registry / @mamans2973/maman / 1.0.4
@mamans2973/maman@1.0.4
⚠ Under reviewStatic Scan Results
scanned 6d ago · by rust-scannerStatic analysis completed at 97.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
WildcardDependency
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.preinstall = node ./engine-requirements.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkglib/Utils/messages-media.jsView file
14async function getAudioDuration(a){const b=await Promise.resolve().then(()=>__importStar(require("music-metadata")));let c;if(Buffer.isBuffer(a))c=await b.parseBuffer(a,void 0,{dur...
L15: async function getAudioWaveform(a,b){try{var {default:c}=await eval("import('audio-decode')");if(Buffer.isBuffer(a))var d=a;else if("string"===typeof a){var e=(0,fs_1.createReadStr...
L16: l)))}catch(k){null===b||void 0===b||b.debug("Failed to generate waveform: "+k)}}const toReadable=a=>{const b=new stream_1.Readable({read:()=>{}});b.push(a);b.push(null);return b};e...
Low
Eval
Package source references a known benign dynamic code generation pattern.
lib/Utils/messages-media.jsView on unpkg · L14WAProto/index.js
Findings
8 High3 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis LimitedWAProto/index.js
HighKnown Malware Source Similaritynode_modules/protobufjs/dist/light/protobuf.js
HighKnown Malware Source Similaritynode_modules/protobufjs/dist/protobuf.js
HighKnown Malware Source Similaritynode_modules/@protobufjs/fetch/index.js
HighKnown Malware Source Similaritynode_modules/protobufjs/src/util.js
HighKnown Malware Source Similaritynode_modules/protobufjs/src/root.js
HighPrevious Version Dangerous Deltanode_modules/protobufjs/dist/light/protobuf.js
MediumNetwork
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
Affected versions and remediation
This report applies to @mamans2973/maman@1.0.4.
See all versions of @mamans2973/maman for other recorded verdicts.
- Review the evidence and your use of @mamans2973/maman@1.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.