@bobfrankston/mailx-store-web@0.1.39: Clean npm security report

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 777 KB of source, external domains: accounts.google.com, gmail.googleapis.com, mail.google.com, oauth2.googleapis.com, people.googleapis.com, rmf39.aaz.lt, www.googleapis.com

Source & flagged code

1 flagged

worker-bundle.jsView file

•matchType = normalized_sha256 matchedPackage = @bobfrankston/rmfmail@1.2.142 matchedPath = packages/mailx-store-web/worker-bundle.js matchedIdentity = npm:QGJvYmZyYW5rc3Rvbi9ybWZtYWls:1.2.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

worker-bundle.jsView on unpkg

Source & flagged code

1 flagged · loading source

worker-bundle.jsView file

•matchType = normalized_sha256 matchedPackage = @bobfrankston/rmfmail@1.2.142 matchedPath = packages/mailx-store-web/worker-bundle.js matchedIdentity = npm:QGJvYmZyYW5rc3Rvbi9ybWZtYWls:1.2.142 similarity = 1.000 summary = normalized source hash matched finalized malicious source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code