registry  /  @hiapi/captcha-js  /  1.1.0

@hiapi/captcha-js@1.1.0

**1. 初始化滑块接口** ```javascript import Captcha from '@hiapi/captcha-js' const appId= '10000' const apiUrl ="https://api.cloud.hiapi.cn/cloud-api" Captcha.init(appId,apiUrl);

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
Eval
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivial
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 664 KB of source

Source & flagged code

2 flagged · loading source
dist/captcha.jsView file
1(function(_0x2e4b1c,_0x39ac81){var _0xde8e9d=a0_0x39f6,_0x41c7a4=_0x2e4b1c();while(!![]){try{var _0x1039be=-parseInt(_0xde8e9d(0x44f))/0x1+-parseInt(_0xde8e9d(0x27a))/0x2*(parseInt...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/captcha.jsView on unpkg · L1
1(function(_0x2e4b1c,_0x39ac81){var _0xde8e9d=a0_0x39f6,_0x41c7a4=_0x2e4b1c();while(!![]){try{var _0x1039be=-parseInt(_0xde8e9d(0x44f))/0x1+-parseInt(_0xde8e9d(0x27a))/0x2*(parseInt...
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/captcha.jsView on unpkg · L1

Findings

2 High1 Medium3 Low
HighObfuscated Payload Loaderdist/captcha.js
HighObfuscated
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/captcha.js
LowHigh Entropy Strings