registry / @adguard/dnr-rulesets / 4.0.20260817020047

@adguard/dnr-rulesets@4.0.20260817020047

Utility to create AdGuard DNR rulesets for mv3 extensions

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 3 file(s), 2.32 MB of source, external domains: af.gog.com, dai.google.com, file-upload.org, filters.adtidy.org, foo.com, future-sale-system.de, googleads.g.doubleclick.net, pubads.g.doubleclick.net, securepubads.g.doubleclick.net, www.facebook.com, www.gog.com, www.iab.net, www.ndtv.com, www.wp.pl

Oversized source lightweight scan

dist/cli.cjs3.80 MB file, sampled 256 KB

FilesystemNetworkCrypto

Source & flagged code

3 flagged

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L951: var reservedWords = { L952: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L953: 5: "class enum extends super const export import", ... L1000: if (code <= 0xffff) { L1001: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1002: } ... L8241: start: S.token, L8242: body: block_(), L8243: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adguard/dnr-rulesets@3.3.20260817020051 matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:3.3.20260817020051 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code