registry / @ripple-ts/language-server / 0.3.99

@ripple-ts/language-server@0.3.99

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 908 KB of source, external domains: developer.mozilla.org

Source & flagged code

3 flagged

dist/server-BDTOWnFL.jsView file

57//#region ../typescript-plugin/src/utils.js L58: const DEBUG = process.env.RIPPLE_DEBUG === "true"; L59: const charAllowedWordRegex = /[\w\-$#]/; ... L1061: generatedLengths: [newCode.length], L1062: data: { L1063: completion: true, ... L1401: visited_dirs.push(current_dir); L1402: const package_json_path = path.default.join(current_dir, "package.json"); L1403: if (exists_sync(package_json_path)) try { L1404: const package_json = JSON.parse(fs.default.readFileSync(package_json_path, "utf8")); L1405: const dependencies = new Set([ ... L4644: const crypto_1 = require("crypto");

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/server-BDTOWnFL.jsView on unpkg · L57

43//#endregion L44: let vscode_uri = require("vscode-uri"); L45: let typescript = require("typescript");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server-BDTOWnFL.jsView on unpkg · L43

20863locale = locale?.toLowerCase(); L20864: const _require = eval("require"); L20865: return {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/server-BDTOWnFL.jsView on unpkg · L20863

Source & flagged code

3 flagged · loading source

dist/server-BDTOWnFL.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code