registry / @cexy/hoonfca / 1.0.5

@cexy/hoonfca@1.0.5

Unofficial Facebook Chat API for Node.js - Interact with Facebook Messenger programmatically

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 85 file(s), 396 KB of source, external domains: api.facebook.com, b-graph.facebook.com, github.com, messenger.com, registry.npmjs.org, static.xx.fbcdn.net, upload.facebook.com, www.facebook.com, www.messenger.com

Source & flagged code

6 flagged

module/loginHelper.jsView file

Lines 1-32javascript

1"use strict";

2const fs = require("fs");

3const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

module/loginHelper.jsView on unpkg · L1

4const models = require("../src/database/models");

5const logger = require("../func/logger");

6const { get, post, jar, makeDefaults } = require("../src/utils/request");

7const { saveCookies, getAppState } = require("../src/utils/client");

8const { getFrom } = require("../src/utils/constants");

9const { loadConfig } = require("./config");

10const { config } = loadConfig();

11const { v4: uuidv4 } = require("uuid");

12const { CookieJar } = require("tough-cookie");

13const { wrapper } = require("axios-cookiejar-support");

14const axiosBase = require("axios");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

module/loginHelper.jsView on unpkg · L12

15const qs = require("querystring");

16const crypto = require("crypto");

17const { TOTP } = require("totp-generator");

19const regions = [

20 { code: "PRN", name: "Pacific Northwest Region", location: "Khu vực Tây Bắc Thái Bình Dương" },

21 { code: "VLL", name: "Valley Region", location: "Valley" },

22 { code: "ASH", name: "Ashburn Region", location: "Ashburn" },

23 { code: "DFW", name: "Dallas/Fort Worth Region", location: "Dallas/Fort Worth" },

24 { code: "LLA", name: "Los Angeles Region", location: "Los Angeles" },

25 { code: "FRA", name: "Frankfurt", location: "Frankfurt" },

26 { code: "SIN", name: "Singapore", location: "Singapore" },

27 { code: "NRT", name: "Tokyo", location: "Japan" },

28 { code: "HKG", name: "Hong Kong", location: "Hong Kong" },

29 { code: "SYD", name: "Sydney", location: "Sydney" },

30 { code: "PNB", name: "Pacific Northwest - Beta", location: "Pacific Northwest " }

31];

func/checkUpdate.jsView file

Lines 1-29javascript

1const logger = require("./logger");

2const fs = require("fs");

3const path = require

DOCS.mdView file

Lines 4-106markdown

5**@dongdev/fca-unofficial** is an unofficial Node.js library for interacting with Facebook Messenger by emulating browser behavior. This library allows you to create chat bots and automate tasks on Facebook Messenger.

7## Installation

9```bash

10npm install @dongdev/fca-unofficial@latest

11```

13---

Source & flagged code

6 flagged · loading source

module/loginHelper.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code