registry / @ttsc/win32-x64 / 0.16.11

@ttsc/win32-x64@0.16.11

Windows x64 native ttsc/ttscserver/ttscgraph binaries and bundled Go compiler for ttsc.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEval

Supply chain

HighEntropyStringsMinifiedTrivialUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 116 KB of source, external domains: goo.gl, www.w3.org

Source & flagged code

7 flagged

bin/go/src/crypto/x509/platform_root_key.pemView file

Lines 1-6text

1-----BEGIN EC PRIVATE KEY-----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

bin/go/src/crypto/x509/platform_root_key.pemView on unpkg · L1

Critical

Secret Pattern

EC private key in bin/go/src/crypto/x509/platform_root_key.pem

bin/go/src/crypto/x509/platform_root_key.pemView on unpkg · L1

2MHcCAQEEIHhv8LVzb9gqJzAY0P442+FW0oqbfBrLnfqxyyAujOFSoAoGCCqGSM49

3AwEHoUQDQgAE5dNQY4FY29i2g3xx7FyH4XiZz0C0AM4uyPUsXCZNb7CsctHDLhLt

4zABWSfFz76j+oVhq+qKrwIHsLX+7f6YTQg==

5-----END EC PRIVATE KEY-----

bin/go/src/internal/trace/traceviewer/static/webcomponents.min.jsView file

Lines 1-14javascript

1/**

2 * @license

4 * This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt

5 * The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt

6 * The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt

7 * Code distributed by Google as part of the polymer project is also

8 * subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt

9 */

10// @version 0.7.24

bin/ttscgraph.exeView file

•path = bin/ttscgraph.exe kind = native_binary sizeBytes = 19530240 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/ttscgraph.exeView on unpkg

bin/go/lib/time/update.bashView file

•path = bin/go/lib/time/update.bash kind = build_helper sizeBytes = 2201 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/go/lib/time/update.bashView on unpkg

bin/go/lib/time/zoneinfo.zipView file

•path = bin/go/lib/time/zoneinfo.zip kind = compressed_blob sizeBytes = 408125 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

bin/go/lib/time/zoneinfo.zipView on unpkg

•path = bin/go/lib/time/zoneinfo.zip kind = nested_archive_needs_inspection sizeBytes = 408125 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

bin/go/lib/time/zoneinfo.zipView on unpkg

Source & flagged code

7 flagged · loading source

bin/go/src/crypto/x509/platform_root_key.pemView file

1patternName = private_key_ec severity = critical line = 1 matchedText = -----BEG...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

bin/go/src/crypto/x509/platform_root_key.pemView on unpkg · L1

1patternName = private_key_ec severity = critical line = 1 matchedText = -----BEG...----

Critical

Secret Pattern

EC private key in bin/go/src/crypto/x509/platform_root_key.pem

bin/go/src/crypto/x509/platform_root_key.pemView on unpkg · L1

bin/go/src/internal/trace/traceviewer/static/webcomponents.min.jsView file

10// @version 0.7.24 L11: !function(){window.WebComponents=window.WebComponents||{flags:{}};var e="webcomponents.js",t=document.querySelector('script[src*="'+e+'"]'),n={};if(!n.noOpts){if(location.search.sl... L12: querySelector:function(t){var r=n(t),i=r!==t;t=r;var a,s=g(this),c=v(this).root;if(c instanceof e.wrappers.ShadowRoot)return o(this,t);if(s instanceof N)a=b(E.call(s,t));else{if(!(...

Low

Eval

Package source references a known benign dynamic code generation pattern.

bin/go/src/internal/trace/traceviewer/static/webcomponents.min.jsView on unpkg · L10

bin/ttscgraph.exeView file

•path = bin/ttscgraph.exe kind = native_binary sizeBytes = 19530240 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/ttscgraph.exeView on unpkg

bin/go/lib/time/update.bashView file

•path = bin/go/lib/time/update.bash kind = build_helper sizeBytes = 2201 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/go/lib/time/update.bashView on unpkg

bin/go/lib/time/zoneinfo.zipView file

•path = bin/go/lib/time/zoneinfo.zip kind = compressed_blob sizeBytes = 408125 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

bin/go/lib/time/zoneinfo.zipView on unpkg

•path = bin/go/lib/time/zoneinfo.zip kind = nested_archive_needs_inspection sizeBytes = 408125 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

bin/go/lib/time/zoneinfo.zipView on unpkg

Findings

2 Critical4 Medium5 Low

CriticalCritical Secretbin/go/src/crypto/x509/platform_root_key.pem

CriticalSecret Patternbin/go/src/crypto/x509/platform_root_key.pem

MediumShips Native Binarybin/ttscgraph.exe

MediumShips Build Helperbin/go/lib/time/update.bash

MediumShips Compressed Blobbin/go/lib/time/zoneinfo.zip

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvalbin/go/src/internal/trace/traceviewer/static/webcomponents.min.js

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionbin/go/lib/time/zoneinfo.zip

Source & flagged code

7 flagged

bin/go/src/crypto/x509/platform_root_key.pemView file

Lines 1-6text

1-----BEGIN EC PRIVATE KEY-----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

bin/go/src/crypto/x509/platform_root_key.pemView on unpkg · L1

Critical

Secret Pattern

EC private key in bin/go/src/crypto/x509/platform_root_key.pem

bin/go/src/crypto/x509/platform_root_key.pemView on unpkg · L1

2MHcCAQEEIHhv8LVzb9gqJzAY0P442+FW0oqbfBrLnfqxyyAujOFSoAoGCCqGSM49

3AwEHoUQDQgAE5dNQY4FY29i2g3xx7FyH4XiZz0C0AM4uyPUsXCZNb7CsctHDLhLt

4zABWSfFz76j+oVhq+qKrwIHsLX+7f6YTQg==

5-----END EC PRIVATE KEY-----

bin/go/src/internal/trace/traceviewer/static/webcomponents.min.jsView file

Lines 1-14javascript

1/**

2 * @license

4 * This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt

5 * The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt

6 * The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt

7 * Code distributed by Google as part of the polymer project is also

8 * subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt

9 */

10// @version 0.7.24

bin/ttscgraph.exeView file

•path = bin/ttscgraph.exe kind = native_binary sizeBytes = 19530240 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/ttscgraph.exeView on unpkg

bin/go/lib/time/update.bashView file

•path = bin/go/lib/time/update.bash kind = build_helper sizeBytes = 2201 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/go/lib/time/update.bashView on unpkg

bin/go/lib/time/zoneinfo.zipView file

•path = bin/go/lib/time/zoneinfo.zip kind = compressed_blob sizeBytes = 408125 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

bin/go/lib/time/zoneinfo.zipView on unpkg

•path = bin/go/lib/time/zoneinfo.zip kind = nested_archive_needs_inspection sizeBytes = 408125 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

bin/go/lib/time/zoneinfo.zipView on unpkg