registry  /  @qefro-ai/widget  /  1.1.6

@qefro-ai/widget@1.1.6

Embeddable AI chat widget for Qefro customer support

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
NetworkWebSocket
Supply chain
HighEntropyStringsTelemetryUrlStrings
Manifest
NoLicense
scanned 5 file(s), 608 KB of source, external domains: api.qefro.com, wa.me, www.w3.org

Source & flagged code

1 flagged · loading source
dist/widget.iife.jsView file
1(function(Pe){"use strict";const ct="[redacted]... L2: In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function ki(a,e){return vi(a)||Si(a,e)||Ai(a,e)||Ti()}function Ai(a,e){if(a){if(typeof a=="stri...
High
Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

dist/widget.iife.jsView on unpkg · L1

Findings

1 High1 Medium6 Low
HighBase64 Obscured Urldist/widget.iife.js
MediumNetwork
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License