registry / @gakwaya/app-agent-multi-agent / 1.3.0

@gakwaya/app-agent-multi-agent@1.3.0

Multi-agent coordination for specialized task routing

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 6.03 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 51-91javascript

51 const _0x5d2b1b = _0x1c4610;

52 let _0x563e8f = 0;

53 for (const _0x417aad of _0x9e7f1a) {

54 const _0x907fde = _0x417aad[_0x5d2b1b(491)]();

55 _0x4d1967[_0x5d2b1b(463)](_0x907fde) && (_0x563e8f += KEYWORD_WEIGHT);

56 }

57 return _0x563e8f;

58 }

59}

60function _0x3769() {

61 const _0x80093b = ["DxjS", "nKffA0vXDq", "y2fYDa", "y2fWywjPBgL0AwvZ", "sgfUzgXLCYbWCM9KDwn0CYWGy2fYDcWGy2HLy2TVDxqSigfUzcbVCMrLCNm", "B3jKzxi", "zgvSzwDHDgu", "nJa4ntCXC1Pjt3fP", "DMfSDwvZ", "BMf2AwDHDgLVBG", "mtq3nLjkz3bRBG", "BMfTzq", "CMvNAxn0zxjbz2vUDa", "nJqWmte1s1vfB2jf", "zxHLy3v0zq", "CM91DgLUzW", "mtC5nZeWrwzLtKrW", "ChjVzhvJDa", "y29TBwvYy2u", "Dg9mB3DLCKnHC2u",

62 _0x3769 = function() {

63 return _0x80093b;

64 };

65 return _0x3769();

66}

67function _0x3511(_0x456167, _0x13b99b) {

68 _0x456167 = _0x456167 - 460;

69 const _0x37698e = _0x3769();

70 let _0x3511b3 = _0x37698e[_0x456167];

71 if (_0x3511["sbRwiZ"] === void 0) {

72 var _0x3b446b = function(_0x13db5d) {

73 const _0x37bc36 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L71

74 let _0xb4b1d8 = "", _0x20879e = "";

75 for (let _0x22ab45 = 0, _0x304a16, _0xa61680, _0x4918d2 = 0; _0xa61680 = _0x13db5d["charAt"](_0x4918d2++); ~_0xa61680 && (_0x304a16 = _0x22ab45 % 4 ? _0x304a16 * 64 + _0xa61680 : _0xa61680, _0x22ab45++ % 4) ? _0xb4b1d8 += String["fromCharCode"

76 _0xa61680 = _0x37bc36["indexOf"](_0xa61680);

77 }

78 for (let _0x3972a6 = 0, _0xdf174c = _0xb4b1d8["length"]; _0x3972a6 < _0xdf174c; _0x3972a6++) {

79 _0x20879e += "%" + ("00" + _0xb4b1d8["charCodeAt"](_0x3972a6)["toString"](16))["slice"](-2);

80 }

81 return decodeURIComponent(_0x20879e);

82 };

83 _0x3511["OrOkvH"] = _0x3b446b, _0x3511["TdbmlY"] = {}, _0x3511["sbRwiZ"] = !![];

84 }

85 const _0x5681f3 = _0x37698e[0], _0x4520a7 = _0x456167 + _0x5681f3, _0x36f2dc = _0x3511["TdbmlY"][_0x4520a7];

86 return !_0x36f2dc ? (_0x3511b3 = _0x3511["OrOkvH"](_0x3511b3), _0x3511["TdbmlY"][_0x4520a7] = _0x3511b3) : _0x3511b3 = _0x36f2dc, _0x3511b3;

87}

88function createBuiltInAgents(_0x1badff) {

89 return [new NavigationAgent(_0x1badff), new CommerceAgent(_0x1badff)];

90}

91class NavigationAgent {

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

dist/index.jsView file

71if (_0x3511["sbRwiZ"] === void 0) { L72: var _0x3b446b = function(_0x13db5d) { L73: const _0x37bc36 = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L71

Findings

1 High1 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 51-91javascript

51 const _0x5d2b1b = _0x1c4610;

52 let _0x563e8f = 0;

53 for (const _0x417aad of _0x9e7f1a) {

54 const _0x907fde = _0x417aad[_0x5d2b1b(491)]();

55 _0x4d1967[_0x5d2b1b(463)](_0x907fde) && (_0x563e8f += KEYWORD_WEIGHT);

56 }

57 return _0x563e8f;

58 }

59}

60function _0x3769() {

62 _0x3769 = function() {

63 return _0x80093b;

64 };

65 return _0x3769();

66}

67function _0x3511(_0x456167, _0x13b99b) {

68 _0x456167 = _0x456167 - 460;

69 const _0x37698e = _0x3769();

70 let _0x3511b3 = _0x37698e[_0x456167];

71 if (_0x3511["sbRwiZ"] === void 0) {

72 var _0x3b446b = function(_0x13db5d) {

73 const _0x37bc36 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L71

74 let _0xb4b1d8 = "", _0x20879e = "";

76 _0xa61680 = _0x37bc36["indexOf"](_0xa61680);

77 }

78 for (let _0x3972a6 = 0, _0xdf174c = _0xb4b1d8["length"]; _0x3972a6 < _0xdf174c; _0x3972a6++) {

79 _0x20879e += "%" + ("00" + _0xb4b1d8["charCodeAt"](_0x3972a6)["toString"](16))["slice"](-2);

80 }

81 return decodeURIComponent(_0x20879e);

82 };

83 _0x3511["OrOkvH"] = _0x3b446b, _0x3511["TdbmlY"] = {}, _0x3511["sbRwiZ"] = !![];

84 }

85 const _0x5681f3 = _0x37698e[0], _0x4520a7 = _0x456167 + _0x5681f3, _0x36f2dc = _0x3511["TdbmlY"][_0x4520a7];

86 return !_0x36f2dc ? (_0x3511b3 = _0x3511["OrOkvH"](_0x3511b3), _0x3511["TdbmlY"][_0x4520a7] = _0x3511b3) : _0x3511b3 = _0x36f2dc, _0x3511b3;

87}

88function createBuiltInAgents(_0x1badff) {

89 return [new NavigationAgent(_0x1badff), new CommerceAgent(_0x1badff)];

90}

91class NavigationAgent {

Long lines were clipped for display.