registry  /  @blacksheepweb/wool-js  /  1.0.4

@blacksheepweb/wool-js@1.0.4

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
Eval
Supply chain
Obfuscated
ManifestNo manifest risk signals triggered.
scanned 8 file(s), 15.6 KB of source

Source & flagged code

2 flagged · loading source
dist/array.jsView file
1const _0x451385=_0xd651;(function(_0x3b0a51,_0x325fef){const _0x372394=_0xd651,_0x36d65d=_0x3b0a51();while(!![]){try{const _0x453a8f=parseInt(_0x372394(0xe0))/0x1+-parseInt(_0x3723...
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/array.jsView on unpkg · L1
dist/wxWeChat.jsView file
1var _0x6bc62e=_0x4203;function _0x4203(_0x185e24,_0x43f46a){_0x185e24=_0x185e24-0x19a;var _0x756b87=_0x756b();var _0x420308=_0x756b87[_0x185e24];return _0x420308;}function _0x756b(...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/wxWeChat.jsView on unpkg · L1

Findings

2 High1 Medium2 Low
HighObfuscated Payload Loaderdist/wxWeChat.js
HighObfuscated
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/array.js