Static Scan Results
scanned 14d ago · by rust-scannerStatic analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessNetworkWebSocket
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
NoLicense
Source & flagged code
3 flagged · loading sourcedist/skippr-sdk.jsView file
241${J}
L242: `):Y+=X[0]}return Y+=x.slice(Z),Y}let r=fuf(f,l||location.href);return r=await h(r,l||location.href,0),r}function duf(f){if(!f)return[];let l=[],u=f.split(",").map((w)=>w.trim()).f...
L243: `:case"\r":case"\t":case" ":continue;default:throw Error("invalid base64 string.")}switch(y){case 0:r=h,y=1;break;case 1:u[w++]=r<<2|(h&48)>>4,r=h,y=2;break;case 2:u[w++]=(r&15)<<4...
High
Child Process
Package source references child process execution.
dist/skippr-sdk.jsView on unpkg · L241226Learn more: https://react.dev/warnings/version-mismatch`))}(),typeof Map==="function"&&Map.prototype!=null&&typeof Map.prototype.forEach==="function"&&typeof Set==="function"&&Set....
L227: You might need to use a local HTTP server (instead of file://): https://react.dev/link/react-devtools-faq`:""),"font-weight:bold")}t7.createRoot=function(t,p){if(!L(t))throw Error(...
L228:
...
L241: ${J}
L242: `):Y+=X[0]}return Y+=x.slice(Z),Y}let r=fuf(f,l||location.href);return r=await h(r,l||location.href,0),r}function duf(f){if(!f)return[];let l=[],u=f.split(",").map((w)=>w.trim()).f...
L243: `:case"\r":case"\t":case" ":continue;default:throw Error("invalid base64 string.")}switch(y){case 0:r=h,y=1;break;case 1:u[w++]=r<<2|(h&48)>>4,r=h,y=2;break;case 2:u[w++]=(r&15)<<4...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/skippr-sdk.jsView on unpkg · L226253patternName = generic_password
severity = medium
line = 253
matchedText = `},l.par...+`\r
Medium
Findings
2 High4 Medium6 Low
HighChild Processdist/skippr-sdk.js
HighSame File Env Network Executiondist/skippr-sdk.js
MediumSecret Patterndist/skippr-sdk.js
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License