Flagged — allowed with a warning
Allowed by default policy, but 13 finding(s) warrant review before installing.
Static Scan Results
scanned 11d ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
SourceChildProcessEnvironmentVarsNetworkWebSocket
Supply chainHighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 10 file(s), 1.62 MB of source, external domains: aomediacodec.github.io, session-api.use2.prod.cloud.urun.sh, session-api.usw2.prod.cloud.urun.sh, www.ietf.org, www.webrtc.org
Source & flagged code
6 flagged · loading source3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var... o};
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-47GHXEPH.mjsView on unpkg · L3 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...a});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var..._")}
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...e});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...)}}}
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 4patternName = generic_password
severity = medium
line = 4
matchedText = `}});var... o};
MediumSecret Pattern
Hardcoded password in dist/chunk-YYZIRCR7.mjs
dist/chunk-YYZIRCR7.mjsView on unpkg · L4 Findings
1 High9 Medium3 Low
HighObfuscated
MediumSecret Patterndist/chunk-47GHXEPH.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/internal.js
MediumSecret Patterndist/index.browser.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/internal.browser.js
MediumSecret Patterndist/chunk-YYZIRCR7.mjs
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Source & flagged code
6 flaggedLines 1-4javascript
1var fn=Object.create;var rs=Object.defineProperty;var mn=Object.getOwnPropertyDescriptor;var gn=Object.getOwnPropertyNames;var _n=Object.getPrototypeOf,vn=Object.prototype.hasOwnProperty;var T=(s,e)=>()=>{try{return e||s((e={exports:{}}).exports,e),e.exports}catch(t){throw e=0,t}};var wn=(s,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of gn(e))!vn.call(s,i)&&i!==t&&rs(s,i,{get:()=>e[i],enumerable:!(r=mn(e,i))||r.enumerable});return s};var ss=(s,e,t)=>(t=s!=null?fn(_n(s)):{},wn(e||!s||!s.__esModule?rs(t,"default",{value:s,enumerable:!0}):t,s));var fs=T(($c,hs)=>{"use strict ...
3`}});var pe=T(ie=>{"use strict";var be=ai(),Ha=ci(),Va=Lt();ie.grammar=Va;ie.write=Ha;ie.parse=be.parse;ie.parseParams=be.parseParams;ie.parseFmtpConfig=be.parseFmtpConfig;ie.parsePayloads=be.parsePayloads;ie.parseRemoteCandidates=be.parseRemoteCandidates;ie.parseImageAttributes=be.parseImageAttributes;ie.parseSimulcastStreamList=be.parseSimulcastStreamList});var Se=T(Tr=>{"use strict";Object.defineProperty(Tr,"__esModule",{value:!0});Tr.parse=Qa;var Ga=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Qa(s){let e=Ga.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-47GHXEPH.mjsView on unpkg · L3 Long lines were clipped for display.
Lines 1-4javascript
1"use strict";var ln=Object.create;var ut=Object.defineProperty;var un=Object.getOwnPropertyDescriptor;var hn=Object.getOwnPropertyNames;var mn=Object.getPrototypeOf,fn=Object.prototype.hasOwnProperty;var C=(s,e)=>()=>{try
Lines 1-4javascript
1"use strict";var No=Object.create;var Jt=Object.defineProperty;var jo=Object.getOwnPropertyDescriptor;var Fo=Object.getOwnPropertyNames;var qo=Object.getPrototypeOf,Uo=Object.prototype.hasOwnProperty;var k=(s,e)=>()=>{
Lines 1-4javascript
1"use strict";var ko=Object.create;var Vt=Object.defineProperty;var Eo=Object.getOwnPropertyDescriptor;var Po=Object.getOwnPropertyNames;var xo=Object.getPrototypeOf,Do=Object.prototype.hasOwnProperty;var C=(s,e)=>()=>{try
Lines 1-4javascript
1"use strict";var bn=Object.create;var vt=Object.defineProperty;var Sn=Object.getOwnPropertyDescriptor;var Cn=Object.getOwnPropertyNames;var Rn=Object.getPrototypeOf,Tn=Object.prototype.hasOwnProperty;var T=(s,e)=>()=>{
Lines 1-5javascript
1import { createRequire as __urunCreateRequire } from 'node:module'; const require = globalThis.require ?? __urunCreateRequire(import.meta.url);
2var nn=Object.create;var Yr=Object.defineProperty;var an=Object.getOwnPropertyDescriptor;var on=Object.getOwnPropertyNames;
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
_n
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
ut
(s,t,{get:e[t],enumerable:
!
0
})},
ns
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
hn
(e))
!
fn.
call
(s,i)
&&
i
!==
t
&&
ut
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
un
(e,i))
||
r.enumerable});
return
s};
var
He
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
ln
(
mn
(s))
:
{},
ns
(e
||!
s
||!
s.__esModule
?
ut
(t,
"d ..
.
3`}});var ce=C(se=>{"use strict";var ve=Ks(),Ia=Js(),La=Ct();se.grammar=La;se.write=Ia;se.parse=ve.parse;se.parseParams=ve.parseParams;se.parseFmtpConfig=ve.parseFmtpConfig;se.parsePayloads=ve.parsePayloads;se.parseRemoteCandidates=ve.parseRemoteCandidates;se.parseImageAttributes=ve.parseImageAttributes;se.parseSimulcastStreamList=ve.parseSimulcastStreamList});var we=C(Cr=>{"use strict";Object.defineProperty(Cr,"__esModule",{value:!0});Cr.parse=Oa;var Ma=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Oa(s){let e=Ma.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
$o
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Jt
(s,t,{get:e[t],enumerable:
!
0
})},
nn
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
Fo
(e))
!
Uo.
call
(s,n)
&&
n
!==
t
&&
Jt
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
jo
(e,n))
||
r.enumerable});
return
s};
var
Wr
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
No
(
qo
(s))
:
{},
nn
(e
||!
s
||!
s.__esModule
?
Jt
(t,
"d ..
.
3`}});var we=k(he=>{"use strict";var Fe=pi(),Ic=li(),Mc=fr();he.grammar=Mc;he.write=Ic;he.parse=Fe.parse;he.parseParams=Fe.parseParams;he.parseFmtpConfig=Fe.parseFmtpConfig;he.parsePayloads=Fe.parsePayloads;he.parseRemoteCandidates=Fe.parseRemoteCandidates;he.parseImageAttributes=Fe.parseImageAttributes;he.parseSimulcastStreamList=Fe.parseSimulcastStreamList});var qe=k(_s=>{"use strict";Object.defineProperty(_s,"__esModule",{value:!0});_s.parse=Ac;var Lc=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Ac(s){let e=Lc.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 Long lines were clipped for display.
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
Io
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Vt
(s,t,{get:e[t],enumerable:
!
0
})},
Js
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
Po
(e))
!
Do.
call
(s,n)
&&
n
!==
t
&&
Vt
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
Eo
(e,n))
||
r.enumerable});
return
s};
var
vt
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
ko
(
xo
(s))
:
{},
Js
(e
||!
s
||!
s.__esModule
?
Vt
(t,
"d ..
.
3`}});var ve=C(pe=>{"use strict";var Oe=Zn(),dc=ti(),pc=cr();pe.grammar=pc;pe.write=dc;pe.parse=Oe.parse;pe.parseParams=Oe.parseParams;pe.parseFmtpConfig=Oe.parseFmtpConfig;pe.parsePayloads=Oe.parsePayloads;pe.parseRemoteCandidates=Oe.parseRemoteCandidates;pe.parseImageAttributes=Oe.parseImageAttributes;pe.parseSimulcastStreamList=Oe.parseSimulcastStreamList});var Ne=C(ps=>{"use strict";Object.defineProperty(ps,"__esModule",{value:!0});ps.parse=lc;var uc=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function lc(s){let e=uc.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
En
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
vt
(s,t,{get:e[t],enumerable:
!
0
})},
us
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
Cn
(e))
!
Tn.
call
(s,i)
&&
i
!==
t
&&
vt
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
Sn
(e,i))
||
r.enumerable});
return
s};
var
pr
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
bn
(
Rn
(s))
:
{},
us
(e
||!
s
||!
s.__esModule
?
vt
(t,
"d ..
.
3`}});var de=T(ie=>{"use strict";var be=ai(),Za=ci(),eo=Mt();ie.grammar=eo;ie.write=Za;ie.parse=be.parse;ie.parseParams=be.parseParams;ie.parseFmtpConfig=be.parseFmtpConfig;ie.parsePayloads=be.parsePayloads;ie.parseRemoteCandidates=be.parseRemoteCandidates;ie.parseImageAttributes=be.parseImageAttributes;ie.parseSimulcastStreamList=be.parseSimulcastStreamList});var Se=T(Mr=>{"use strict";Object.defineProperty(Mr,"__esModule",{value:!0});Mr.parse=ro;var to=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function ro(s){let e=to.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Long lines were clipped for display.
var
cn
=
Object.getPrototypeOf,dn
=
Object
.
prototype
.hasOwnProperty;
var
dt
=
(
s
=>typeof
require<
"u"
?
require
:typeof
Proxy<
"u"
?
new
Proxy
(
s
,{
get
:(e,t)
=>
(
typeof
require<
"u"
?
require
:
e
)[
t
]})
:
s
)(
function
(
s
){
if
(
typeof
require
<
"u"
)return require.
apply
(
this
,
arguments
);
throw
Error
(
'Dynamic require of "'
+
s
+
'" is not supported'
)});
var
C
=(
s
,
e
)
=>
()
=>
{
try
{
return
e
||
s
((
e
=
{exports:{}}).exports,
e
),
e
.
exports
}catch(t){throw e=0,t}};var pn=(s,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")fo ...
4`}});var de=C(se=>{"use strict";var ve=Js(),ka=Zs(),xa=Ct();se.grammar=xa;se.write=ka;se.parse=ve.parse;se.parseParams=ve.parseParams;se.parseFmtpConfig=ve.parseFmtpConfig;se.parsePayloads=ve.parsePayloads;se.parseRemoteCandidates=ve.parseRemoteCandidates;se.parseImageAttributes=ve.parseImageAttributes;se.parseSimulcastStreamList=ve.parseSimulcastStreamList});var we=C(vr=>{"use strict";Object.defineProperty(vr,"__esModule",{value:!0});vr.parse=Da;var Pa=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Da(s){let e=Pa.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/chunk-YYZIRCR7.mjs
dist/chunk-YYZIRCR7.mjsView on unpkg · L4 Long lines were clipped for display.