registry / @paiavaliable/scrape-lib / 1.1.1

@paiavaliable/scrape-lib@1.1.1

Kumpulan scraper/downloader utility: YT Music search, YT downloader, AIO social media downloader, link bypass, HD image upscaler, black & white image filter.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 61.9 KB of source, external domains: anilist.co, api-gumlet.idn.app, api.cuki.biz.id, api.shinzu.web.id, api.theresav.biz.id, app.khaddavi.net, bypass-links.com, chat.sakana.ai, dayydl.dpdns.org, en.savefrom.net, getindevice.com, identitytoolkit.googleapis.com, imageupscaler.com, music.youtube.com, petdii.com, translate.googleapis.com, worker.savefrom.net, www.idntimes.com, y2mate.cc

Source & flagged code

2 flagged

lib/sakanaAI.jsView file

Lines 3-43javascript

3 * Unofficial client buat chat.sakana.ai — bikin sesi anonim (Firebase signup + login),

4 * lalu streaming chat ke salah satu model yang tersedia.

5 */

7const axios = require('axios');

8const crypto = require('crypto');

9const FormData = require('form-data');

11const USER_AGENTS = [

12 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36',

13 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36',

14 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36',

15 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0',

16 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:125.0) Gecko/20100101 Firefox/125.0',

17 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0',

18 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0',

19 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15'

20];

22const BASE = 'https://chat.sakana.ai';

23const FIREBASE_KEY = 'AIzaSyBIJuyUokxGiETY0Nu3hQNC1dMadHyf_I4';

High

High Secret

Package contains a high-severity secret pattern.

lib/sakanaAI.jsView on unpkg · L23

High

Secret Pattern

Google API key in lib/sakanaAI.js

lib/sakanaAI.jsView on unpkg · L23

24const MODELS = ['namazu', 'sakana', 'namazu-v2', 'namazu-pro', 'llama'];

26function randomUA() {

27 return USER_AGENTS[Math.floor(Math.random() * USER_AGENTS.length)];

28}

30async function request(method, url, options = {}, retries = 3) {

31 let lastError;

32 for (let i = 0; i < retries; i++) {

33 try {

34 const headers = {

35 'User-Agent': randomUA(),

36 'Accept': 'application/json, text/plain, */*',

37 'Accept-Language': 'id-ID,id;q=0.9,en-US;q=0.8,en;q=0.7',

38 'Accept-Encoding': 'gzip, deflate, br',

39 'Connection': 'keep-alive',

40 ...(options.headers || {})

41 };

42 const config = {

43 method,

Source & flagged code

2 flagged · loading source

lib/sakanaAI.jsView file

23patternName = google_api_key severity = high line = 23 matchedText = const FI...I4';

High

High Secret

Package contains a high-severity secret pattern.

lib/sakanaAI.jsView on unpkg · L23

23patternName = google_api_key severity = high line = 23 matchedText = const FI...I4';

High

Secret Pattern

Google API key in lib/sakanaAI.js

lib/sakanaAI.jsView on unpkg · L23

Findings

2 High1 Medium4 Low

HighHigh Secretlib/sakanaAI.js

HighSecret Patternlib/sakanaAI.js

MediumNetwork

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings