registry / @gakwaya/app-agent-ui / 1.3.0

@gakwaya/app-agent-ui@1.3.0

UI components for App-Agent

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 21.6 KB of source, external domains: www.w3.org

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-29javascript

1var __defProp = Object.defineProperty;

2var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;

3var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);

4var _a, _b, _c, _d, _e;

5function _0x387e(_0x117023, _0x31d83e) {

6 _0x117023 = _0x117023 - 329;

7 const _0x436da9 = _0x436d();

8 let _0x387e6c = _0x436da9[_0x117023];

9 if (_0x387e["QDZMBU"] === void 0) {

10 var _0x5abea9 = function(_0x2e9e62) {

11 const _0x5404db = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L9

12 let _0x2ce233 = "", _0x5f5e02 = "";

13 for (let _0x2a8562 = 0, _0x45ebc2, _0x4d3ba1, _0x546338 = 0; _0x4d3ba1 = _0x2e9e62["charAt"](_0x546338++); ~_0x4d3ba1 && (_0x45ebc2 = _0x2a8562 % 4 ? _0x45ebc2 * 64 + _0x4d3ba1 : _0x4d3ba1, _0x2a8562++ % 4) ? _0x2ce233 += String["fromCharCode"

14 _0x4d3ba1 = _0x5404db["indexOf"](_0x4d3ba1);

15 }

16 for (let _0x4a2056 = 0, _0x5ee8f4 = _0x2ce233["length"]; _0x4a2056 < _0x5ee8f4; _0x4a2056++) {

17 _0x5f5e02 += "%" + ("00" + _0x2ce233["charCodeAt"](_0x4a2056)["toString"](16))["slice"](-2);

18 }

19 return decodeURIComponent(_0x5f5e02);

20 };

21 _0x387e["hPeAIu"] = _0x5abea9, _0x387e["VOzRUI"] = {}, _0x387e["QDZMBU"] = !![];

22 }

23 const _0x677594 = _0x436da9[0], _0x315744 = _0x117023 + _0x677594, _0x514747 = _0x387e["VOzRUI"][_0x315744];

24 return !_0x514747 ? (_0x387e6c = _0x387e["hPeAIu"](_0x387e6c), _0x387e["VOzRUI"][_0x315744] = _0x387e6c) : _0x387e6c = _0x514747, _0x387e6c;

25}

26const _0x197d46 = _0x387e;

27function _0x436d() {

28 const _0x205e87 = ["y3vYC29YrwXLBwvUDa", "AxneAxnWB3nLza", "BM90lwfSBg93zwq", "y2XPy2S", "C2HVDW", "y29SB3i", "z2v0u3r5BgvZ", "zwXLBwvUDa", "cIaGicaGicaGica8zgL2ignSyxnZpsjHChaTywDLBNqTAgLZDg9YEsi+cIaGicaGicaGicaGidXKAxyGy2XHC3m9iMfWCc1Hz2vUDc1OAxn0B3j5lwHLywrLCIi+sgLZDg9YEtWVzgL2pGOGicaGicaGicaGica", "CMvTB3zLqxr0CMLIDxrL", "CMDIysGWlcaWlcaWlcaWlJCP", "Dg9tDhjPBMC", "mJKYndLXBhvAu2G", "C3rHDhvZ", "B2jQzwn0", "mJjsD3fRtLG", "DhjPBq", "CxvLCNLtzwXLy3rVCG", "cIaGicaGic5HChaTywDLBNqTCgfUzwWGEWOGicaGicaGihbVC2L0Aw9UoIbMAxHLzdSkicaGicaGicb3Awr0AdOGndaWChG7cIaGicaGicaGBwf4lwHLAwDODdOGnJaWChG7cIaGi ..

29 _0x436d = function() {

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

dist/index.jsView file

9if (_0x387e["QDZMBU"] === void 0) { L10: var _0x5abea9 = function(_0x2e9e62) { L11: const _0x5404db = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L9

Findings

1 High1 Medium3 Low

HighObfuscated Payload Loaderdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 1-29javascript

1var __defProp = Object.defineProperty;

2var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;

3var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);

4var _a, _b, _c, _d, _e;

5function _0x387e(_0x117023, _0x31d83e) {

6 _0x117023 = _0x117023 - 329;

7 const _0x436da9 = _0x436d();

8 let _0x387e6c = _0x436da9[_0x117023];

9 if (_0x387e["QDZMBU"] === void 0) {

10 var _0x5abea9 = function(_0x2e9e62) {

11 const _0x5404db = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L9

12 let _0x2ce233 = "", _0x5f5e02 = "";

14 _0x4d3ba1 = _0x5404db["indexOf"](_0x4d3ba1);

15 }

16 for (let _0x4a2056 = 0, _0x5ee8f4 = _0x2ce233["length"]; _0x4a2056 < _0x5ee8f4; _0x4a2056++) {

17 _0x5f5e02 += "%" + ("00" + _0x2ce233["charCodeAt"](_0x4a2056)["toString"](16))["slice"](-2);

18 }

19 return decodeURIComponent(_0x5f5e02);

20 };

21 _0x387e["hPeAIu"] = _0x5abea9, _0x387e["VOzRUI"] = {}, _0x387e["QDZMBU"] = !![];

22 }

23 const _0x677594 = _0x436da9[0], _0x315744 = _0x117023 + _0x677594, _0x514747 = _0x387e["VOzRUI"][_0x315744];

24 return !_0x514747 ? (_0x387e6c = _0x387e["hPeAIu"](_0x387e6c), _0x387e["VOzRUI"][_0x315744] = _0x387e6c) : _0x387e6c = _0x514747, _0x387e6c;

25}

26const _0x197d46 = _0x387e;

27function _0x436d() {

29 _0x436d = function() {

Long lines were clipped for display.