registry / @juggernautlabs/cloud / 0.1.3

@juggernautlabs/cloud@0.1.3

Official Node.js and browser SDK for the Juggernaut Cloud Platform. Execute AI processes, manage cloud database schemas, search resources, and run plugins locally.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsEvalNetwork

Supply chain

MinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 146 KB of source, external domains: core.juggernautlabs.ai

Source & flagged code

4 flagged

build/esm/BrowserAutomationManager.jsView file

Lines 171-199javascript

171function extractValue(command) {

172 const el = command.selector

173 ? document.querySelector(command.selector)

174 : document.body;

175 if (!el)

176 return { executed: false, reason: 'Element not found' };

177 return {

178 executed: true,

179 key: command.key,

180 value: el.innerText || el.value || null

181 };

182}

183function submitForm(command) {

184 const el = document.querySelector(command.selector);

185 if (!el)

186 return { executed: false, reason: 'Form not found' };

187 el.submit();

188 return { executed: true, selector: command.selector };

189}

190function runCustomFunction(command) {

191 try {

192 const fn = new Function('args', command.fn);

193 return { executed: true, result: fn(command.args) };

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/esm/BrowserAutomationManager.jsView on unpkg · L191

194 }

195 catch (error) {

196 return { executed: false, error: error?.message || String(error) };

197 }

198}

199

build/CloudDatabaseManager.jsView file

Lines 1-26javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

build/esm/PluginManager.jsView file

Lines 1-37javascript

1import * as vm from 'vm';

2/**

3 * Loads a plugin script inside a Node VM context and returns the exported

4 * constructor. Callers are responsible for instantiating the plugin with

5 * their own auth tokens and settings, e.g. PluginClass.create(authSettings, settings).

6 *

7 * @param script The plugin JavaScript source returned by the cloud API.

8 * @param

build/browser.jsView file

Lines 1-2javascript

1var JuggernautCloud=(()=>{var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,s)=>(typeof require<"u"?require:e)[s]}):

Source & flagged code

4 flagged · loading source

build/esm/BrowserAutomationManager.jsView file

191try { L192: const fn = new Function('args', command.fn); L193: return { executed: true, result: fn(command.args) };

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/esm/BrowserAutomationManager.jsView on unpkg · L191

build/CloudDatabaseManager.jsView file

6exports.DatabaseSchema = void 0; L7: const CloudResourceAPI_js_1 = __importDefault(require("./CloudResourceAPI.js")); L8: class CloudDatabaseManager {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/CloudDatabaseManager.jsView on unpkg · L6

build/esm/PluginManager.jsView file

17__filename: pluginName, L18: __dirname: '', L19: process, ... L33: FileReader: globalThis.FileReader, L34: FormData: globalThis.FormData, L35: ReadableStream: globalThis.ReadableStream, ... L38: TextEncoder: globalThis.TextEncoder, L39: TextDecoder: globalThis.TextDecoder, L40: EventTarget: globalThis.EventTarget,

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

build/esm/PluginManager.jsView on unpkg · L17

build/browser.jsView file

1var JuggernautCloud=(()=>{var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,s)=>(typeof require<"u"?require:e)[s]}):t)(function(t){if(typeof require<"u")ret...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

build/browser.jsView on unpkg · L1

Findings

1 High4 Medium4 Low

HighSame File Env Network Executionbuild/browser.js

MediumDynamic Requirebuild/CloudDatabaseManager.js

MediumUnsafe Vm Contextbuild/esm/PluginManager.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalbuild/esm/BrowserAutomationManager.js

LowUrl Strings

Source & flagged code

4 flagged

build/esm/BrowserAutomationManager.jsView file

Lines 171-199javascript

171function extractValue(command) {

172 const el = command.selector

173 ? document.querySelector(command.selector)

174 : document.body;

175 if (!el)

176 return { executed: false, reason: 'Element not found' };

177 return {

178 executed: true,

179 key: command.key,

180 value: el.innerText || el.value || null

181 };

182}

183function submitForm(command) {

184 const el = document.querySelector(command.selector);

185 if (!el)

186 return { executed: false, reason: 'Form not found' };

187 el.submit();

188 return { executed: true, selector: command.selector };

189}

190function runCustomFunction(command) {

191 try {

192 const fn = new Function('args', command.fn);

193 return { executed: true, result: fn(command.args) };

Low

Eval

Package source references a known benign dynamic code generation pattern.

build/esm/BrowserAutomationManager.jsView on unpkg · L191

194 }

195 catch (error) {

196 return { executed: false, error: error?.message || String(error) };

197 }

198}

199

build/CloudDatabaseManager.jsView file

Lines 1-26javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod : { "default": mod };

4};

5Object.defineProperty

build/esm/PluginManager.jsView file

Lines 1-37javascript

1import * as vm from 'vm';

2/**

3 * Loads a plugin script inside a Node VM context and returns the exported

4 * constructor. Callers are responsible for instantiating the plugin with

5 * their own auth tokens and settings, e.g. PluginClass.create(authSettings, settings).

6 *

7 * @param script The plugin JavaScript source returned by the cloud API.

8 * @param

build/browser.jsView file

Lines 1-2javascript

1var JuggernautCloud=(()=>{var Q=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,s)=>(typeof require<"u"?require:e)[s]}):