registry / @gakwaya/app-agent-svelte / 1.3.0

@gakwaya/app-agent-svelte@1.3.0

Svelte integration for App-Agent

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.59 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 19-59javascript

19 return _0x21a7d9;

20 };

21 return _0x2951();

22}

23const AGENT_CONTEXT_KEY = Symbol("app-agent-context");

24function createAppAgentStore(_0x5e0be7, _0x5a2d15 = {}) {

25 const _0x5243c8 = _0x93ad, _0x2f1a78 = createAgentContext(_0x5e0be7, _0x5a2d15), _0x10e987 = writable(_0x2f1a78[_0x5243c8(374)]());

26 return _0x2f1a78[_0x5243c8(377)](() => {

27 const _0x2af337 = _0x5243c8;

28 _0x10e987["set"](_0x2f1a78[_0x2af337(374)]());

29 }), { "subscribe": _0x10e987[_0x5243c8(377)], "agent": _0x2f1a78["agent"], "panel": _0x2f1a78["panel"], "execute": (_0x30e7fa) => _0x2f1a78["agent"][_0x5243c8(381)](_0x30e7fa), "dispose": () => _0x2f1a78[_0x5243c8(380)]() };

30}

31function setAppAgentContext(_0x464864, _0x15a2d3 = {}) {

32 const _0x2d77fc = _0x93ad, _0x536271 = createAppAgentStore(_0x464864, _0x15a2d3);

33 return setContext(AGENT_CONTEXT_KEY, _0x536271), onDestroy(() => _0x536271[_0x2d77fc(380)]()), _0x536271;

34}

35function _0x93ad(_0x19a738, _0x2d19f3) {

36 _0x19a738 = _0x19a738 - 371;

37 const _0x2951bd = _0x2951();

38 let _0x93ad6 = _0x2951bd[_0x19a738];

39 if (_0x93ad["TYxshd"] === void 0) {

40 var _0x365388 = function(_0x315f59) {

41 const _0x57ae89 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L39

42 let _0x5e0be7 = "", _0x5a2d15 = "";

43 for (let _0x2f1a78 = 0, _0x10e987, _0x30e7fa, _0x464864 = 0; _0x30e7fa = _0x315f59["charAt"](_0x464864++); ~_0x30e7fa && (_0x10e987 = _0x2f1a78 % 4 ? _0x10e987 * 64 + _0x30e7fa : _0x30e7fa, _0x2f1a78++ % 4) ? _0x5e0be7 += String["fromCharCode"

44 _0x30e7fa = _0x57ae89["indexOf"](_0x30e7fa);

45 }

46 for (let _0x15a2d3 = 0, _0x536271 = _0x5e0be7["length"]; _0x15a2d3 < _0x536271; _0x15a2d3++) {

47 _0x5a2d15 += "%" + ("00" + _0x5e0be7["charCodeAt"](_0x15a2d3)["toString"](16))["slice"](-2);

48 }

49 return decodeURIComponent(_0x5a2d15);

50 };

51 _0x93ad["wxvaoO"] = _0x365388, _0x93ad["XNcoct"] = {}, _0x93ad["TYxshd"] = !![];

52 }

53 const _0x1f5781 = _0x2951bd[0], _0x55c854 = _0x19a738 + _0x1f5781, _0x4bb193 = _0x93ad["XNcoct"][_0x55c854];

54 return !_0x4bb193 ? (_0x93ad6 = _0x93ad["wxvaoO"](_0x93ad6), _0x93ad["XNcoct"][_0x55c854] = _0x93ad6) : _0x93ad6 = _0x4bb193, _0x93ad6;

55}

56function getAppAgentContext() {

57 const _0x215f6e = _0x93ad, _0x1ce5f4 = getContext(AGENT_CONTEXT_KEY);

58 if (!_0x1ce5f4) throw new Error(_0x215f6e(372));

59 return _0x1ce5f4;

Source & flagged code

1 flagged · loading source

dist/index.jsView file

39if (_0x93ad["TYxshd"] === void 0) { L40: var _0x365388 = function(_0x315f59) { L41: const _0x57ae89 = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L39

Findings

1 High2 Low

HighObfuscated Payload Loaderdist/index.js

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 19-59javascript

19 return _0x21a7d9;

20 };

21 return _0x2951();

22}

23const AGENT_CONTEXT_KEY = Symbol("app-agent-context");

24function createAppAgentStore(_0x5e0be7, _0x5a2d15 = {}) {

25 const _0x5243c8 = _0x93ad, _0x2f1a78 = createAgentContext(_0x5e0be7, _0x5a2d15), _0x10e987 = writable(_0x2f1a78[_0x5243c8(374)]());

26 return _0x2f1a78[_0x5243c8(377)](() => {

27 const _0x2af337 = _0x5243c8;

28 _0x10e987["set"](_0x2f1a78[_0x2af337(374)]());

30}

31function setAppAgentContext(_0x464864, _0x15a2d3 = {}) {

32 const _0x2d77fc = _0x93ad, _0x536271 = createAppAgentStore(_0x464864, _0x15a2d3);

33 return setContext(AGENT_CONTEXT_KEY, _0x536271), onDestroy(() => _0x536271[_0x2d77fc(380)]()), _0x536271;

34}

35function _0x93ad(_0x19a738, _0x2d19f3) {

36 _0x19a738 = _0x19a738 - 371;

37 const _0x2951bd = _0x2951();

38 let _0x93ad6 = _0x2951bd[_0x19a738];

39 if (_0x93ad["TYxshd"] === void 0) {

40 var _0x365388 = function(_0x315f59) {

41 const _0x57ae89 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L39

42 let _0x5e0be7 = "", _0x5a2d15 = "";

44 _0x30e7fa = _0x57ae89["indexOf"](_0x30e7fa);

45 }

46 for (let _0x15a2d3 = 0, _0x536271 = _0x5e0be7["length"]; _0x15a2d3 < _0x536271; _0x15a2d3++) {

47 _0x5a2d15 += "%" + ("00" + _0x5e0be7["charCodeAt"](_0x15a2d3)["toString"](16))["slice"](-2);

48 }

49 return decodeURIComponent(_0x5a2d15);

50 };

51 _0x93ad["wxvaoO"] = _0x365388, _0x93ad["XNcoct"] = {}, _0x93ad["TYxshd"] = !![];

52 }

53 const _0x1f5781 = _0x2951bd[0], _0x55c854 = _0x19a738 + _0x1f5781, _0x4bb193 = _0x93ad["XNcoct"][_0x55c854];

54 return !_0x4bb193 ? (_0x93ad6 = _0x93ad["wxvaoO"](_0x93ad6), _0x93ad["XNcoct"][_0x55c854] = _0x93ad6) : _0x93ad6 = _0x4bb193, _0x93ad6;

55}

56function getAppAgentContext() {

57 const _0x215f6e = _0x93ad, _0x1ce5f4 = getContext(AGENT_CONTEXT_KEY);

58 if (!_0x1ce5f4) throw new Error(_0x215f6e(372));

59 return _0x1ce5f4;