registry / @aweray/hsk-cli / 0.4.13

@aweray/hsk-cli@0.4.13

⚠ Under review

HSK CLI - 内网穿透 & 文件托管，支持 Windows/macOS/Linux 多平台

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 79.9 KB of source

Source & flagged code

3 flagged

bin/hsk-cli.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { program } = require('commander');

4const chalk = require('chalk');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/hsk-cli.jsView on unpkg · L2

5const tunnel = require('../lib/commands/tunnel');

6const fileHosting = require('../lib/commands/fileHosting');

7const fileHostingBind = require('../lib/commands/fileHostingBind');

8const apiKey = require('../lib/commands/apiKey');

9const download = require('../lib/core/download');

10const platform = require('../lib/core/platform');

11const format = require('../lib/core/format');

12const pidManager = require('../lib/commands/pidManager');

13const version = require('../lib/core/version');

14const config = require('../lib/commands/config');

15const build = require('../lib/commands/build');

16const resourceStore = require('../lib/commands/resourceStore');

17const resourceChecker = require('../lib/commands/resourceChecker');

18const errorHandler = require('../lib/core/errorHandler');

19const HskError = require('../lib/core/HskError');

20const agent = require('../lib/core/agent');

22// === 全局选项 ===

lib/commands/resourceChecker.jsView file

•matchType = normalized_sha256 matchedPackage = @aweray/hsk-cli@0.7.24 matchedPath = lib/commands/resourceChecker.js matchedIdentity = npm:QGF3ZXJheS9oc2stY2xp:0.7.24 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/commands/resourceChecker.jsView on unpkg

lib/commands/tunnel.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @aweray/hsk-cli@0.7.23 matchedIdentity = npm:QGF3ZXJheS9oc2stY2xp:0.7.23 similarity = 0.455 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/commands/tunnel.jsView on unpkg

Source & flagged code

3 flagged · loading source

bin/hsk-cli.jsView file

@aweray/hsk-cli@0.4.13

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code