Flagged — allowed with a warning
Allowed by default policy, but 13 finding(s) warrant review before installing.
Static Scan Results
scanned 3d ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
SourceChildProcessEnvironmentVarsNetworkWebSocket
Supply chainHighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 10 file(s), 1.80 MB of source, external domains: aomediacodec.github.io, api.urun.sh, session-api.use2.prod.cloud.urun.sh, session-api.usw2.prod.cloud.urun.sh, www.ietf.org, www.webrtc.org
Source & flagged code
6 flagged · loading source8patternName = generic_password
severity = medium
line = 8
matchedText = `}});var... H};
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-U7DZ4QVH.mjsView on unpkg · L8 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var... H};
MediumSecret Pattern
Hardcoded password in dist/chunk-3OLMNSI3.mjs
dist/chunk-3OLMNSI3.mjsView on unpkg · L3 7patternName = generic_password
severity = medium
line = 7
matchedText = `}});var...a});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...0}}}
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 7patternName = generic_password
severity = medium
line = 7
matchedText = `}});var...r});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...)}}}
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Findings
1 High9 Medium3 Low
HighObfuscated
MediumSecret Patterndist/chunk-U7DZ4QVH.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/chunk-3OLMNSI3.mjs
MediumSecret Patterndist/internal.js
MediumSecret Patterndist/index.browser.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/internal.browser.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Source & flagged code
6 flaggedLines 1-9javascript
1import { createRequire as __urunCreateRequire } from 'node:module'; const require = globalThis.require ?? __urunCreateRequire(import.meta.url);
2var Gn=Object.create;var St=Object.defineProperty;var Kn=Object.getOwnPropertyDescriptor;var Qn=Object.getOwnPropertyNames;var Yn=Object.getPrototypeOf,Jn=Object.prototype.hasOwnProperty;var ws=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function(s){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+s+'" is not supported')});var Xn=(s,e,t)=>()=>{if(t)throw t[0];try{return s&&(e=s(s=0)),e}catch(r){throw t=[r],r}};var R=(s,e)=>()=>{try{return e||s((e={exports:{}}).exports,e),e.exports}ca ...
4`+n),s.push(i+"m+"+Mt.exports.humanize(this.diff)+"\x1B[0m")}else s[0]=ka()+e+" "+s[0]}function ka(){return j.inspectOpts.hideDate
5`)}function Pa(s){s?process.env.DEBUG=s:delete process.env.DEBUG}function Da(){return process.env.DEBUG}function Ia(s){s.inspectOpts={};let e=Object.keys(j.inspectOpts);for
6`).map(e=>e.trim()).join(" ")};Ks.O=function(s){return this.inspectOpts.colors=this.useColors,It.inspect(s,this.inspectOpts)}});var rt=R((Zd,wr)=>{"use strict";typeof
8`}});var he=R(oe=>{"use strict";var Te=qi(),Vo=zi(),Go=Ht();oe.grammar=Go;oe.write=Vo;oe.parse=Te.parse;oe.parseParams=Te.parseParams;oe.parseFmtpConfig=Te.parseFmtpConfig;oe.parsePayloads=Te.parsePayloads;oe.parseRemoteCandidates=Te.parseRemoteCandidates;oe.parseImageAttributes=Te.parseImageAttributes;oe.parseSimulcastStreamList=Te.parseSimulcastStreamList});var Ee=R(Ur=>{"use strict";Object.defineProperty
Long lines were clipped for display.
Lines 1-4javascript
1var xn=Object.create;var os=Object.defineProperty;var Pn=Object.getOwnPropertyDescriptor;var Dn=Object.getOwnPropertyNames;var In=Object.getPrototypeOf,Ln=Object.prototype.hasOwnProperty;var T=(s,e)=>()=>{try{
Lines 1-8javascript
1"use strict";var Vn=Object.create;var Ct=Object.defineProperty;var Gn=Object.getOwnPropertyDescriptor;var Kn=Object.getOwnPropertyNames;var Yn=Object.getPrototypeOf,Qn=Object.prototype.hasOwnProperty;var Jn=(s,e,t)=>()=>
Lines 1-4javascript
1"use strict";var Oa=Object.create;var wr=Object.defineProperty;var Na=Object.getOwnPropertyDescriptor;var Fa=Object.getOwnPropertyNames;var ja=Object.getPrototypeOf,qa=Object.prototype.hasOwnProperty;var k=(s,e)=>()=>{
Lines 1-8javascript
1"use strict";var tc=Object.create;var Rr=Object.defineProperty;var rc=Object.getOwnPropertyDescriptor;var sc=Object.getOwnPropertyNames;var nc=Object.getPrototypeOf,ic=Object.prototype.hasOwnProperty;var oc=(s,e,t)=>()=>
Lines 1-4javascript
1"use strict";var En=Object.create;var wt=Object.defineProperty;var kn=Object.getOwnPropertyDescriptor;var xn=Object.getOwnPropertyNames;var Pn=Object.getPrototypeOf,Dn=Object.prototype.hasOwnProperty;var T=(s,e)=>()=>{
?
""
:
new
Date
().
toISOString
()+
" "
}
function
xa
(
...
s
){
return
process
.
stderr
.
write
(
It
.
formatWithOptions
(
j
.
inspectOpts
,...
s
)+
`
(
let
t
=
0
;
t
<e.length;
t
++)s.inspectOpts[e[t]]=j.inspectOpts[e[t]]}
Mt
.
exports
=
gr
()(
j
);
var
{
formatters
:
Ks
}=
Mt
.
exports
;
Ks
.
o
=
function
(
s
){
return
this
.
inspectOpts
.
colors
=
this
.useColors,
It
.
inspect
(
s
,this.inspectOpts).
split
(
`
process>
"u"
||
process
.
type
===
"renderer"
||
process
.
browser
===
!
0
||
process
.
__nwjs
?
wr
.
exports
=
Ws
():wr.exports
=
Qs
()});
var
Js
=
R
(
Ys
=>
{
"use strict"
;Object.defineProperty(Ys,
"__esModule"
,{
value
:
!
0
})});
var
z
=
R
(
Lt
=>
{
"use strict"
;Object.defineProperty(Lt,
"__esModule"
,{
value
:
!
0
});Lt.Logger
=void
0
;var Oe
=
rt
(),Ae
=
"media-client"
,yr
=class
{
_debug
;
_warn
;
_error
;
constructor
(
e
){e
?
(
this
._debug
=
(
0
,Oe.default)(
`${
Ae
}:${
e
}`
),
this
._warn
=
(
0
,Oe.default)(
`${
Ae
} ...
(Ur,
"__esModule"
,{value:
!
0
});Ur.parse
=
Qo;
var
Ko
=new
RegExp
(
"^[LS]([1-9]
\\
d{0,1})T([1-9]
\\
d{0,1})"
);
function
Qo
(
s
){
let
e
=
Ko.
exec
(s
??
""
);
return
e
?
{spatialLayers:
Number
(e[
1
]),temporalLayers:Num
...
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-U7DZ4QVH.mjsView on unpkg · L8 return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}};
var
Mn
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
Dn
(e))
!
Ln.
call
(s,i)
&&
i
!==
t
&&
os
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
Pn
(e,i))
||
r.enumerable});
return
s};
var
cs
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
xn
(
In
(s))
:
{},
Mn
(e
||!
s
||!
s.__esModule
?
os
(t,
"default"
,{value:s,enumerable:
!
0
})
:
t,s));
var
xs
=
T
((
pd
,
ks
)
=>
{
"use strict ..
.
3`}});var pe=T(ie=>{"use strict";var Se=yi(),oo=Si(),co=jt();ie.grammar=co;ie.write=oo;ie.parse=Se.parse;ie.parseParams=Se.parseParams;ie.parseFmtpConfig=Se.parseFmtpConfig;ie.parsePayloads=Se.parsePayloads;ie.parseRemoteCandidates=Se.parseRemoteCandidates;ie.parseImageAttributes=Se.parseImageAttributes;ie.parseSimulcastStreamList=Se.parseSimulcastStreamList});var Re=T(Dr=>{"use strict";Object.defineProperty(Dr,"__esModule",{value:!0});Dr.parse=lo;var po=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function lo(s){let e=po.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/chunk-3OLMNSI3.mjs
dist/chunk-3OLMNSI3.mjsView on unpkg · L3 Long lines were clipped for display.
{
if
(t)
throw
t[
0
];
try
{
return
s
&&
(e
=
s
(s
=
0
)),e}
catch
(r){
throw
t
=
[r],r}};
var
C
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
xs
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Ct
(s,t,{get:e[t],enumerable:
!
0
})},
Ps
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
Kn
(e))
!
Qn.
call
(s,i)
&&
i
!==
t
&&
Ct
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
Gn
(e,i))
||
r.enume
...
3`+n),s.push(i+"m+"+Pt.exports.humanize(this.diff)+"\x1B[0m")}else s[0]=va()+e+" "+s[0]}function va(){return j.inspectOpts.hideDate?"":new Date().toISOString()+" "}function wa(...s){return process.stderr.write(xt.formatWithOptions(j.inspectOpts,...s)+`
4`)}function ya(s){s?process.env.DEBUG=s:delete process.env.DEBUG}function ba(){return process.env.DEBUG}function Sa(s){s.inspectOpts={};let e=Object.keys(j.inspectOpts);for(let t=0;t<e.length;t++)s.inspectOpts[e[t]]=j.inspectOpts[e[t]]}Pt.exports=Sr()(j);var{formatters:Fs}=Pt.exports;Fs.o=function(s){return this.inspectOpts.colors=this.useColors,xt.inspect(s,this.inspectOpts).split(`
5`).map(e=>e.trim()).join(" ")};Fs.O=function(s){return this.inspectOpts.colors=this.useColors,xt.inspect(s,this.inspectOpts)}});var st=C((Ld,Tr)=>{"use strict";typeof process>"u"||process.type==="renderer"||process.browser===!0||process.__nwjs?Tr.exports=Os():Tr.exports=qs()});var zs=C($s=>{"use strict";Object.defineProperty($s,"__esModule",{value:!0})});var z=C(Dt=>{"use strict";Object.defineProperty(Dt,"__esModule",{value:!0});Dt.Logger=void 0;var Le=st(),Oe="media-client",Er=class{_debug;_warn;_error;constructor(e){e?(this._debug=(0,Le.default)(`${Oe}:${e}`),this._warn=(0,Le.default)(`${Oe} ...
7`}});var ue=C(oe=>{"use strict";var Te=Pi(),jo=Ii(),Fo=Ut();oe.grammar=Fo;oe.write=jo;oe.parse=Te.parse;oe.parseParams=Te.parseParams;oe.parseFmtpConfig=Te.parseFmtpConfig;oe.parsePayloads=Te.parsePayloads;oe.parseRemoteCandidates=Te.parseRemoteCandidates;oe.parseImageAttributes=Te.parseImageAttributes;oe.parseSimulcastStreamList=Te.parseSimulcastStreamList});var Ee=C(Kr=>{"use strict";Object.defineProperty(Kr,"__esModule",{value:!0});Kr.parse=$o;var qo=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function $o(s){let e=qo.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
Ua
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
wr
(s,t,{get:e[t],enumerable:
!
0
})},
Bn
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
Fa
(e))
!
qa.
call
(s,n)
&&
n
!==
t
&&
wr
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
Na
(e,n))
||
r.enumerable});
return
s};
var
ys
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
Oa
(
ja
(s))
:
{},
Bn
(e
||!
s
||!
s.__esModule
?
wr
(t,
"d ..
.
3`}});var be=k(fe=>{"use strict";var We=eo(),Ld=ro(),Od=Ur();fe.grammar=Od;fe.write=Ld;fe.parse=We.parse;fe.parseParams=We.parseParams;fe.parseFmtpConfig=We.parseFmtpConfig;fe.parsePayloads=We.parsePayloads;fe.parseRemoteCandidates=We.parseRemoteCandidates;fe.parseImageAttributes=We.parseImageAttributes;fe.parseSimulcastStreamList=We.parseSimulcastStreamList});var Be=k(Ys=>{"use strict";Object.defineProperty(Ys,"__esModule",{value:!0});Ys.parse=Fd;var Nd=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Fd(s){let e=Nd.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 Long lines were clipped for display.
{
if
(t)
throw
t[
0
];
try
{
return
s
&&
(e
=
s
(s
=
0
)),e}
catch
(r){
throw
t
=
[r],r}};
var
T
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
ti
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Rr
(s,t,{get:e[t],enumerable:
!
0
})},
ri
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
sc
(e))
!
ic.
call
(s,n)
&&
n
!==
t
&&
Rr
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
rc
(e,n))
||
r.enume
...
3`+i),s.push(n+"m+"+Or.exports.humanize(this.diff)+"\x1B[0m")}else s[0]=Kc()+e+" "+s[0]}function Kc(){return j.inspectOpts.hideDate?"":new Date().toISOString()+" "}function Yc(...s){return process.stderr.write(Lr.formatWithOptions(j.inspectOpts,...s)+`
4`)}function Qc(s){s?process.env.DEBUG=s:delete process.env.DEBUG}function Jc(){return process.env.DEBUG}function Xc(s){s.inspectOpts={};let e=Object.keys(j.inspectOpts);for(let t=0;t<e.length;t++)s.inspectOpts[e[t]]=j.inspectOpts[e[t]]}Or.exports=Os()(j);var{formatters:Pi}=Or.exports;Pi.o=function(s){return this.inspectOpts.colors=this.useColors,Lr.inspect(s,this.inspectOpts).split(`
5`).map(e=>e.trim()).join(" ")};Pi.O=function(s){return this.inspectOpts.colors=this.useColors,Lr.inspect(s,this.inspectOpts)}});var er=T((zp,js)=>{"use strict";typeof process>"u"||process.type==="renderer"||process.browser===!0||process.__nwjs?js.exports=Ti():js.exports=xi()});var Di=T(Ii=>{"use strict";Object.defineProperty(Ii,"__esModule",{value:!0})});var B=T(Nr=>{"use strict";Object.defineProperty(Nr,"__esModule",{value:!0});Nr.Logger=void 0;var lt=er(),pt="media-client",qs=class{_debug;_warn;_error;constructor(e){e?(this._debug=(0,lt.default)(`${pt}:${e}`),this._warn=(0,lt.default)(`${pt} ...
7`}});var Te=T(_e=>{"use strict";var Ve=yo(),pu=So(),hu=Kr();_e.grammar=hu;_e.write=pu;_e.parse=Ve.parse;_e.parseParams=Ve.parseParams;_e.parseFmtpConfig=Ve.parseFmtpConfig;_e.parsePayloads=Ve.parsePayloads;_e.parseRemoteCandidates=Ve.parseRemoteCandidates;_e.parseImageAttributes=Ve.parseImageAttributes;_e.parseSimulcastStreamList=Ve.parseSimulcastStreamList});var Ge=T(cn=>{"use strict";Object.defineProperty(cn,"__esModule",{value:!0});cn.parse=mu;var fu=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function mu(s){let e=fu.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
In
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
wt
(s,t,{get:e[t],enumerable:
!
0
})},
gs
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
xn
(e))
!
Dn.
call
(s,i)
&&
i
!==
t
&&
wt
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
kn
(e,i))
||
r.enumerable});
return
s};
var
hr
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
En
(
Pn
(s))
:
{},
gs
(e
||!
s
||!
s.__esModule
?
wt
(t,
"d ..
.
3`}});var de=T(ie=>{"use strict";var be=pi(),io=ui(),no=Ot();ie.grammar=no;ie.write=io;ie.parse=be.parse;ie.parseParams=be.parseParams;ie.parseFmtpConfig=be.parseFmtpConfig;ie.parsePayloads=be.parsePayloads;ie.parseRemoteCandidates=be.parseRemoteCandidates;ie.parseImageAttributes=be.parseImageAttributes;ie.parseSimulcastStreamList=be.parseSimulcastStreamList});var Se=T(Nr=>{"use strict";Object.defineProperty(Nr,"__esModule",{value:!0});Nr.parse=oo;var ao=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function oo(s){let e=ao.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Long lines were clipped for display.