@dev-anywhere/relay@0.5.1: Suspicious npm security report (Warn)

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 2.00 MB of source, external domains: auto.example.com, bellard.org, bit.ly, dashscope-intl.aliyuncs.com, dashscope.aliyuncs.com, example.com, github.com, json-schema.org, placehold.co, radix-ui.com, react.dev, www.w3.org

Source & flagged code

2 flagged

assets/web/assets/fvad-DYxbW2my.wasmView file

•path = assets/web/assets/fvad-DYxbW2my.wasm kind = wasm_module sizeBytes = 20569 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

assets/web/assets/fvad-DYxbW2my.wasmView on unpkg

assets/web/favicon.icoView file

•path = assets/web/favicon.ico kind = high_entropy_blob sizeBytes = 7926 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/web/favicon.icoView on unpkg

Source & flagged code

2 flagged · loading source

assets/web/assets/fvad-DYxbW2my.wasmView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code