registry / @gakwaya/app-agent-vue / 1.3.0

@gakwaya/app-agent-vue@1.3.0

Vue integration for App-Agent

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 3 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

SourceNo risky source behavior triggered.

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 4.61 KB of source

Source & flagged code

1 flagged

dist/index.jsView file

Lines 7-47javascript

7 if (_0x2de72a === _0x3b88fe) break;

8 else _0x1b14a7["push"](_0x1b14a7["shift"]());

9 } catch (_0x2afe0a) {

10 _0x1b14a7["push"](_0x1b14a7["shift"]());

11 }

12 }

13})(_0x56c3, 791081);

14import { defineComponent, shallowRef, provide, onUnmounted, inject } from "vue";

15function _0x56c3() {

16 const _0x2b661d = ["mta3mZmYmZnqu2zxr00", "y29UzMLN", "nZyWmZeYmgPKtLb1DG", "qxbWqwDLBNrqCM92AwrLCG", "zxHLy3v0zq", "mZCZnZm2n0XduMTtDa", "mJy4ndKZmKvruePcAq", "nLbMBfrZDa", "DMfSDwu", "nZmYnZCYmeXvvvnlDG", "mJe4z1zQzuPp", "yxbWlwfNzw50lwnVBNrLEhq", "mtqXnZKWmMfcrvPutG", "Bw91BNrqyw5LBa", "z2v0u3rHDgu", "DgfZAW", "C3vIC2nYAwjL", "y29TCg9Uzw50", "ndC5mMLPt3neCa"];

17 _0x56c3 = function() {

18 return _0x2b661d;

19 };

20 return _0x56c3();

21}

22import { createAgentContext } from "@gakwaya/app-agent-integrations-shared";

23function _0x1fb7(_0x52e6d9, _0x101eb1) {

24 _0x52e6d9 = _0x52e6d9 - 413;

25 const _0x56c3cd = _0x56c3();

26 let _0x1fb765 = _0x56c3cd[_0x52e6d9];

27 if (_0x1fb7["maRSZq"] === void 0) {

28 var _0x8f98a0 = function(_0x433554) {

29 const _0x443a99 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L27

30 let _0x3995a0 = "", _0x1943cd = "";

31 for (let _0xee8409 = 0, _0x6eb1e5, _0x3b2d35, _0x22c12d = 0; _0x3b2d35 = _0x433554["charAt"](_0x22c12d++); ~_0x3b2d35 && (_0x6eb1e5 = _0xee8409 % 4 ? _0x6eb1e5 * 64 + _0x3b2d35 : _0x3b2d35, _0xee8409++ % 4) ? _0x3995a0 += String["fromCharCode"

32 _0x3b2d35 = _0x443a99["indexOf"](_0x3b2d35);

33 }

34 for (let _0x3456f3 = 0, _0x2bec47 = _0x3995a0["length"]; _0x3456f3 < _0x2bec47; _0x3456f3++) {

35 _0x1943cd += "%" + ("00" + _0x3995a0["charCodeAt"](_0x3456f3)["toString"](16))["slice"](-2);

36 }

37 return decodeURIComponent(_0x1943cd);

38 };

39 _0x1fb7["jhKoJV"] = _0x8f98a0, _0x1fb7["oWCILO"] = {}, _0x1fb7["maRSZq"] = !![];

40 }

41 const _0x3c69d8 = _0x56c3cd[0], _0x56fb17 = _0x52e6d9 + _0x3c69d8, _0x2d61a9 = _0x1fb7["oWCILO"][_0x56fb17];

42 return !_0x2d61a9 ? (_0x1fb765 = _0x1fb7["jhKoJV"](_0x1fb765), _0x1fb7["oWCILO"][_0x56fb17] = _0x1fb765) : _0x1fb765 = _0x2d61a9, _0x1fb765;

43}

44const AGENT_CONTEXT_KEY = Symbol(_0xdbd26c(428)), AGENT_STATE_KEY = Symbol("app-agent-state");

45function setupAgentContext(_0x3995a0) {

46 const _0x117da5 = _0xdbd26c, _0x1943cd = createAgentContext(_0x3995a0["config"], { "mountPanel": _0x3995a0[_0x117da5(430)], "panelConfig": _0x3995a0["panelConfig"] }), _0xee8409 = shallowRef(_0x1943cd[_0x117da5(431)]());

47 return _0x1943cd[_0x117da5(414)](() => {

Source & flagged code

1 flagged · loading source

dist/index.jsView file

27if (_0x1fb7["maRSZq"] === void 0) { L28: var _0x8f98a0 = function(_0x433554) { L29: const _0x443a99 = "[redacted]+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L27

Findings

1 High2 Low

HighObfuscated Payload Loaderdist/index.js

LowScripts Present

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/index.jsView file

Lines 7-47javascript

7 if (_0x2de72a === _0x3b88fe) break;

8 else _0x1b14a7["push"](_0x1b14a7["shift"]());

9 } catch (_0x2afe0a) {

10 _0x1b14a7["push"](_0x1b14a7["shift"]());

11 }

12 }

13})(_0x56c3, 791081);

14import { defineComponent, shallowRef, provide, onUnmounted, inject } from "vue";

15function _0x56c3() {

17 _0x56c3 = function() {

18 return _0x2b661d;

19 };

20 return _0x56c3();

21}

22import { createAgentContext } from "@gakwaya/app-agent-integrations-shared";

23function _0x1fb7(_0x52e6d9, _0x101eb1) {

24 _0x52e6d9 = _0x52e6d9 - 413;

25 const _0x56c3cd = _0x56c3();

26 let _0x1fb765 = _0x56c3cd[_0x52e6d9];

27 if (_0x1fb7["maRSZq"] === void 0) {

28 var _0x8f98a0 = function(_0x433554) {

29 const _0x443a99 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=";

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L27

30 let _0x3995a0 = "", _0x1943cd = "";

32 _0x3b2d35 = _0x443a99["indexOf"](_0x3b2d35);

33 }

34 for (let _0x3456f3 = 0, _0x2bec47 = _0x3995a0["length"]; _0x3456f3 < _0x2bec47; _0x3456f3++) {

35 _0x1943cd += "%" + ("00" + _0x3995a0["charCodeAt"](_0x3456f3)["toString"](16))["slice"](-2);

36 }

37 return decodeURIComponent(_0x1943cd);

38 };

39 _0x1fb7["jhKoJV"] = _0x8f98a0, _0x1fb7["oWCILO"] = {}, _0x1fb7["maRSZq"] = !![];

40 }

41 const _0x3c69d8 = _0x56c3cd[0], _0x56fb17 = _0x52e6d9 + _0x3c69d8, _0x2d61a9 = _0x1fb7["oWCILO"][_0x56fb17];

42 return !_0x2d61a9 ? (_0x1fb765 = _0x1fb7["jhKoJV"](_0x1fb765), _0x1fb7["oWCILO"][_0x56fb17] = _0x1fb765) : _0x1fb765 = _0x2d61a9, _0x1fb765;

43}

44const AGENT_CONTEXT_KEY = Symbol(_0xdbd26c(428)), AGENT_STATE_KEY = Symbol("app-agent-state");

45function setupAgentContext(_0x3995a0) {

47 return _0x1943cd[_0x117da5(414)](() => {