registry / @gakwaya/app-agent-entities / 1.3.0

@gakwaya/app-agent-entities@1.3.0

Shared domain types for App-Agent — zero internal dependencies

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 6.91 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 76-116javascript

76 async ["get"](_0x5952a5) {

77 const _0x2df54a = _0x277add, _0x48abca = await this[_0x2df54a(260)](this["baseUrl"] + "/" + encodeURIComponent(this["remoteKey"](_0x5952a5)), { "method": "GET", "headers": this[_0x2df54a(239)]() });

78 if (_0x48abca["status"] === 404) return null;

79 if (!_0x48abca["ok"]) throw new Error(_0x2df54a(261) + _0x48abca["status"]);

80 const _0x2d1334 = await _0x48abca[_0x2df54a(266)]();

81 return _0x2d1334[_0x2df54a(242)] ?? null;

82 }

83 async ["set"](_0xd10c1c, _0x14868d) {

84 const _0x26906f = _0x277add, _0x276920 = await this["fetchFn"](this[_0x26906f(249)] + "/" + encodeURIComponent(this[_0x26906f(235)](_0xd10c1c)), { "method": "PUT", "headers": this[_0x26906f(239)](), "body"

85 if (!_0x276920["ok"]) throw new Error(_0x26906f(262) + _0x276920[_0x26906f(264)]);

86 }

87 async [(_c = _0x277add(254), _b = _0x277add(238), _a = _0x277add(260), _0x277add(269))](_0x2e1c6b) {

88 const _0x28b60d = _0x277add, _0x59d490 = await this[_0x28b60d(260)](this[_0x28b60d(249)] + "/" + encodeURIComponent(this[_0x28b60d(235)](_0x2e1c6b)), { "method": "DELETE", "headers": this[_0x28b60d(239

89 if (!_0x59d490["ok"] && _0x59d490["status"] !== 404) throw new Error(_0x28b60d(255) + _0x59d490[_0x28b60d(264)]);

90 }

91}

92function _0x3580(_0xf268aa, _0xdafdf9) {

93 _0xf268aa = _0xf268aa - 231;

94 const _0x5ec7ed = _0x5ec7();

95 let _0x358018 = _0x5ec7ed[_0xf268aa];

96 if (_0x3580["eWydKd"] === void 0) {

97 var _0x20d16a = function(_0x2d0de1) {

98 const _0x1f3b5f = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L96

99 let _0x1c4d06 = "", _0x4cf73d = "";

100 for (let _0x2cf8ba = 0, _0x5ebad0, _0x5aa153, _0x237d10 = 0; _0x5aa153 = _0x2d0de1["charAt"](_0x237d10++); ~_0x5aa153 && (_0x5ebad0 = _0x2cf8ba % 4 ? _0x5ebad0 * 64 + _0x5aa153 : _0x5aa153, _0x2cf8ba++ % 4) ? _0x1c4d06 += String[

101 _0x5aa153 = _0x1f3b5f["indexOf"](_0x5aa153);

102 }

103 for (let _0x4c89d3 = 0, _0x246a70 = _0x1c4d06["length"]; _0x4c89d3 < _0x246a70; _0x4c89d3++) {

104 _0x4cf73d += "%" + ("00" + _0x1c4d06["charCodeAt"](_0x4c89d3)["toString"](16))["slice"](-2);

105 }

106 return decodeURIComponent(_0x4cf73d);

107 };

108 _0x3580["RXIsJA"] = _0x20d16a, _0x3580["oAmSDS"] = {}, _0x3580["eWydKd"] = !![];

109 }

110 const _0x2b4938 = _0x5ec7ed[0], _0x1d8c69 = _0xf268aa + _0x2b4938, _0x240d1a = _0x3580["oAmSDS"][_0x1d8c69];

111 return !_0x240d1a ? (_0x358018 = _0x3580["RXIsJA"](_0x358018), _0x3580["oAmSDS"][_0x1d8c69] = _0x358018) : _0x358018 = _0x240d1a, _0x358018;

112}

113export {

114 InMemoryStorageAdapter,

115 LocalStorageAdapter,

116 RemoteStorageAdapter,

Source & flagged code

1 flagged · loading source

dist/index.jsView file

96if (_0x3580["eWydKd"] === void 0) { L97: var _0x20d16a = function(_0x2d0de1) { L98: const _0x1f3b5f = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L96

Findings

1 High1 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 76-116javascript

76 async ["get"](_0x5952a5) {

78 if (_0x48abca["status"] === 404) return null;

79 if (!_0x48abca["ok"]) throw new Error(_0x2df54a(261) + _0x48abca["status"]);

80 const _0x2d1334 = await _0x48abca[_0x2df54a(266)]();

81 return _0x2d1334[_0x2df54a(242)] ?? null;

82 }

83 async ["set"](_0xd10c1c, _0x14868d) {

85 if (!_0x276920["ok"]) throw new Error(_0x26906f(262) + _0x276920[_0x26906f(264)]);

86 }

87 async [(_c = _0x277add(254), _b = _0x277add(238), _a = _0x277add(260), _0x277add(269))](_0x2e1c6b) {

89 if (!_0x59d490["ok"] && _0x59d490["status"] !== 404) throw new Error(_0x28b60d(255) + _0x59d490[_0x28b60d(264)]);

90 }

91}

92function _0x3580(_0xf268aa, _0xdafdf9) {

93 _0xf268aa = _0xf268aa - 231;

94 const _0x5ec7ed = _0x5ec7();

95 let _0x358018 = _0x5ec7ed[_0xf268aa];

96 if (_0x3580["eWydKd"] === void 0) {

97 var _0x20d16a = function(_0x2d0de1) {

98 const _0x1f3b5f = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L96

99 let _0x1c4d06 = "", _0x4cf73d = "";

101 _0x5aa153 = _0x1f3b5f["indexOf"](_0x5aa153);

102 }

103 for (let _0x4c89d3 = 0, _0x246a70 = _0x1c4d06["length"]; _0x4c89d3 < _0x246a70; _0x4c89d3++) {

104 _0x4cf73d += "%" + ("00" + _0x1c4d06["charCodeAt"](_0x4c89d3)["toString"](16))["slice"](-2);

105 }

106 return decodeURIComponent(_0x4cf73d);

107 };

108 _0x3580["RXIsJA"] = _0x20d16a, _0x3580["oAmSDS"] = {}, _0x3580["eWydKd"] = !![];

109 }

110 const _0x2b4938 = _0x5ec7ed[0], _0x1d8c69 = _0xf268aa + _0x2b4938, _0x240d1a = _0x3580["oAmSDS"][_0x1d8c69];

111 return !_0x240d1a ? (_0x358018 = _0x3580["RXIsJA"](_0x358018), _0x3580["oAmSDS"][_0x1d8c69] = _0x358018) : _0x358018 = _0x240d1a, _0x358018;

112}

113export {

114 InMemoryStorageAdapter,

115 LocalStorageAdapter,

116 RemoteStorageAdapter,