registry / @tencentcloud/tmeet / 1.0.15

@tencentcloud/tmeet@1.0.15

腾讯会议 CLI 工具

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 5.95 KB of source, external domains: nodejs.org, raw.githubusercontent.com

Source & flagged code

4 flagged

package.jsonView file

Lines 1-24json

2 "name": "@tencentcloud/tmeet",

3 "version": "v1.0.15",

4 "description": "腾讯会议 CLI 工具",

5 "bin": {

6 "tmeet": "./scripts/tmeet.js"

7 },

8 "scripts": {

9 "postinstall": "node scripts/cleanup.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L9

10 },

11 "files": [

12 "scripts/",

13 "dist/"

14 ],

15 "repository": {

16 "type": "git",

17 "url": "git+https://github.com/TencentCloud/tencentmeeting-cli.git"

18 },

19 "engines": {

20 "node": ">=14"

21 },

22 "license": "MIT"

23}

scripts/tmeet.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3"use strict";

5// ── Node.js 最低版本检测（必须用 ES5 语法，确保低版本也能解析）────────────

6var nodeMajor = parseInt(process.versions.node.split(".")[0], 10);

7if

dist/tmeet-Linux-x86_64View file

•path = dist/tmeet-Linux-x86_64 kind = native_binary sizeBytes = 7237816 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/tmeet-Linux-x86_64View on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/cleanup.js

High

@tencentcloud/tmeet@1.0.15

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code