@cexy/wonfca@1.0.0: Clean npm security report (Allow)

Loading npm security reports…

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 117 file(s), 729 KB of source, external domains: accountscenter.facebook.com, api.facebook.com, b-graph.facebook.com, business.facebook.com, facebook.com, github.com, graph.facebook.com, id.traodoisub.com, m.facebook.com, mbasic.facebook.com, static.xx.fbcdn.net, upload.facebook.com, www.facebook.com, www.messenger.com

Source & flagged code

2 flagged

index.jsView file

Lines 1-24javascript

1"use strict";

2// Nexus-FCA: Advanced and Safe Facebook Chat API (Enhanced Version)

3const utils = require("./utils");

4const log = require("npmlog");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

index.jsView on unpkg · L2

5const { execSync } = require('child_process');

6const { promises: fsPromises, readFileSync } = require('fs');

7const fs = require('fs');

8const axios = require('axios');

9const path = require('path');

10const crypto = require("crypto");

11const { v4: uuidv4 } = require("uuid");

12const models = require("./lib/database/models");

13const logger = require("./lib/logger");

14const { safeMode, ultraSafeMode, smartSafetyLimiter, isUserAllowed } = require('./utils'); // Enhanced safety system

15// Minimal aesthetic banner system

16let _fancyBannerPrinted = false;

17const gradient = (() => { try { return require('gradient-string'); } catch (_) { return null; } })();

18const pkgMeta = (() => { try { return require('./package.json'); } catch (_) { return { version: 'dev' }; } })();

19function printFancyStartupBanner() {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

index.jsView on unpkg · L4

20 if (_fancyBannerPrinted) return; _fancyBannerPrinted = true;

21 const banner = `

22 ███╗ ██╗███████╗██╗ ██╗██╗ ██╗███████╗

23 ████╗ ██║██╔════╝╚██╗██╔╝██║ ██║██╔════╝

24 ██╔██╗ ██║█████╗ ╚███╔╝ ██║ ██║███████╗

Source & flagged code

2 flagged · loading source

index.js

@cexy/wonfca@1.0.0: Clean npm security report (Allow) | LPM Firewall

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code