5: `+t.prev}function Ae(e,t){var n=ie(e),r=[];if(n){r.length=e.length;for(var i=0;i<e.length;i++)r[i]=pe(e,i)?t(e[i],e):``}var a=typeof D==`function`?D(e):[],o;if(k){o={};for(var s=0;... L6: `);l=u.pop()||``;for(let e of u){let i=e.trim();if(i&&i.startsWith(`data: `)){let e=i.substring(6).trim();if(e===`[DONE]`){n({answer:s,delta_answer:``});return}try{let n=JSON.parse... L7: ]))+`;e.KANJI=new RegExp(r,`g`),e.BYTE_KANJI=RegExp(`[^A-Z0-9 $%*+\\-./:]+`,`g`),e.BYTE=new RegExp(i,`g`),e.NUMERIC=new RegExp(t,`g`),e.ALPHANUMERIC=new RegExp(n,`g`);var a=RegExp(...

Critical

Clipboard Crypto Hijack

Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.

dist/assets/index-DJu8BXX6.jsView on unpkg · L1

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

Findings

1 Critical1 High3 Medium6 Low

CriticalClipboard Crypto Hijackdist/assets/index-DJu8BXX6.js

HighShips High Entropy Blobdist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2

MediumNetwork

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

2 flagged

dist/assets/index-DJu8BXX6.jsView file

Lines 1-21javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/aegis.min-C7H4WXnC.js","assets/rolldown-runtime--c01j_DQ.js","assets/vendor-highlight-BtIeKitL.js","assets/vendor-highlight-DFgTH0rK.css","assets/Auth-CjoD6p4C.js","assets/vendor-chart-BJCvKk8-.js","assets/container-BgEH5azS.js","assets/install-CmiepWqE.js","assets/Auth-CMxg_APQ.css","assets/Login-ZkRB_fWm.js","assets/Callback-BTR5qZwe.js","assets/Callback-BOWlkJeC.css","assets/Console-CMGjgItF.js","assets/index.es-CY1hfDt2.js","assets/Navigator-DCM4DpQV.js","assets/constants-4v-9kyGt.js","assets/preload-helper-zJ_50EbN.js","asse ...

2import{o as e,r as t,t as n}from"./rolldown-runtime--c01j_DQ.js";import{A as r,B as i,Bt as a,C as o,Ct as s,D as c,E as l,Et as u,F as d,G as

4`+t.prev+t.base;return n+C.call(e,`,`+n)+`

6`);l=u.pop()||``;for(let e of u){let i=e.trim();if(i&&i.startsWith(`data: `)){let e=i.substring(6).trim();if(e===`[DONE]`){n({answer:s,delta_answer:``});return}try{let n=JSON.parse

8Make sure your charset is UTF-8`);n=(n>>>8&255)*192+(n&255),e.put(n,13)}},t.exports=i})),Im=n(((e,t)=>{var n={single_source_shortest_paths:function(e,t,r){var i={},a={};a[t]=0;

10The chosen QR Code version cannot contain this amount of data.

11Minimum version required to store current data is: `+c+`.

13`;return typeof a==`function`&&a(null,p),p}})),Hm=e(n((e=>{var t=hm(),n=Rm(),r=Bm(),i=Vm();function a(e,r,i,a,o){let s=[].slice.call

15In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function Ov(){throw TypeError(`Invalid attempt to spread non-iterable instance.

17 --fa-font-solid: normal 900 1em/1 'Font Awesome 7 Free';

18 --fa-font-regular: normal 400 1em/1 'Font Awesome 7 Free';

19 --fa-font-light: normal 300 1em/1 'Font Awesome 7 Pro';

20 --fa-font-thin: normal 100 1em/1 'Font Awesome 7 Pro';

21 --fa-font-duotone: normal 900 1em/1 'Font Awesome 7 Duotone';

Long lines were clipped for display.

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg