registry / @rahulrc48/ryoto / 1.1.6

@rahulrc48/ryoto@1.1.6

Interactive System Maintenance CLI tool

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 27 file(s), 150 KB of source, external domains: api.ipify.org, speed.cloudflare.com

Source & flagged code

3 flagged

commands/duplicates.jsView file

Lines 39-79javascript

39 } catch (e) {}

40 return fileList;

41}

43function getFileHash(filePath) {

44 return new Promise((resolve) => {

45 const hash = crypto.createHash('md5');

46 const stream = fs.createReadStream(filePath);

47 stream.on('data', chunk => hash.update(chunk));

48 stream.on('end', () => resolve(hash.digest('hex')));

49 stream.on('error', () => resolve(null)); // Resolve null on locked files

50 });

51}

53module.exports = {

54 name: '/duplicates',

55 menuName: '🔍 Duplicate Finder ',

56 desc: 'Scan a folder recursively to find and delete duplicate files (backed up to vault)',

57 run: async (context) => {

58 console.log(`\n${context.esc.yellow}${context.esc.bold}[DUPLICATE FINDER] Entering duplicate scan module...${context.esc.reset}\n`);

59 let dupPath = await context.askQuestion('Enter folder path to scan (Press Enter for current directory): ');

60 if (!dupPath) dupPath = process.cwd();

Low

Weak Crypto

Package source references weak cryptographic algorithms.

commands/duplicates.jsView on unpkg · L59

62 if (!fs.existsSync(dupPath)) {

63 console.log(`${context.esc.red}Error: Path "${dupPath}" does not exist.${context.esc.reset}\n`);

64 return;

65 }

67 console.log(`Scanning "${dupPath}" recursively (this might take a few moments)...`);

68 context.startSpinner("Listing files in directory");

70 const config = loadConfig();

71 const allFiles = walkDir(dupPath, config);

72 context.stopSpinner(`Scan complete. Found ${allFiles.length} files.`);

74 // Group files by size

75 const sizeGroups = {};

76 allFiles.forEach(f => {

77 if (f.size === 0) return; // Skip empty files

78 if (!sizeGroups[f.size]) sizeGroups[f.size] = [];

79 sizeGroups[f.size].push(f.path);

install.batView file

•path = install.bat kind = build_helper sizeBytes = 1477 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.batView on unpkg

index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @rahulrc48/ryoto@1.1.5 matchedIdentity = npm:QHJhaHVscmM0OC9yeW90bw:1.1.5 similarity = 0.815 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

Source & flagged code

3 flagged · loading source

commands/duplicates.jsView file

59let dupPath = await context.askQuestion('Enter folder path to scan (Press Enter for current directory): '); L60: if (!dupPath) dupPath = process.cwd(); L61:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

commands/duplicates.jsView on unpkg · L59

install.batView file

•path = install.bat kind = build_helper sizeBytes = 1477 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.batView on unpkg

index.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

Findings

1 High3 Medium4 Low

HighPrevious Version Dangerous Deltaindex.js

MediumEnvironment Vars

MediumShips Build Helperinstall.bat

MediumStructural Risk Force Deep Review

LowWeak Cryptocommands/duplicates.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

commands/duplicates.jsView file

Lines 39-79javascript

39 } catch (e) {}

40 return fileList;

41}

43function getFileHash(filePath) {

44 return new Promise((resolve) => {

45 const hash = crypto.createHash('md5');

46 const stream = fs.createReadStream(filePath);

47 stream.on('data', chunk => hash.update(chunk));

48 stream.on('end', () => resolve(hash.digest('hex')));

49 stream.on('error', () => resolve(null)); // Resolve null on locked files

50 });

51}

53module.exports = {

54 name: '/duplicates',

55 menuName: '🔍 Duplicate Finder ',

56 desc: 'Scan a folder recursively to find and delete duplicate files (backed up to vault)',

57 run: async (context) => {

58 console.log(`\n${context.esc.yellow}${context.esc.bold}[DUPLICATE FINDER] Entering duplicate scan module...${context.esc.reset}\n`);

59 let dupPath = await context.askQuestion('Enter folder path to scan (Press Enter for current directory): ');

60 if (!dupPath) dupPath = process.cwd();

Low

Weak Crypto

Package source references weak cryptographic algorithms.

commands/duplicates.jsView on unpkg · L59

62 if (!fs.existsSync(dupPath)) {

63 console.log(`${context.esc.red}Error: Path "${dupPath}" does not exist.${context.esc.reset}\n`);

64 return;

65 }

67 console.log(`Scanning "${dupPath}" recursively (this might take a few moments)...`);

68 context.startSpinner("Listing files in directory");

70 const config = loadConfig();

71 const allFiles = walkDir(dupPath, config);

72 context.stopSpinner(`Scan complete. Found ${allFiles.length} files.`);

74 // Group files by size

75 const sizeGroups = {};

76 allFiles.forEach(f => {

77 if (f.size === 0) return; // Skip empty files

78 if (!sizeGroups[f.size]) sizeGroups[f.size] = [];

79 sizeGroups[f.size].push(f.path);

install.batView file

•path = install.bat kind = build_helper sizeBytes = 1477 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.batView on unpkg

index.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg