@urun-sh/core@0.2.37: Suspicious npm security report (Warn) | LPM FirewallFlagged — allowed with a warning
Allowed by default policy, but 13 finding(s) warrant review before installing.
Static Scan Results
scanned 2h ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
SourceChildProcessEnvironmentVarsNetworkWebSocket
Supply chainHighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 10 file(s), 1.86 MB of source, external domains: aomediacodec.github.io, api.urun.sh, session-api.use2.prod.cloud.urun.sh, session-api.usw2.prod.cloud.urun.sh, www.ietf.org, www.webrtc.org
Source & flagged code
6 flagged · loading source8patternName = generic_password
severity = medium
line = 8
matchedText = `}});var... T};
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-TQBKKR7C.mjsView on unpkg · L8 7patternName = generic_password
severity = medium
line = 7
matchedText = `}});var...a});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...0}}}
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var... T};
MediumSecret Pattern
Hardcoded password in dist/chunk-6HLCYJ7O.mjs
dist/chunk-6HLCYJ7O.mjsView on unpkg · L3 7patternName = generic_password
severity = medium
line = 7
matchedText = `}});var...r});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...[]}}
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Findings
1 High9 Medium3 Low
HighObfuscated
MediumSecret Patterndist/chunk-TQBKKR7C.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/internal.js
MediumSecret Patterndist/index.browser.js
MediumSecret Patterndist/chunk-6HLCYJ7O.mjs
MediumSecret Patterndist/index.js
MediumSecret Patterndist/internal.browser.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LPM CLI
Source & flagged code
6 flaggedLines 1-9javascript
1import { createRequire as __urunCreateRequire } from 'node:module'; const require = globalThis.require ?? __urunCreateRequire(import.meta.url);
2var va=Object.create;var Dt=Object.defineProperty;var wa=Object.getOwnPropertyDescriptor;var ya=Object.getOwnPropertyNames;var ba=Object.getPrototypeOf,Sa=Object.prototype.hasOwnProperty;var As=(r=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(r,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):r)(function(r){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+r+'" is not supported')});var Ra=(r,e,t)=>()=>{if(t)throw t[0];try{return r&&(e=r(r=0)),e}catch(s){throw t=[s],s}};var C=(r,e)=>()=>{try{return e||r((e={exports:{}}).exports,e),e.exports}ca ...
4`+i),r.push(n+"m+"+zt.exports.humanize(this.diff)+"\x1B[0m")}else r[0]=yo()+e+" "
5`)}function So(r){r?process.env.DEBUG=r:delete process.env.DEBUG}function Ro(){return process.env.DEBUG}function Co
6`).map(e=>e.trim()).join(" ")};gn.O=function(r){return this.inspectOpts.colors=this.useColors,Ut.inspect(r
8`}});var ge=C(oe=>{"use strict";var Ie=oi(),Fc=di(),qc=tr();oe.grammar=qc;oe.write=Fc;oe.parse=Ie.parse;oe.parseParams=Ie.parseParams;oe.parseFmtpConfig=Ie.parseFmtpConfig;oe.parsePayloads=Ie.parsePayloads;oe.parseRemoteCandidates=Ie.parseRemoteCandidates;oe.parseImageAttributes
Long lines were clipped for display.
Lines 1-8javascript
1"use strict";var go=Object.create;var Et=Object.defineProperty;var _o=Object.getOwnPropertyDescriptor;var vo=Object.getOwnPropertyNames;var wo=Object.getPrototypeOf,yo=Object.prototype.hasOwnProperty;var
Lines 1-4javascript
1"use strict";var ic=Object.create;var yr=Object.defineProperty;var oc=Object.getOwnPropertyDescriptor;var ac=Object.getOwnPropertyNames;var cc=Object.getPrototypeOf,dc=Object.prototype.hasOwnProperty;var
Lines 1-4javascript
1var Zi=Object.create;var Rs=Object.defineProperty;var ea=Object.getOwnPropertyDescriptor;var ta=Object.getOwnPropertyNames;var ra=Object.getPrototypeOf,sa=Object.prototype.hasOwnProperty;var E
Lines 1-8javascript
1"use strict";var Cc=Object.create;var Rr=Object.defineProperty;var kc=Object.getOwnPropertyDescriptor;var Ec=Object.getOwnPropertyNames;var Pc=Object.getPrototypeOf,xc=Object.prototype.hasOwnProperty;var
Lines 1-4javascript
1"use strict";var Qi=Object.create;var St=Object.defineProperty;var Yi=Object.getOwnPropertyDescriptor;var Ji=Object.getOwnPropertyNames;var Xi=Object.getPrototypeOf,Zi=Object.prototype.hasOwnProperty;var
+
r
[
0
]}
function
yo
(){
return
j
.
inspectOpts
.
hideDate
?
""
:
new
Date
().
toISOString
()+
" "
}
function
bo
(
...
r
){
return
process
.
stderr
.
write
(
Ut
.
formatWithOptions
(
j
.
inspectOpts
,...
r
)+
`
(
r
){
r
.
inspectOpts
=
{};
let
e
=
Object.
keys
(j.inspectOpts);
for
(
let
t
=
0
;
t
<e.length;
t
++)r.inspectOpts[e[t]]=j.inspectOpts[e[t]]}
zt
.
exports
=
Ir
()(
j
);
var
{
formatters
:
gn
}=
zt
.
exports
;
gn
.
o
=
function
(
r
){
return
this
.
inspectOpts
.
colors
=
this
.useColors,
Ut
.
inspect
(
r
,this.inspectOpts).
split
(
`
,this.inspectOpts)}});
var
dt
=
C
((
nl
,
Or
)
=>
{
"use strict"
;
typeof
process>
"u"
||
process
.
type
===
"renderer"
||
process
.
browser
===
!
0
||
process
.
__nwjs
?
Or
.
exports
=
un
():Or.exports
=
_n
()});
var
wn
=
C
(
vn
=>
{
"use strict"
;Object.defineProperty(vn,
"__esModule"
,{
value
:
!
0
})});
var
U
=
C
(
Bt
=>
{
"use strict"
;Object.defineProperty(Bt,
"__esModule"
,{
value
:
!
0
});Bt.Logger
=void
0
;var $e
=
dt
(),Ue
=
"media-client"
,Ar
=class
{
_debug
;
_warn
;
_error
;
constructor
(
e
){e
?
(
this
._debug
=
(
0
,$e.default)(
`${
Ue
}:${
e
}`
),
this
._warn
=
(
0
,$e.default)(
`${
Ue
} ...
=
Ie.parseImageAttributes;oe.parseSimulcastStreamList
=
Ie.parseSimulcastStreamList});var Le
=
C
(
ss
=>
{
"use strict"
;Object.
defineProperty
(ss,
"__esModule"
,{value:
!
0
});ss.parse
=
Uc;
var
$c
=new
RegExp
(
"^[LS]([1-9]
\\
d{0,1})T([1-9]
\\
d{0,1})"
);
function
Uc
(
r
){
let
e
=
$c.
exec
(r
??
""
);
return
e
?
{spatialLayers:
Number
(e[
1
]),temporalLayers:Num
...
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-TQBKKR7C.mjsView on unpkg · L8
bo
=
(
s
,
e
,
t
)
=>
()
=>
{
if
(t)
throw
t[
0
];
try
{
return
s
&&
(e
=
s
(s
=
0
)),e}
catch
(r){
throw
t
=
[r],r}};
var
C
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
As
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Et
(s,t,{get:e[t],enumerable:
!
0
})},
Ns
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
vo
(e))
!
yo.
call
(s,n)
&&
n
!==
t
&&
Et
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
_o
(e,n))
||
r.enume
...
3`+i),s.push(n+"m+"+Lt.exports.humanize(this.diff)+"\x1B[0m")}else s[0]=zo()+e+" "+s[0]}function zo(){return j.inspectOpts.hideDate?"":new Date().toISOString()+" "}function Bo(...s){return process.stderr.write(It.formatWithOptions(j.inspectOpts,...s)+`
4`)}function Wo(s){s?process.env.DEBUG=s:delete process.env.DEBUG}function Ho(){return process.env.DEBUG}function Vo(s){s.inspectOpts={};let e=Object.keys(j.inspectOpts);for(let t=0;t<e.length;t++)s.inspectOpts[e[t]]=j.inspectOpts[e[t]]}Lt.exports=kr()(j);var{formatters:Hs}=Lt.exports;Hs.o=function(s){return this.inspectOpts.colors=this.useColors,It.inspect(s,this.inspectOpts).split(`
5`).map(e=>e.trim()).join(" ")};Hs.O=function(s){return this.inspectOpts.colors=this.useColors,It.inspect(s,this.inspectOpts)}});var it=C((Dp,Dr)=>{"use strict";typeof process>"u"||process.type==="renderer"||process.browser===!0||process.__nwjs?Dr.exports=Us():Dr.exports=Vs()});var Ks=C(Gs=>{"use strict";Object.defineProperty(Gs,"__esModule",{value:!0})});var U=C(Mt=>{"use strict";Object.defineProperty(Mt,"__esModule",{value:!0});Mt.Logger=void 0;var Ae=it(),Ne="media-client",Ir=class{_debug;_warn;_error;constructor(e){e?(this._debug=(0,Ae.default)(`${Ne}:${e}`),this._warn=(0,Ae.default)(`${Ne} ...
7`}});var ue=C(ae=>{"use strict";var ke=jn(),oc=qn(),ac=Ht();ae.grammar=ac;ae.write=oc;ae.parse=ke.parse;ae.parseParams=ke.parseParams;ae.parseFmtpConfig=ke.parseFmtpConfig;ae.parsePayloads=ke.parsePayloads;ae.parseRemoteCandidates=ke.parseRemoteCandidates;ae.parseImageAttributes=ke.parseImageAttributes;ae.parseSimulcastStreamList=ke.parseSimulcastStreamList});var Pe=C(Zr=>{"use strict";Object.defineProperty(Zr,"__esModule",{value:!0});Zr.parse=dc;var cc=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function dc(s){let e=cc.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
P
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
lc
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
yr
(s,t,{get:e[t],enumerable:
!
0
})},
si
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
ac
(e))
!
dc.
call
(s,n)
&&
n
!==
t
&&
yr
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
oc
(e,n))
||
r.enumerable});
return
s};
var
Es
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
ic
(
cc
(s))
:
{},
si
(e
||!
s
||!
s.__esModule
?
yr
(t,
"d ..
.
3`}});var Te=P(me=>{"use strict";var ze=vo(),cl=yo(),dl=Hr();me.grammar=dl;me.write=cl;me.parse=ze.parse;me.parseParams=ze.parseParams;me.parseFmtpConfig=ze.parseFmtpConfig;me.parsePayloads=ze.parsePayloads;me.parseRemoteCandidates=ze.parseRemoteCandidates;me.parseImageAttributes=ze.parseImageAttributes;me.parseSimulcastStreamList=ze.parseSimulcastStreamList});var He=P(nn=>{"use strict";Object.defineProperty(nn,"__esModule",{value:!0});nn.parse=ul;var ll=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function ul(s){let e=ll.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 Long lines were clipped for display.
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}};
var
na
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
ta
(e))
!
sa.
call
(s,n)
&&
n
!==
t
&&
Rs
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
ea
(e,n))
||
r.enumerable});
return
s};
var
Cs
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
Zi
(
ra
(s))
:
{},
na
(e
||!
s
||!
s.__esModule
?
Rs
(t,
"default"
,{value:s,enumerable:
!
0
})
:
t,s));
var
Qs
=
E
((
mp
,
Ks
)
=>
{
"use strict ..
.
3`}});var he=E(ne=>{"use strict";var Pe=zn(),ec=Wn(),tc=Gt();ne.grammar=tc;ne.write=ec;ne.parse=Pe.parse;ne.parseParams=Pe.parseParams;ne.parseFmtpConfig=Pe.parseFmtpConfig;ne.parsePayloads=Pe.parsePayloads;ne.parseRemoteCandidates=Pe.parseRemoteCandidates;ne.parseImageAttributes=Pe.parseImageAttributes;ne.parseSimulcastStreamList=Pe.parseSimulcastStreamList});var xe=E(Hr=>{"use strict";Object.defineProperty(Hr,"__esModule",{value:!0});Hr.parse=sc;var rc=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function sc(s){let e=rc.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/chunk-6HLCYJ7O.mjs
dist/chunk-6HLCYJ7O.mjsView on unpkg · L3 Long lines were clipped for display.
Ic
=
(
s
,
e
,
t
)
=>
()
=>
{
if
(t)
throw
t[
0
];
try
{
return
s
&&
(e
=
s
(s
=
0
)),e}
catch
(r){
throw
t
=
[r],r}};
var
k
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
mi
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Rr
(s,t,{get:e[t],enumerable:
!
0
})},
gi
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
Ec
(e))
!
xc.
call
(s,n)
&&
n
!==
t
&&
Rr
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
kc
(e,n))
||
r.enume
...
3`+i),s.push(n+"m+"+qr.exports.humanize(this.diff)+"\x1B[0m")}else s[0]=Sd()+e+" "+s[0]}function Sd(){return j.inspectOpts.hideDate?"":new Date().toISOString()+" "}function Td(...s){return process.stderr.write(Ur.formatWithOptions(j.inspectOpts,...s)+`
4`)}function Rd(s){s?process.env.DEBUG=s:delete process.env.DEBUG}function Cd(){return process.env.DEBUG}function kd(s){s.inspectOpts={};let e=Object.keys(j.inspectOpts);for(let t=0;t<e.length;t++)s.inspectOpts[e[t]]=j.inspectOpts[e[t]]}qr.exports=zs()(j);var{formatters:Hi}=qr.exports;Hi.o=function(s){return this.inspectOpts.colors=this.useColors,Ur.inspect(s,this.inspectOpts).split(`
5`).map(e=>e.trim()).join(" ")};Hi.O=function(s){return this.inspectOpts.colors=this.useColors,Ur.inspect(s,this.inspectOpts)}});var er=k((Ch,Ks)=>{"use strict";typeof process>"u"||process.type==="renderer"||process.browser===!0||process.__nwjs?Ks.exports=$i():Ks.exports=Vi()});var Gi=k(Ki=>{"use strict";Object.defineProperty(Ki,"__esModule",{value:!0})});var H=k($r=>{"use strict";Object.defineProperty($r,"__esModule",{value:!0});$r.Logger=void 0;var ht=er(),ft="media-client",Gs=class{_debug;_warn;_error;constructor(e){e?(this._debug=(0,ht.default)(`${ft}:${e}`),this._warn=(0,ht.default)(`${ft} ...
7`}});var ke=k(ve=>{"use strict";var Ge=Fo(),ql=Uo(),$l=Zr();ve.grammar=$l;ve.write=ql;ve.parse=Ge.parse;ve.parseParams=Ge.parseParams;ve.parseFmtpConfig=Ge.parseFmtpConfig;ve.parsePayloads=Ge.parsePayloads;ve.parseRemoteCandidates=Ge.parseRemoteCandidates;ve.parseImageAttributes=Ge.parseImageAttributes;ve.parseSimulcastStreamList=Ge.parseSimulcastStreamList});var Ye=k(_n=>{"use strict";Object.defineProperty(_n,"__esModule",{value:!0});_n.parse=Bl;var Wl=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Bl(s){let e=Wl.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
E
=
(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
ea
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
St
(s,t,{get:e[t],enumerable:
!
0
})},
Rs
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
Ji
(e))
!
Zi.
call
(s,n)
&&
n
!==
t
&&
St
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
Yi
(e,n))
||
r.enumerable});
return
s};
var
vr
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
Qi
(
Xi
(s))
:
{},
Rs
(e
||!
s
||!
s.__esModule
?
St
(t,
"d ..
.
3`}});var de=E(ne=>{"use strict";var Re=vn(),Po=yn(),xo=jt();ne.grammar=xo;ne.write=Po;ne.parse=Re.parse;ne.parseParams=Re.parseParams;ne.parseFmtpConfig=Re.parseFmtpConfig;ne.parsePayloads=Re.parsePayloads;ne.parseRemoteCandidates=Re.parseRemoteCandidates;ne.parseImageAttributes=Re.parseImageAttributes;ne.parseSimulcastStreamList=Re.parseSimulcastStreamList});var Ce=E(Ur=>{"use strict";Object.defineProperty(Ur,"__esModule",{value:!0});Ur.parse=Io;var Do=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Io(s){let e=Do.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Long lines were clipped for display.