registry / @adguard/dnr-rulesets / 3.3.20260817070057

@adguard/dnr-rulesets

@3.3.20260817070057

Utility to create AdGuard DNR rulesets for mv3 extensions

Static Scan Results

scanned 22h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 3 file(s), 2.32 MB of source, external domains: af.gog.com, dai.google.com, file-upload.org, filters.adtidy.org, foo.com, future-sale-system.de, googleads.g.doubleclick.net, pubads.g.doubleclick.net, securepubads.g.doubleclick.net, www.facebook.com, www.gog.com, www.iab.net, www.ndtv.com, www.wp.pl

Oversized source lightweight scan

dist/cli.cjs4.64 MB file, sampled 256 KB

FilesystemNetworkCrypto

Source & flagged code

5 flagged

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L951: var reservedWords = { L952: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L953: 5: "class enum extends super const export import", ... L1000: if (code <= 0xffff) { L1001: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1002: } ... L8241: start: S.token, L8242: body: block_(), L8243: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

Source & flagged code

5 flagged · loading source

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L951: var reservedWords = { L952: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L953: 5: "class enum extends super const export import", ... L1000: if (code <= 0xffff) { L1001: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1002: } ... L8241: start: S.token, L8242: body: block_(), L8243: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adguard/dnr-rulesets@5.0.20260817060105 matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:5.0.20260817060105 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 4866096 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 4866096 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg

Findings

1 High5 Medium7 Low

HighPrevious Version Dangerous Deltadist/cli.cjs

MediumNetwork

MediumShips Wasm Moduledist/re2.wasm

MediumOversized Source Filedist/cli.cjs

MediumOversized Cli Entrypointdist/cli.cjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/lib/index.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowCopyleft License

LPM CLI

Telemetry

UrlStrings

CopyleftLicense

Source & flagged code

5 flagged

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L951: var reservedWords = { L952: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L953: 5: "class enum extends super const export import", ... L1000: if (code <= 0xffff) { L1001: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1002: } ... L8241: start: S.token, L8242: body: block_(), L8243: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adguard/dnr-rulesets@5.0.20260817060105 matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:5.0.20260817060105 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 4866096 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 4866096 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg