registry  /  @blacksheepweb/wool-js  /  1.0.6

@blacksheepweb/wool-js@1.0.6

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
Eval
Supply chain
Obfuscated
ManifestNo manifest risk signals triggered.
scanned 8 file(s), 15.4 KB of source

Source & flagged code

2 flagged · loading source
dist/array.jsView file
1const _0x78ea67=_0x1e43;(function(_0xb0229e,_0x2c3c96){const _0x94867f=_0x1e43,_0x5e7807=_0xb0229e();while(!![]){try{const _0x2de8=-parseInt(_0x94867f(0x7a))/0x1*(-parseInt(_0x9486...
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/array.jsView on unpkg · L1
dist/wxWeChat.jsView file
1function _0x3dfb(){var _0x1ea7a2=['189048XVRNZD','wgs84','10806UDXqwG','scope.userLocation','getWxLocation','10XmCBPd','无授权','542130CIuhgn','getLocation','6167532WDYgCP','628668egY...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/wxWeChat.jsView on unpkg · L1

Findings

2 High1 Medium2 Low
HighObfuscated Payload Loaderdist/wxWeChat.js
HighObfuscated
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/array.js