registry  /  @paiavaliable/scrape-lib  /  1.1.1

@paiavaliable/scrape-lib@1.1.1

Kumpulan scraper/downloader utility: YT Music search, YT downloader, AIO social media downloader, link bypass, HD image upscaler, black & white image filter.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 22 file(s), 61.9 KB of source, external domains: anilist.co, api-gumlet.idn.app, api.cuki.biz.id, api.shinzu.web.id, api.theresav.biz.id, app.khaddavi.net, bypass-links.com, chat.sakana.ai, dayydl.dpdns.org, en.savefrom.net, getindevice.com, identitytoolkit.googleapis.com, imageupscaler.com, music.youtube.com, petdii.com, translate.googleapis.com, worker.savefrom.net, www.idntimes.com, y2mate.cc

Source & flagged code

2 flagged · loading source
lib/sakanaAI.jsView file
23patternName = google_api_key severity = high line = 23 matchedText = const FI...I4';
High
High Secret

Package contains a high-severity secret pattern.

lib/sakanaAI.jsView on unpkg · L23
23patternName = google_api_key severity = high line = 23 matchedText = const FI...I4';
High
Secret Pattern

Google API key in lib/sakanaAI.js

lib/sakanaAI.jsView on unpkg · L23

Findings

2 High1 Medium4 Low
HighHigh Secretlib/sakanaAI.js
HighSecret Patternlib/sakanaAI.js
MediumNetwork
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings