registry / @quantabit/wallet-quantabit-sdk / 1.0.1

@quantabit/wallet-quantabit-sdk@1.0.1

QuantaBit Wallet QBit SDK - Investment portfolio management integration

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.79 MB of source, external domains: api.mainnet.qbitchain.io, api.qbitchain.io, api.testnet.qbitchain.io, explorer.devnet.qbitchain.io, explorer.mg.qbitchain.io, metamask.io, qbitwallet.io, react.dev, reactjs.org, trustwallet.com, www.okx.com, www.tokenpocket.pro, www.w3.org

Source & flagged code

4 flagged

dist/index.iife.jsView file

Lines 5024-5064javascript

5024 rejected: 'User rejected the signature request',

5025 // Security Related

5026 poweredBy: 'Decentralized identity by QuantaBit',

5027 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5028 verifiedBadge: 'Verified',

5029 encryptedConnection: 'Encrypted',

5030 decentralizedAuth: 'Decentralized Auth',

5031 // Features

5032 feature1: 'Full data sovereignty',

5033 feature2: 'W3C Standard Identity',

5034 feature3: 'Cross-chain Universal ID',

5035 feature4: 'Privacy Computing',

5036 // Register Page

5037 createIdentity: 'Create Digital Identity',

5038 chooseMethod: 'Choose your registration method to start your decentralized journey',

5039 walletMethod: 'Wallet Connect',

5040 emailMethod: 'Email Register',

5041 walletDesc: 'Connect your Web3 wallet and we will create a DID bound to your wallet address.',

5042 nickname: 'Nickname',

5043 email: 'Email',

5044 password: 'Password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.iife.jsView on unpkg · L5044

5045 confirmPassword: 'Confirm Password',

5046 createAccount: 'Create Account',

5047 welcome: 'Welcome to',

5048 successDesc: 'Your decentralized identity has been created successfully',

5049 autoWallet: 'Wallet automatically created and linked',

5050 didIdentifier: 'DID Identifier',

5051 recommended: 'Recommended',

5052 redirecting: 'Redirecting...',

5053 // Social Bindings

5054 socialBindings: 'Social Account Bindings',

5055 bindAccount: 'Bind Account',

5056 unbindAccount: 'Unbind Account',

5057 verifiedAccount: 'Verified Account',

5058 // Reputation System

5059 reputation: 'Reputation Score',

5060 reputationLevel: 'Reputation Level',

5061 badges: 'Badges',

5062 leaderboard: 'Leaderboard',

5063 // Credentials

5064 credentials: 'Verifiable Credentials',

dist/index.esm.jsView file

Lines 5027-5067javascript

5027 rejected: 'User rejected the signature request',

5028 // Security Related

5029 poweredBy: 'Decentralized identity by QuantaBit',

5030 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5031 verifiedBadge: 'Verified',

5032 encryptedConnection: 'Encrypted',

dist/index.cjsView file

Lines 5031-5071javascript

5031 rejected: 'User rejected the signature request',

5032 // Security Related

5033 poweredBy: 'Decentralized identity by QuantaBit',

5034 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5035 verifiedBadge: 'Verified',

5036 encryptedConnection: 'Encrypted',

dist/index.umd.jsView file

Lines 5027-5067javascript

5027 rejected: 'User rejected the signature request',

5028 // Security Related

5029 poweredBy: 'Decentralized identity by QuantaBit',

5030 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5031 verifiedBadge: 'Verified',

5032 encryptedConnection: 'Encrypted'

Source & flagged code

4 flagged · loading source

dist/index.iife.jsView file

5044patternName = generic_password severity = medium line = 5044 matchedText = password...rd',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.iife.jsView on unpkg · L5044

dist/index.esm.jsView file

5047patternName = generic_password severity = medium line = 5047 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.esm.js

dist/index.esm.jsView on unpkg · L5047

dist/index.cjsView file

5051patternName = generic_password severity = medium line = 5051 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.cjs

dist/index.cjsView on unpkg · L5051

dist/index.umd.jsView file

5047patternName = generic_password severity = medium line = 5047 matchedText = password...rd',

Medium

Secret Pattern

Hardcoded password in dist/index.umd.js

dist/index.umd.jsView on unpkg · L5047

Findings

6 Medium4 Low

MediumSecret Patterndist/index.iife.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/index.esm.js

MediumSecret Patterndist/index.cjs

MediumSecret Patterndist/index.umd.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/index.iife.jsView file

Lines 5024-5064javascript

5024 rejected: 'User rejected the signature request',

5025 // Security Related

5026 poweredBy: 'Decentralized identity by QuantaBit',

5027 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5028 verifiedBadge: 'Verified',

5029 encryptedConnection: 'Encrypted',

5030 decentralizedAuth: 'Decentralized Auth',

5031 // Features

5032 feature1: 'Full data sovereignty',

5033 feature2: 'W3C Standard Identity',

5034 feature3: 'Cross-chain Universal ID',

5035 feature4: 'Privacy Computing',

5036 // Register Page

5037 createIdentity: 'Create Digital Identity',

5038 chooseMethod: 'Choose your registration method to start your decentralized journey',

5039 walletMethod: 'Wallet Connect',

5040 emailMethod: 'Email Register',

5041 walletDesc: 'Connect your Web3 wallet and we will create a DID bound to your wallet address.',

5042 nickname: 'Nickname',

5043 email: 'Email',

5044 password: 'Password',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.iife.jsView on unpkg · L5044

5045 confirmPassword: 'Confirm Password',

5046 createAccount: 'Create Account',

5047 welcome: 'Welcome to',

5048 successDesc: 'Your decentralized identity has been created successfully',

5049 autoWallet: 'Wallet automatically created and linked',

5050 didIdentifier: 'DID Identifier',

5051 recommended: 'Recommended',

5052 redirecting: 'Redirecting...',

5053 // Social Bindings

5054 socialBindings: 'Social Account Bindings',

5055 bindAccount: 'Bind Account',

5056 unbindAccount: 'Unbind Account',

5057 verifiedAccount: 'Verified Account',

5058 // Reputation System

5059 reputation: 'Reputation Score',

5060 reputationLevel: 'Reputation Level',

5061 badges: 'Badges',

5062 leaderboard: 'Leaderboard',

5063 // Credentials

5064 credentials: 'Verifiable Credentials',

dist/index.esm.jsView file

Lines 5027-5067javascript

5027 rejected: 'User rejected the signature request',

5028 // Security Related

5029 poweredBy: 'Decentralized identity by QuantaBit',

5030 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5031 verifiedBadge: 'Verified',

5032 encryptedConnection: 'Encrypted',

dist/index.cjsView file

Lines 5031-5071javascript

5031 rejected: 'User rejected the signature request',

5032 // Security Related

5033 poweredBy: 'Decentralized identity by QuantaBit',

5034 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5035 verifiedBadge: 'Verified',

5036 encryptedConnection: 'Encrypted',

dist/index.umd.jsView file

Lines 5027-5067javascript

5027 rejected: 'User rejected the signature request',

5028 // Security Related

5029 poweredBy: 'Decentralized identity by QuantaBit',

5030 securityNote: 'End-to-end encrypted · Private keys never leave your device',

5031 verifiedBadge: 'Verified',

5032 encryptedConnection: 'Encrypted'