registry / @gakwaya/app-agent-integrations-shared / 1.3.0

@gakwaya/app-agent-integrations-shared@1.3.0

Shared agent context for framework integrations

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 11.8 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 63-103javascript

63 if (_0x503fb7[_0x1c0d38(223)] || _0x503fb7[_0x1c0d38(217)]) return;

64 _0x503fb7["disposeScheduled"] = !![], queueMicrotask(() => {

65 const _0x366626 = _0x1c0d38, _0x544048 = sessions[_0x366626(175)](_0x553af1);

66 if (!_0x544048 || _0x544048 !== _0x503fb7) return;

67 if (_0x544048["refCount"] > 0) {

68 _0x544048[_0x366626(217)] = ![];

69 return;

70 }

71 _0x544048[_0x366626(220)]["dispose"](), sessions["delete"](_0x553af1);

72 });

73}

74function acquireSession(_0xe57044, _0x3b132e, _0x4484ba = {}) {

75 const _0xe4f3e7 = _0x47ebf6, _0x5b8652 = _0x4484ba[_0xe4f3e7(223)] ?? ![];

76 let _0x4cc20c = sessions["get"](_0xe57044);

77 return !_0x4cc20c || _0x4cc20c["context"]["agent"]["status"] === _0xe4f3e7(196) ? (_0x4cc20c && sessions["delete"](_0xe57044), _0x4cc20c = { "context": _0x3b132e(), "refCount": 0, "persistSession": _0x5b8652, "disposeScheduled": ![] }, sessions["set"](_0xe57044, _0x4cc20c)) : (_0x4cc20c[_0xe4f3e7(223)]

78}

79function _0x1431(_0x2873ef, _0x3231d9) {

80 _0x2873ef = _0x2873ef - 170;

81 const _0x564344 = _0x5643();

82 let _0x14311d = _0x564344[_0x2873ef];

83 if (_0x1431["qSGZfY"] === void 0) {

84 var _0x2d2c6a = function(_0xe0b155) {

85 const _0xc76245 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L83

86 let _0x12af21 = "", _0x5e81ef = "";

87 for (let _0x259bb6 = 0, _0x4d0dfa, _0x5a71b7, _0x4e397e = 0; _0x5a71b7 = _0xe0b155["charAt"](_0x4e397e++); ~_0x5a71b7 && (_0x4d0dfa = _0x259bb6 % 4 ? _0x4d0dfa * 64 + _0x5a71b7 : _0x5a71b7, _0x259bb6++ % 4) ? _0x12af21 += String["fromCharCode"

88 _0x5a71b7 = _0xc76245["indexOf"](_0x5a71b7);

89 }

90 for (let _0x4626ad = 0, _0x553af1 = _0x12af21["length"]; _0x4626ad < _0x553af1; _0x4626ad++) {

91 _0x5e81ef += "%" + ("00" + _0x12af21["charCodeAt"](_0x4626ad)["toString"](16))["slice"](-2);

92 }

93 return decodeURIComponent(_0x5e81ef);

94 };

95 _0x1431["EjkNnB"] = _0x2d2c6a, _0x1431["iUUJTu"] = {}, _0x1431["qSGZfY"] = !![];

96 }

97 const _0x3da980 = _0x564344[0], _0x1955e4 = _0x2873ef + _0x3da980, _0x5c21f1 = _0x1431["iUUJTu"][_0x1955e4];

98 return !_0x5c21f1 ? (_0x14311d = _0x1431["EjkNnB"](_0x14311d), _0x1431["iUUJTu"][_0x1955e4] = _0x14311d) : _0x14311d = _0x5c21f1, _0x14311d;

99}

100function releaseSession(_0x210f17) {

101 const _0xc134ba = _0x47ebf6, _0xea36bf = sessions["get"](_0x210f17);

102 if (!_0xea36bf) return;

103 _0xea36bf["refCount"] = Math["max"](0, _0xea36bf[_0xc134ba(171)] - 1), _0xea36bf[_0xc134ba(171)] === 0 && !_0xea36bf[_0xc134ba(223)] && scheduleDispose(_0x210f17, _0xea36bf);

Source & flagged code

1 flagged · loading source

dist/index.jsView file

83if (_0x1431["qSGZfY"] === void 0) { L84: var _0x2d2c6a = function(_0xe0b155) { L85: const _0xc76245 = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L83

Findings

1 High1 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 63-103javascript

63 if (_0x503fb7[_0x1c0d38(223)] || _0x503fb7[_0x1c0d38(217)]) return;

64 _0x503fb7["disposeScheduled"] = !![], queueMicrotask(() => {

65 const _0x366626 = _0x1c0d38, _0x544048 = sessions[_0x366626(175)](_0x553af1);

66 if (!_0x544048 || _0x544048 !== _0x503fb7) return;

67 if (_0x544048["refCount"] > 0) {

68 _0x544048[_0x366626(217)] = ![];

69 return;

70 }

71 _0x544048[_0x366626(220)]["dispose"](), sessions["delete"](_0x553af1);

72 });

73}

74function acquireSession(_0xe57044, _0x3b132e, _0x4484ba = {}) {

75 const _0xe4f3e7 = _0x47ebf6, _0x5b8652 = _0x4484ba[_0xe4f3e7(223)] ?? ![];

76 let _0x4cc20c = sessions["get"](_0xe57044);

78}

79function _0x1431(_0x2873ef, _0x3231d9) {

80 _0x2873ef = _0x2873ef - 170;

81 const _0x564344 = _0x5643();

82 let _0x14311d = _0x564344[_0x2873ef];

83 if (_0x1431["qSGZfY"] === void 0) {

84 var _0x2d2c6a = function(_0xe0b155) {

85 const _0xc76245 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L83

86 let _0x12af21 = "", _0x5e81ef = "";

88 _0x5a71b7 = _0xc76245["indexOf"](_0x5a71b7);

89 }

90 for (let _0x4626ad = 0, _0x553af1 = _0x12af21["length"]; _0x4626ad < _0x553af1; _0x4626ad++) {

91 _0x5e81ef += "%" + ("00" + _0x12af21["charCodeAt"](_0x4626ad)["toString"](16))["slice"](-2);

92 }

93 return decodeURIComponent(_0x5e81ef);

94 };

95 _0x1431["EjkNnB"] = _0x2d2c6a, _0x1431["iUUJTu"] = {}, _0x1431["qSGZfY"] = !![];

96 }

97 const _0x3da980 = _0x564344[0], _0x1955e4 = _0x2873ef + _0x3da980, _0x5c21f1 = _0x1431["iUUJTu"][_0x1955e4];

98 return !_0x5c21f1 ? (_0x14311d = _0x1431["EjkNnB"](_0x14311d), _0x1431["iUUJTu"][_0x1955e4] = _0x14311d) : _0x14311d = _0x5c21f1, _0x14311d;

99}

100function releaseSession(_0x210f17) {

101 const _0xc134ba = _0x47ebf6, _0xea36bf = sessions["get"](_0x210f17);

102 if (!_0xea36bf) return;

103 _0xea36bf["refCount"] = Math["max"](0, _0xea36bf[_0xc134ba(171)] - 1), _0xea36bf[_0xc134ba(171)] === 0 && !_0xea36bf[_0xc134ba(223)] && scheduleDispose(_0x210f17, _0xea36bf);