registry / @gakwaya/app-agent-state-manager / 1.3.0

@gakwaya/app-agent-state-manager@1.3.0

App state integration and tracking for App-Agent

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 11.8 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 48-88javascript

48 }

49}

50function arraysEqual(_0x572ae5, _0x157cda) {

51 const _0x294ad0 = _0x307b;

52 if (_0x572ae5[_0x294ad0(232)] !== _0x157cda[_0x294ad0(232)]) return ![];

53 return _0x572ae5["every"]((_0x539d8c, _0x1c4f76) => _0x539d8c === _0x157cda[_0x1c4f76]);

54}

55function determineChangeType(_0x3ea541) {

56 const _0x36da85 = _0x307b;

57 if (_0x3ea541["length"] === 0) return _0x36da85(275);

58 const _0x1bbc80 = [_0x36da85(280), _0x36da85(231), "user.isAuthenticated"], _0x297c25 = _0x3ea541[_0x36da85(254)]((_0xfe35ff) => _0x1bbc80[_0x36da85(254)]((_0x488727) => _0xfe35ff["path"]["startsWith"](_0x488727)));

59 if (_0x297c25) return _0x36da85(269);

60 const _0x2ad83c = ["currentView", _0x36da85(228)], _0x34e0a4 = _0x3ea541[_0x36da85(254)]((_0x27000c) => _0x2ad83c[_0x36da85(254)]((_0x4ba5fe) => _0x27000c["path"][_0x36da85(266)](_0x4ba5fe)));

61 if (_0x34e0a4 || _0x3ea541[_0x36da85(232)] > 3) return _0x36da85(264);

62 return _0x36da85(250);

63}

64function _0x307b(_0x44b7db, _0x2aaed2) {

65 _0x44b7db = _0x44b7db - 219;

66 const _0x1e7821 = _0x1e78();

67 let _0x307b76 = _0x1e7821[_0x44b7db];

68 if (_0x307b["xAnyCj"] === void 0) {

69 var _0x1b7df4 = function(_0x9c1e6e) {

70 const _0x5f1285 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L68

71 let _0x35b0fd = "", _0x47ea7c = "";

72 for (let _0x5e2ec7 = 0, _0x418d8f, _0xb6dac, _0x2e6f46 = 0; _0xb6dac = _0x9c1e6e["charAt"](_0x2e6f46++); ~_0xb6dac && (_0x418d8f = _0x5e2ec7 % 4 ? _0x418d8f * 64 + _0xb6dac : _0xb6dac, _0x5e2ec7++ % 4) ? _0x35b0fd += String["fromCharCode"

73 _0xb6dac = _0x5f1285["indexOf"](_0xb6dac);

74 }

75 for (let _0x3325a1 = 0, _0x1e3c11 = _0x35b0fd["length"]; _0x3325a1 < _0x1e3c11; _0x3325a1++) {

76 _0x47ea7c += "%" + ("00" + _0x35b0fd["charCodeAt"](_0x3325a1)["toString"](16))["slice"](-2);

77 }

78 return decodeURIComponent(_0x47ea7c);

79 };

80 _0x307b["SsIAwn"] = _0x1b7df4, _0x307b["zQiOtw"] = {}, _0x307b["xAnyCj"] = !![];

81 }

82 const _0x571a0c = _0x1e7821[0], _0x49335e = _0x44b7db + _0x571a0c, _0x3e2dc9 = _0x307b["zQiOtw"][_0x49335e];

83 return !_0x3e2dc9 ? (_0x307b76 = _0x307b["SsIAwn"](_0x307b76), _0x307b["zQiOtw"][_0x49335e] = _0x307b76) : _0x307b76 = _0x3e2dc9, _0x307b76;

84}

85function isStateSignificant(_0x39ff02) {

86 const _0x42db8e = _0x307b;

87 return _0x39ff02[_0x42db8e(276)] === _0x42db8e(264) || _0x39ff02["changeType"] === "major";

88}

Source & flagged code

1 flagged · loading source

dist/index.jsView file

68if (_0x307b["xAnyCj"] === void 0) { L69: var _0x1b7df4 = function(_0x9c1e6e) { L70: const _0x5f1285 = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L68

Findings

1 High1 Medium2 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 48-88javascript

48 }

49}

50function arraysEqual(_0x572ae5, _0x157cda) {

51 const _0x294ad0 = _0x307b;

52 if (_0x572ae5[_0x294ad0(232)] !== _0x157cda[_0x294ad0(232)]) return ![];

53 return _0x572ae5["every"]((_0x539d8c, _0x1c4f76) => _0x539d8c === _0x157cda[_0x1c4f76]);

54}

55function determineChangeType(_0x3ea541) {

56 const _0x36da85 = _0x307b;

57 if (_0x3ea541["length"] === 0) return _0x36da85(275);

59 if (_0x297c25) return _0x36da85(269);

60 const _0x2ad83c = ["currentView", _0x36da85(228)], _0x34e0a4 = _0x3ea541[_0x36da85(254)]((_0x27000c) => _0x2ad83c[_0x36da85(254)]((_0x4ba5fe) => _0x27000c["path"][_0x36da85(266)](_0x4ba5fe)));

61 if (_0x34e0a4 || _0x3ea541[_0x36da85(232)] > 3) return _0x36da85(264);

62 return _0x36da85(250);

63}

64function _0x307b(_0x44b7db, _0x2aaed2) {

65 _0x44b7db = _0x44b7db - 219;

66 const _0x1e7821 = _0x1e78();

67 let _0x307b76 = _0x1e7821[_0x44b7db];

68 if (_0x307b["xAnyCj"] === void 0) {

69 var _0x1b7df4 = function(_0x9c1e6e) {

70 const _0x5f1285 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L68

71 let _0x35b0fd = "", _0x47ea7c = "";

73 _0xb6dac = _0x5f1285["indexOf"](_0xb6dac);

74 }

75 for (let _0x3325a1 = 0, _0x1e3c11 = _0x35b0fd["length"]; _0x3325a1 < _0x1e3c11; _0x3325a1++) {

76 _0x47ea7c += "%" + ("00" + _0x35b0fd["charCodeAt"](_0x3325a1)["toString"](16))["slice"](-2);

77 }

78 return decodeURIComponent(_0x47ea7c);

79 };

80 _0x307b["SsIAwn"] = _0x1b7df4, _0x307b["zQiOtw"] = {}, _0x307b["xAnyCj"] = !![];

81 }

82 const _0x571a0c = _0x1e7821[0], _0x49335e = _0x44b7db + _0x571a0c, _0x3e2dc9 = _0x307b["zQiOtw"][_0x49335e];

83 return !_0x3e2dc9 ? (_0x307b76 = _0x307b["SsIAwn"](_0x307b76), _0x307b["zQiOtw"][_0x49335e] = _0x307b76) : _0x307b76 = _0x3e2dc9, _0x307b76;

84}

85function isStateSignificant(_0x39ff02) {

86 const _0x42db8e = _0x307b;

87 return _0x39ff02[_0x42db8e(276)] === _0x42db8e(264) || _0x39ff02["changeType"] === "major";

88}