Static Scan Results
scanned 4h ago · by rust-scannerStatic analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
DynamicRequireNetwork
MinifiedObfuscatedTrivial
NoLicense
Source & flagged code
2 flagged · loading sourcedist/npm/scramble-cli.jsView file
1#!/usr/bin/env node
L2: 'use strict';const _0x26bce4=_0x4623;(function(_0x1d7da1,_0x1d17b9){const _0x77c14d=_0x4623,_0x2627ed=_0x1d7da1();while(!![]){try{const _0x30fda5=-parseInt(_0x77c14d(0x1b6))/0x1*(p...
High
Obfuscated Payload Loader
Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/npm/scramble-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: 'use strict';const _0x26bce4=_0x4623;(function(_0x1d7da1,_0x1d17b9){const _0x77c14d=_0x4623,_0x2627ed=_0x1d7da1();while(!![]){try{const _0x30fda5=-parseInt(_0x77c14d(0x1b6))/0x1*(p...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/npm/scramble-cli.jsView on unpkg · L1Findings
2 High3 Medium3 Low
HighObfuscated Payload Loaderdist/npm/scramble-cli.js
HighObfuscated
MediumDynamic Requiredist/npm/scramble-cli.js
MediumNetwork
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowNo License