Static Scan Results
scanned 3d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
2 flagged · loading sourcebin/nexuscrew.jsView file
3// NexusCrew CLI dispatcher (portable). Subcomandi: init / serve / start / stop / status.
L4: const { dispatch } = require('../lib/cli/commands.js');
L5: const r = dispatch(process.argv.slice(2));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/nexuscrew.jsView on unpkg · L3lib/cli/service.jsView file
6const path = require('node:path');
L7: const { execFileSync } = require('node:child_process');
L8: const { detectPlatform, uid } = require('./platform.js');
...
L128: const repoQ = shellQuote(ctx.repoRoot);
L129: return `#!/data/data/com.termux/files/usr/bin/sh
L130: # NexusCrew boot (Termux) - loopback, localhost del telefono
...
L157: // - write temp file nella stessa dir -> chmod mode -> atomic rename
L158: // - exec service manager (systemctl/launchctl); skip in dryRun
L159: // execImpl per test (default execFileSync).
L160: function installService(platform, content, ctx, { dryRun = false, execImpl = execFileSync } = {}) {
L161: const home = ctx.home || os.homedir();
L162: const target = ctx.installPath || installPath(platform, home);
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
lib/cli/service.jsView on unpkg · L6Findings
5 Medium5 Low
MediumDynamic Requirebin/nexuscrew.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/cli/service.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings