registry / @gakwaya/app-agent-learning / 1.3.0

@gakwaya/app-agent-learning@1.3.0

Pattern learning system for App-Agent

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 12.8 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 40-80javascript

40 [_0x128ee0(452)](_0x1cd212) {

41 const _0x506f78 = _0x128ee0;

42 return _0x1cd212[_0x506f78(465)]()["replace"](/[^a-z0-9\s]/g, " ")[_0x506f78(421)](/\s+/g, " ")[_0x506f78(463)]();

43 }

44 [_0x128ee0(481)](_0x5bcca0) {

45 const _0x38bac1 = _0x128ee0;

46 return new Set(this[_0x38bac1(452)](_0x5bcca0)[_0x38bac1(467)](" ")[_0x38bac1(422)](Boolean));

47 }

48}

49function _0x1c9e() {

50 const _0x309b9f = ["CMv0zw50Aw9Urgf5CW", "C3vJy2vZCW", "C2nVCMu", "BM9YBwfSAxPLzfrHC2S", "ndC3mJi5oxDRrKrxAa", "CMvWBgfJzq", "zMLSDgvY", "nJy0ohHIyujovG", "B2jQzwn0u3rVCMvoyw1LCW", "DMfSDwvZ", "DxnHz2vdB3vUDa", "zgjbDMfPBgfIBgu", "CM91BMq", "zMLUze1HDgnOAw5Nugf0DgvYBG", "BgfZDfvZzwq", "CMvHzg9UBhK", "nda4mJG4mgLrsxnqtq", "zMLUzfbHDhrLCM4", "B2jQzwn0u3rVCMu", "mtqXmtrrCKPls1q",

51 _0x1c9e = function() {

52 return _0x309b9f;

53 };

54 return _0x1c9e();

55}

56function _0x214f(_0xffbf64, _0x2cc756) {

57 _0xffbf64 = _0xffbf64 - 419;

58 const _0x1c9e92 = _0x1c9e();

59 let _0x214f7c = _0x1c9e92[_0xffbf64];

60 if (_0x214f["TBQUaS"] === void 0) {

61 var _0x2d3344 = function(_0x1a25de) {

62 const _0x13a286 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L60

63 let _0x500e22 = "", _0x13fed4 = "";

64 for (let _0x53a6a0 = 0, _0x5175a, _0x84f84a, _0x4a4f21 = 0; _0x84f84a = _0x1a25de["charAt"](_0x4a4f21++); ~_0x84f84a && (_0x5175a = _0x53a6a0 % 4 ? _0x5175a * 64 + _0x84f84a : _0x84f84a, _0x53a6a0++ % 4) ? _0x500e22 += String["fromCharCode"

65 _0x84f84a = _0x13a286["indexOf"](_0x84f84a);

66 }

67 for (let _0x251969 = 0, _0x38b5e9 = _0x500e22["length"]; _0x251969 < _0x38b5e9; _0x251969++) {

68 _0x13fed4 += "%" + ("00" + _0x500e22["charCodeAt"](_0x251969)["toString"](16))["slice"](-2);

69 }

70 return decodeURIComponent(_0x13fed4);

71 };

72 _0x214f["yOLorb"] = _0x2d3344, _0x214f["YRhPSn"] = {}, _0x214f["TBQUaS"] = !![];

73 }

74 const _0x3ca209 = _0x1c9e92[0], _0x2d6b9a = _0xffbf64 + _0x3ca209, _0x119bd4 = _0x214f["YRhPSn"][_0x2d6b9a];

75 return !_0x119bd4 ? (_0x214f7c = _0x214f["yOLorb"](_0x214f7c), _0x214f["YRhPSn"][_0x2d6b9a] = _0x214f7c) : _0x214f7c = _0x119bd4, _0x214f7c;

76}

77class InMemoryPatternStorage {

78 constructor() {

79 __publicField(this, _a, /* @__PURE__ */ new Map());

80 }

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

dist/index.jsView file

60if (_0x214f["TBQUaS"] === void 0) { L61: var _0x2d3344 = function(_0x1a25de) { L62: const _0x13a286 = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L60

Findings

1 High1 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 40-80javascript

40 [_0x128ee0(452)](_0x1cd212) {

41 const _0x506f78 = _0x128ee0;

42 return _0x1cd212[_0x506f78(465)]()["replace"](/[^a-z0-9\s]/g, " ")[_0x506f78(421)](/\s+/g, " ")[_0x506f78(463)]();

43 }

44 [_0x128ee0(481)](_0x5bcca0) {

45 const _0x38bac1 = _0x128ee0;

46 return new Set(this[_0x38bac1(452)](_0x5bcca0)[_0x38bac1(467)](" ")[_0x38bac1(422)](Boolean));

47 }

48}

49function _0x1c9e() {

51 _0x1c9e = function() {

52 return _0x309b9f;

53 };

54 return _0x1c9e();

55}

56function _0x214f(_0xffbf64, _0x2cc756) {

57 _0xffbf64 = _0xffbf64 - 419;

58 const _0x1c9e92 = _0x1c9e();

59 let _0x214f7c = _0x1c9e92[_0xffbf64];

60 if (_0x214f["TBQUaS"] === void 0) {

61 var _0x2d3344 = function(_0x1a25de) {

62 const _0x13a286 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L60

63 let _0x500e22 = "", _0x13fed4 = "";

65 _0x84f84a = _0x13a286["indexOf"](_0x84f84a);

66 }

67 for (let _0x251969 = 0, _0x38b5e9 = _0x500e22["length"]; _0x251969 < _0x38b5e9; _0x251969++) {

68 _0x13fed4 += "%" + ("00" + _0x500e22["charCodeAt"](_0x251969)["toString"](16))["slice"](-2);

69 }

70 return decodeURIComponent(_0x13fed4);

71 };

72 _0x214f["yOLorb"] = _0x2d3344, _0x214f["YRhPSn"] = {}, _0x214f["TBQUaS"] = !![];

73 }

74 const _0x3ca209 = _0x1c9e92[0], _0x2d6b9a = _0xffbf64 + _0x3ca209, _0x119bd4 = _0x214f["YRhPSn"][_0x2d6b9a];

75 return !_0x119bd4 ? (_0x214f7c = _0x214f["yOLorb"](_0x214f7c), _0x214f["YRhPSn"][_0x2d6b9a] = _0x214f7c) : _0x214f7c = _0x119bd4, _0x214f7c;

76}

77class InMemoryPatternStorage {

78 constructor() {

79 __publicField(this, _a, /* @__PURE__ */ new Map());

80 }

Long lines were clipped for display.