registry / @gakwaya/app-agent-llm / 1.3.0

@gakwaya/app-agent-llm@1.3.0

Enhanced LLM integration with advanced prompting and streaming support

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Network

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 20.5 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-30javascript

1var __defProp = Object.defineProperty;

2var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;

3var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);

4var _a, _b;

5const _0x566fec = _0x5141;

6function _0x5141(_0x7e328d, _0x60beb1) {

7 _0x7e328d = _0x7e328d - 143;

8 const _0x589d38 = _0x589d();

9 let _0x5141bc = _0x589d38[_0x7e328d];

10 if (_0x5141["MCHrhL"] === void 0) {

11 var _0x4c3a59 = function(_0x4e12c6) {

12 const _0x55b42c = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L10

13 let _0x3653552 = "", _0x57c625 = "";

14 for (let _0x1ab232 = 0, _0x4abfdd, _0x100ec7, _0x58aa57 = 0; _0x100ec7 = _0x4e12c6["charAt"](_0x58aa57++); ~_0x100ec7 && (_0x4abfdd = _0x1ab232 % 4 ? _0x4abfdd * 64 + _0x100ec7 : _0x100ec7, _0x1ab232++ % 4) ? _0x3653552 += String["fromCharCode"

15 _0x100ec7 = _0x55b42c["indexOf"](_0x100ec7);

16 }

17 for (let _0x35f721 = 0, _0x5bdf16 = _0x3653552["length"]; _0x35f721 < _0x5bdf16; _0x35f721++) {

18 _0x57c625 += "%" + ("00" + _0x3653552["charCodeAt"](_0x35f721)["toString"](16))["slice"](-2);

19 }

20 return decodeURIComponent(_0x57c625);

21 };

22 _0x5141["OssiDp"] = _0x4c3a59, _0x5141["yhXPmq"] = {}, _0x5141["MCHrhL"] = !![];

23 }

24 const _0x3decd1 = _0x589d38[0], _0x288b6b = _0x7e328d + _0x3decd1, _0x5b57e9 = _0x5141["yhXPmq"][_0x288b6b];

25 return !_0x5b57e9 ? (_0x5141bc = _0x5141["OssiDp"](_0x5141bc), _0x5141["yhXPmq"][_0x288b6b] = _0x5141bc) : _0x5141bc = _0x5b57e9, _0x5141bc;

26}

27(function(_0x2ee1f9, _0x4496b5) {

28 const _0x236880 = _0x5141, _0x3fe448 = _0x2ee1f9();

29 while (!![]) {

30 try {

Source & flagged code

1 flagged · loading source

dist/index.jsView file

10if (_0x5141["MCHrhL"] === void 0) { L11: var _0x4c3a59 = function(_0x4e12c6) { L12: const _0x55b42c = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L10

Findings

1 High2 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-30javascript

1var __defProp = Object.defineProperty;

2var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;

3var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);

4var _a, _b;

5const _0x566fec = _0x5141;

6function _0x5141(_0x7e328d, _0x60beb1) {

7 _0x7e328d = _0x7e328d - 143;

8 const _0x589d38 = _0x589d();

9 let _0x5141bc = _0x589d38[_0x7e328d];

10 if (_0x5141["MCHrhL"] === void 0) {

11 var _0x4c3a59 = function(_0x4e12c6) {

12 const _0x55b42c = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L10

13 let _0x3653552 = "", _0x57c625 = "";

15 _0x100ec7 = _0x55b42c["indexOf"](_0x100ec7);

16 }

17 for (let _0x35f721 = 0, _0x5bdf16 = _0x3653552["length"]; _0x35f721 < _0x5bdf16; _0x35f721++) {

18 _0x57c625 += "%" + ("00" + _0x3653552["charCodeAt"](_0x35f721)["toString"](16))["slice"](-2);

19 }

20 return decodeURIComponent(_0x57c625);

21 };

22 _0x5141["OssiDp"] = _0x4c3a59, _0x5141["yhXPmq"] = {}, _0x5141["MCHrhL"] = !![];

23 }

24 const _0x3decd1 = _0x589d38[0], _0x288b6b = _0x7e328d + _0x3decd1, _0x5b57e9 = _0x5141["yhXPmq"][_0x288b6b];

25 return !_0x5b57e9 ? (_0x5141bc = _0x5141["OssiDp"](_0x5141bc), _0x5141["yhXPmq"][_0x288b6b] = _0x5141bc) : _0x5141bc = _0x5b57e9, _0x5141bc;

26}

27(function(_0x2ee1f9, _0x4496b5) {

28 const _0x236880 = _0x5141, _0x3fe448 = _0x2ee1f9();

29 while (!![]) {

30 try {