registry / @lovrabet/rabetbase-cli / 2.3.8

@lovrabet/rabetbase-cli@2.3.8

Developer CLI for Lovrabet apps, datasets, pages, SQL, BFF, database connections, skills, and AI agent workflows.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 262 file(s), 1.14 MB of source, external domains: api.lovrabet.com, app.lovrabet.com, daily-api.lovrabet.com, daily-runtime.lovrabet.com, daily.lovrabet.com, dev.lovrabet.com, g.lovrabet.com, g.yuntooai.com, open.lovrabet.com, qizhiyuntu.feishu.cn, registry.npmjs.org, registry.npmmirror.com, runtime.lovrabet.com, user-daily.lovrabet.com, user.lovrabet.com, www.npmjs.com, www.w3.org

Source & flagged code

3 flagged

lib/context/auth-resolver.jsView file

Lines 1-1javascript

1(function(_0x133fcd,_0x15cb2a){const _0x34c63b=a181_0x4dd0,_0x5c4d78=_0x133fcd();while(!![]){try{const _0x53cad6=-parseInt(_0x34c63b(0xd2))/0x1+parseInt(_0x34c63b(0xcf))/0x2*(-parseInt(_0x34c63b(0xd1))/0x3)+-parseInt(_0x34c63b(0xc9))/0x4+parseInt(_0x34c63b(0xcd))/0x5*(-parseInt(_0x34c63b(0xd4))/0x6)+-parseInt(_0x34c63b(0xce))/0x7+-parseInt(_0x34c63b(0xcc))/0x8+-parseInt(_0x34c63b(0xcb))/0x9*(-parseInt(_0x34c63b(0xca))/0xa);if(_0x53cad6===_0x15cb2a)break;else _0x5c4d78['push'](_0x5c4d78['shift']());}catch(_0x468d62){_0x5c4d78['push'](_0x5c4d78['shift']());}}}(a181_0x584a,0xbd347));import{getIsS ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/context/auth-resolver.jsView on unpkg · L1

Long lines were clipped for display.

lib/core/sql-sync/hash.jsView file

Lines 1-1javascript

1(function(_0x186cec,_0x272ef4){const _0x5c1092=a199_0x3e88,_0x6aca64=_0x186cec();while(!![]){try{const _0x9f701c=parseInt(_0x5c1092

lib/generated/build-info.jsView file

Lines 1-1javascript

1const a215_0x262480=a215_0x5b0f;(function(_0x2b9090,_0x506f18){const _0x6f0efb=a215_0x5b0f,_0x6e6d11=_0x2b9090();while(!![]){try{const

Source & flagged code

3 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code