registry / @ethersphere/bee-dashboard / 0.37.0
@ethersphere/bee-dashboard@0.37.0
An app which helps users to setup their Bee node and do actions like cash out cheques
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings
Oversized source lightweight scan
lib/App-B7H4Gpf0.mjs5.91 MB file, sampled 256 KB
ChildProcessEnvironmentVarsHighEntropyStringsUrlStringsbridge.gnosischain.comdocs.ethswarm.org
Source & flagged code
5 flaggedbuild/assets/index-BufCo-Bs.jsView file
118`}),c.jsx("div",{className:"fm-input-label",children:a&&c.jsx("label",{htmlFor:e,className:"fm-dropdown-label",children:a})}),c.jsx("div",{className:"fm-slider",children:c.jsx(F7,{...
L119: \0`,ie+=i(Y,2),ie+=W.magic,ie+=i(R,2),ie+=i(O,2),ie+=i(ee.crc32,4),ie+=i(ee.compressedSize,4),ie+=i(ee.uncompressedSize,4),ie+=i(k.length,2),ie+=i(L.length,2),{fileRecord:g.LOCAL_F...
L120: 45deg,
Low
Eval
Package source references a known benign dynamic code generation pattern.
build/assets/index-BufCo-Bs.jsView on unpkg · L118serve.jsView file
6Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network
L6: const handler = require('serve-handler')
L7: const http = require('http')
L8: const opener = require('opener')
L9:
L10: const port = process.env.PORT || 8080
L11:
L12: const serverConfig = {
L13: public: path.join(__dirname, 'build'),
L14: trailingSlash: false,
High
Entrypoint Build Divergence
Manifest entrypoint contains risky behavior absent from dist/build output.
serve.jsView on unpkg · L6Findings
2 High6 Medium6 Low
HighEntrypoint Build Divergenceserve.js
HighSemantic Analysis Limitedlib/App-B7H4Gpf0.mjs
MediumDynamic Requireserve.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumOversized Source Filelib/App-DePYYc5z.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalbuild/assets/index-BufCo-Bs.js
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @ethersphere/bee-dashboard@0.37.0.
See all versions of @ethersphere/bee-dashboard for other recorded verdicts.
- Review the evidence and your use of @ethersphere/bee-dashboard@0.37.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.