registry / @gakwaya/app-agent-semantic-registry / 1.3.0

@gakwaya/app-agent-semantic-registry@1.3.0

Runtime semantic entity registry for App-Agent

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 7.79 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 87-127javascript

87 return _0x125ba2 !== _0x37dd45[_0x2f0836(505)];

88 case _0x2f0836(519):

89 return String(_0x125ba2)[_0x2f0836(486)](String(_0x37dd45[_0x2f0836(505)]));

90 case "exists":

91 return _0x125ba2 !== void 0 && _0x125ba2 !== null;

92 case "in":

93 return ((_a2 = _0x37dd45["values"]) == null ? void 0 : _a2["includes"](_0x125ba2)) ?? ![];

94 case _0x2f0836(510):

95 return Number(_0x125ba2) > Number(_0x37dd45[_0x2f0836(505)]);

96 case _0x2f0836(490):

97 return Number(_0x125ba2) < Number(_0x37dd45[_0x2f0836(505)]);

98 default:

99 return !![];

100 }

101 }

102}

103function _0x4fd8(_0x361c62, _0x44f2ce) {

104 _0x361c62 = _0x361c62 - 475;

105 const _0xc88cbb = _0xc88c();

106 let _0x4fd88d = _0xc88cbb[_0x361c62];

107 if (_0x4fd8["QxJXuH"] === void 0) {

108 var _0x1d9c62 = function(_0x5a1423) {

109 const _0x37dcee = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L107

110 let _0x24fa0b2 = "", _0x4d3f22 = "";

111 for (let _0x475048 = 0, _0x3959a6, _0x2db572, _0x1585db = 0; _0x2db572 = _0x5a1423["charAt"](_0x1585db++); ~_0x2db572 && (_0x3959a6 = _0x475048 % 4 ? _0x3959a6 * 64 + _0x2db572 : _0x2db572, _0x475048++ % 4) ? _0x24fa0b2 += String[

112 _0x2db572 = _0x37dcee["indexOf"](_0x2db572);

113 }

114 for (let _0x5704b3 = 0, _0x4d31ac = _0x24fa0b2["length"]; _0x5704b3 < _0x4d31ac; _0x5704b3++) {

115 _0x4d3f22 += "%" + ("00" + _0x24fa0b2["charCodeAt"](_0x5704b3)["toString"](16))["slice"](-2);

116 }

117 return decodeURIComponent(_0x4d3f22);

118 };

119 _0x4fd8["oTISEt"] = _0x1d9c62, _0x4fd8["IjbvJa"] = {}, _0x4fd8["QxJXuH"] = !![];

120 }

121 const _0xd93663 = _0xc88cbb[0], _0x55226a = _0x361c62 + _0xd93663, _0x429f5f = _0x4fd8["IjbvJa"][_0x55226a];

122 return !_0x429f5f ? (_0x4fd88d = _0x4fd8["oTISEt"](_0x4fd88d), _0x4fd8["IjbvJa"][_0x55226a] = _0x4fd88d) : _0x4fd88d = _0x429f5f, _0x4fd88d;

123}

124function _0xc88c() {

125 const _0x4f0f1a = ["mte0mJK0ohzWy0fcwq", "z2v0qwXSu2nOzw1HCW", "odyZndb4Ae13z1K", "Aw5JBhvKzxm", "z2v0u2nOzw1H", "odG0odH0EfzuDeK", "ywz0zxjdCMvHDgu", "BgvZCW", "zgvZy3jPChrPB24", "zNjVBq", "z2v0", "mtuZu1DMv1Po", "BM90rxf1ywXZ", "C2nOzw1HCW", "BwfW", "mtq0nJq1mgHfuKr0DG", "Aw5ZDgfUy2vZ", "AM9PBG", "AxnbCNjHEq", "C2XPy2u",

126 _0xc88c = function() {

127 return _0x4f0f1a;

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

dist/index.jsView file

107if (_0x4fd8["QxJXuH"] === void 0) { L108: var _0x1d9c62 = function(_0x5a1423) { L109: const _0x37dcee = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L107

Findings

1 High1 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 87-127javascript

87 return _0x125ba2 !== _0x37dd45[_0x2f0836(505)];

88 case _0x2f0836(519):

89 return String(_0x125ba2)[_0x2f0836(486)](String(_0x37dd45[_0x2f0836(505)]));

90 case "exists":

91 return _0x125ba2 !== void 0 && _0x125ba2 !== null;

92 case "in":

93 return ((_a2 = _0x37dd45["values"]) == null ? void 0 : _a2["includes"](_0x125ba2)) ?? ![];

94 case _0x2f0836(510):

95 return Number(_0x125ba2) > Number(_0x37dd45[_0x2f0836(505)]);

96 case _0x2f0836(490):

97 return Number(_0x125ba2) < Number(_0x37dd45[_0x2f0836(505)]);

98 default:

99 return !![];

100 }

101 }

102}

103function _0x4fd8(_0x361c62, _0x44f2ce) {

104 _0x361c62 = _0x361c62 - 475;

105 const _0xc88cbb = _0xc88c();

106 let _0x4fd88d = _0xc88cbb[_0x361c62];

107 if (_0x4fd8["QxJXuH"] === void 0) {

108 var _0x1d9c62 = function(_0x5a1423) {

109 const _0x37dcee = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L107

110 let _0x24fa0b2 = "", _0x4d3f22 = "";

112 _0x2db572 = _0x37dcee["indexOf"](_0x2db572);

113 }

114 for (let _0x5704b3 = 0, _0x4d31ac = _0x24fa0b2["length"]; _0x5704b3 < _0x4d31ac; _0x5704b3++) {

115 _0x4d3f22 += "%" + ("00" + _0x24fa0b2["charCodeAt"](_0x5704b3)["toString"](16))["slice"](-2);

116 }

117 return decodeURIComponent(_0x4d3f22);

118 };

119 _0x4fd8["oTISEt"] = _0x1d9c62, _0x4fd8["IjbvJa"] = {}, _0x4fd8["QxJXuH"] = !![];

120 }

121 const _0xd93663 = _0xc88cbb[0], _0x55226a = _0x361c62 + _0xd93663, _0x429f5f = _0x4fd8["IjbvJa"][_0x55226a];

122 return !_0x429f5f ? (_0x4fd88d = _0x4fd8["oTISEt"](_0x4fd88d), _0x4fd8["IjbvJa"][_0x55226a] = _0x4fd88d) : _0x4fd88d = _0x429f5f, _0x4fd88d;

123}

124function _0xc88c() {

126 _0xc88c = function() {

127 return _0x4f0f1a;

Long lines were clipped for display.