registry / @everymatrix/player-kyc-verification / 1.94.56

@everymatrix/player-kyc-verification@1.94.56

⚠ Under review

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEvalNetwork

Supply chain

MinifiedUrlStrings

Manifest

NoLicense

scanned 32 file(s), 352 KB of source, external domains: chat.stenciljs.com, github.com, stenciljs.com, test.insic.de, www.w3.org

Source & flagged code

3 flagged

dist/storybook/main.jsView file

Lines 4-44javascript

4 stories: ['../**/*.@(mdx|stories.@(js|ts|tsx))'],

5 addons: [

6 '@storybook/addon-essentials',

7 '@storybook/addon-interactions',

8 'storybook-dark-mode'

9 ],

10 docs: {

11 defaultName: 'Documentation',

12 autodocs: 'tag'

13 },

14 framework: {

15 name: '@storybook/web-components-vite',

16 options: {}

17 },

18 // Async viteFinal to build dependent packages before finalizing configuration.

19 viteFinal: async (config) => {

20 const storyFiles = getStoryFiles(path.resolve(__dirname, '../'));

21 const usedPackages = detectUsedPackages(storyFiles);

22 const buildPromises = usedPackages.map(async (pkg) => {

23 try {

24 console.log(`Building package ${pkg}...`);

25 const { stdout, stderr } = await exec(`nx run ${pkg}:build`);

26 console.log(`Built package ${pkg}: ${stdout}`);

High

Child Process

Package source references child process execution.

dist/storybook/main.jsView on unpkg · L24

27 if (stderr) {

28 console.error(`Build warning/error for package ${pkg}: ${stderr}`);

29 }

30 }

31 catch (error) {

32 console.error(`Error building package ${pkg}:`, error);

33 }

34 });

35 await Promise.all(buildPromises);

36 const parsedPaths = parseTsConfig() || {};

37 const filteredParsedPaths = filterParsedPathsByUsedPackages(parsedPaths, usedPackages);

38 return Object.assign(Object.assign({}, config), { resolve: {

39 alias: Object.assign({}, filteredParsedPaths)

40 }, define: {

41 process: {

42 env: {}

43 }

44 } });

dist/collection/components/player-kyc-verification/player-kyc-verification.jsView file

Lines 287-327javascript

287 })

288 .catch((error) => {

289 console.error('File upload error:', error);

290 });

291 }

292 else {

293 this.uploadingStatus

dist/player-kyc-verification/player-kyc-verification.entry.jsView file

Lines 1-1javascript

1import{r as e,h as i,F as n}from"./index-9c0f6c58.js";let t={en:{loading:"Loading, please wait ...",noVerificationRequired:"There is no verification required for your account at this moment.",verificationComplete:"Verification complete",verificationFailed:"Verification failed",verificationExpired:"Verification expired",fileSizeExceeded:"Maximum file size exceeded. Max file size is: 50mb",uploading:"Uploading ... ",successUpload:"Your document has been uploaded and it will be reviewed shortly",successUploadMultipleFiles:

Source & flagged code

3 flagged · loading source

dist/storybook/main.jsView file

24console.log(`Building package ${pkg}...`); L25: const { stdout, stderr } = await exec(`nx run ${pkg}:build`); L26: console.log(`Built package ${pkg}: ${stdout}`);

High

Child Process

Package source references child process execution.

dist/storybook/main.jsView on unpkg · L24

dist/collection/components/player-kyc-verification/player-kyc-verification.jsView file

307.then((res) => { L308: const scriptFunction = new Function(res); L309: scriptFunction();

High

Eval

Package source references dynamic code evaluation.

dist/collection/components/player-kyc-verification/player-kyc-verification.jsView on unpkg · L307

dist/player-kyc-verification/player-kyc-verification.entry.jsView file

1import{r as e,h as i,F as n}from"./index-9c0f6c58.js";let t={en:{loading:"Loading, please wait ...",noVerificationRequired:"There is no verification required for your account at th...

Critical

Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/player-kyc-verification/player-kyc-verification.entry.jsView on unpkg · L1

Findings

1 Critical2 High2 Medium2 Low

CriticalRemote Asset Decode Executedist/player-kyc-verification/player-kyc-verification.entry.js

HighChild Processdist/storybook/main.js

HighEvaldist/collection/components/player-kyc-verification/player-kyc-verification.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

dist/storybook/main.jsView file

Lines 4-44javascript

4 stories: ['../**/*.@(mdx|stories.@(js|ts|tsx))'],

5 addons: [

6 '@storybook/addon-essentials',

7 '@storybook/addon-interactions',

8 'storybook-dark-mode'

9 ],

10 docs: {

11 defaultName: 'Documentation',

12 autodocs: 'tag'

13 },

14 framework: {

15 name: '@storybook/web-components-vite',

16 options: {}

17 },

18 // Async viteFinal to build dependent packages before finalizing configuration.

19 viteFinal: async (config) => {

20 const storyFiles = getStoryFiles(path.resolve(__dirname, '../'));

21 const usedPackages = detectUsedPackages(storyFiles);

22 const buildPromises = usedPackages.map(async (pkg) => {

23 try {

24 console.log(`Building package ${pkg}...`);

25 const { stdout, stderr } = await exec(`nx run ${pkg}:build`);

26 console.log(`Built package ${pkg}: ${stdout}`);

High

Child Process

Package source references child process execution.

dist/storybook/main.jsView on unpkg · L24

27 if (stderr) {

28 console.error(`Build warning/error for package ${pkg}: ${stderr}`);

29 }

30 }

31 catch (error) {

32 console.error(`Error building package ${pkg}:`, error);

33 }

34 });

35 await Promise.all(buildPromises);

36 const parsedPaths = parseTsConfig() || {};

37 const filteredParsedPaths = filterParsedPathsByUsedPackages(parsedPaths, usedPackages);

38 return Object.assign(Object.assign({}, config), { resolve: {

39 alias: Object.assign({}, filteredParsedPaths)

40 }, define: {

41 process: {

42 env: {}

43 }

44 } });

dist/collection/components/player-kyc-verification/player-kyc-verification.jsView file

Lines 287-327javascript

287 })

288 .catch((error) => {

289 console.error('File upload error:', error);

290 });

291 }

292 else {

293 this.uploadingStatus

dist/player-kyc-verification/player-kyc-verification.entry.jsView file

Lines 1-1javascript