Flagged — allowed with a warning
Allowed by default policy, but 13 finding(s) warrant review before installing.
Static Scan Results
scanned 11d ago · by rust-scannerStatic analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
SourceChildProcessEnvironmentVarsNetworkWebSocket
Supply chainHighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 10 file(s), 1.64 MB of source, external domains: aomediacodec.github.io, session-api.use2.prod.cloud.urun.sh, session-api.usw2.prod.cloud.urun.sh, www.ietf.org, www.webrtc.org
Source & flagged code
6 flagged · loading source4patternName = generic_password
severity = medium
line = 4
matchedText = `}});var... D};
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-C2B5BLQW.mjsView on unpkg · L4 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var... D};
MediumSecret Pattern
Hardcoded password in dist/chunk-MDOFFR4J.mjs
dist/chunk-MDOFFR4J.mjsView on unpkg · L3 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...a});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var..._")}
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...e});
3patternName = generic_password
severity = medium
line = 3
matchedText = `}});var...)}}}
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Findings
1 High9 Medium3 Low
HighObfuscated
MediumSecret Patterndist/chunk-C2B5BLQW.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/chunk-MDOFFR4J.mjs
MediumSecret Patterndist/internal.js
MediumSecret Patterndist/index.browser.js
MediumSecret Patterndist/index.js
MediumSecret Patterndist/internal.browser.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Source & flagged code
6 flaggedLines 1-5javascript
1import { createRequire as __urunCreateRequire } from 'node:module'; const require = globalThis.require ?? __urunCreateRequire(import.meta.url);
2var mn=Object.create;var Xr=Object.defineProperty;var fn=Object.getOwnPropertyDescriptor;var gn=Object.getOwnPropertyNames;var _n=Object.getPrototypeOf,vn=Object.prototype.hasOwnProperty;var lt=(s=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(s,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):s)(function(s){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+s+'" is not supported')});var C=(s,e)=>()=>{try{return e||s((e={exports:{}}).exports,e),e.exports}catch(t){throw e=0,t}};var wn=(s,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")fo ...
4`}});var de=C(se=>{"use strict";var we=ai(),Fa=ci(),qa=kt();se.grammar=qa;se.write=Fa;se.parse=we.parse;se.parseParams=we.parseParams;se.parseFmtpConfig=we.parseFmtpConfig;se.parsePayloads=we.parsePayloads;se.parseRemoteCandidates=we.parseRemoteCandidates;se.parseImageAttributes=we.parseImageAttributes;se.parseSimulcastStreamList=we.parseSimulcastStreamList});var ye=C(yr=>{"use strict";Object.defineProperty(yr,"__esModule",{value:!0});yr.parse=za;var $a=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function za(s){let e=$a.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Package contains a possible secret pattern.
dist/chunk-C2B5BLQW.mjsView on unpkg · L4 Long lines were clipped for display.
Lines 1-4javascript
1var Rn=Object.create;var is=Object.defineProperty;var Cn=Object.getOwnPropertyDescriptor;var Tn=Object.getOwnPropertyNames;var En=Object.getPrototypeOf,kn=Object.prototype.hasOwnProperty;var T=(s,e)=>()=>{try{
Lines 1-4javascript
1"use strict";var hn=Object.create;var ut=Object.defineProperty;var mn=Object.getOwnPropertyDescriptor;var fn=Object.getOwnPropertyNames;var gn=Object.getPrototypeOf,_n=Object.prototype.hasOwnProperty;var C=(s,e)=>()=>{try
Lines 1-4javascript
1"use strict";var qo=Object.create;var Jt=Object.defineProperty;var Uo=Object.getOwnPropertyDescriptor;var $o=Object.getOwnPropertyNames;var zo=Object.getPrototypeOf,Bo=Object.prototype.hasOwnProperty;var k=(s,e)=>()=>{
Lines 1-4javascript
1"use strict";var xo=Object.create;var Vt=Object.defineProperty;var Do=Object.getOwnPropertyDescriptor;var Io=Object.getOwnPropertyNames;var Lo=Object.getPrototypeOf,Mo=Object.prototype.hasOwnProperty;var C=(s,e)=>()=>{try
Lines 1-4javascript
1"use strict";var Cn=Object.create;var vt=Object.defineProperty;var Rn=Object.getOwnPropertyDescriptor;var Tn=Object.getOwnPropertyNames;var En=Object.getPrototypeOf,xn=Object.prototype.hasOwnProperty;var T=(s,e)=>()=>{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}};
var
xn
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
Tn
(e))
!
kn.
call
(s,i)
&&
i
!==
t
&&
is
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
Cn
(e,i))
||
r.enumerable});
return
s};
var
ns
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
Rn
(
En
(s))
:
{},
xn
(e
||!
s
||!
s.__esModule
?
is
(t,
"default"
,{value:s,enumerable:
!
0
})
:
t,s));
var
Rs
=
T
((
nd
,
Ss
)
=>
{
"use strict ..
.
3`}});var pe=T(ie=>{"use strict";var Se=mi(),ro=_i(),so=Ot();ie.grammar=so;ie.write=ro;ie.parse=Se.parse;ie.parseParams=Se.parseParams;ie.parseFmtpConfig=Se.parseFmtpConfig;ie.parsePayloads=Se.parsePayloads;ie.parseRemoteCandidates=Se.parseRemoteCandidates;ie.parseImageAttributes=Se.parseImageAttributes;ie.parseSimulcastStreamList=Se.parseSimulcastStreamList});var Re=T(kr=>{"use strict";Object.defineProperty(kr,"__esModule",{value:!0});kr.parse=no;var io=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function no(s){let e=io.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/chunk-MDOFFR4J.mjs
dist/chunk-MDOFFR4J.mjsView on unpkg · L3 Long lines were clipped for display.
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
vn
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
ut
(s,t,{get:e[t],enumerable:
!
0
})},
as
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
fn
(e))
!
_n.
call
(s,i)
&&
i
!==
t
&&
ut
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
mn
(e,i))
||
r.enumerable});
return
s};
var
He
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
hn
(
gn
(s))
:
{},
as
(e
||!
s
||!
s.__esModule
?
ut
(t,
"d ..
.
3`}});var ce=C(se=>{"use strict";var ve=Ys(),Ma=Xs(),Oa=Ct();se.grammar=Oa;se.write=Ma;se.parse=ve.parse;se.parseParams=ve.parseParams;se.parseFmtpConfig=ve.parseFmtpConfig;se.parsePayloads=ve.parsePayloads;se.parseRemoteCandidates=ve.parseRemoteCandidates;se.parseImageAttributes=ve.parseImageAttributes;se.parseSimulcastStreamList=ve.parseSimulcastStreamList});var we=C(Cr=>{"use strict";Object.defineProperty(Cr,"__esModule",{value:!0});Cr.parse=Na;var Aa=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function Na(s){let e=Aa.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
Wo
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Jt
(s,t,{get:e[t],enumerable:
!
0
})},
an
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
$o
(e))
!
Bo.
call
(s,n)
&&
n
!==
t
&&
Jt
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
Uo
(e,n))
||
r.enumerable});
return
s};
var
Vr
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
qo
(
zo
(s))
:
{},
an
(e
||!
s
||!
s.__esModule
?
Jt
(t,
"d ..
.
3`}});var we=k(he=>{"use strict";var Fe=li(),Ac=mi(),Oc=gr();he.grammar=Oc;he.write=Ac;he.parse=Fe.parse;he.parseParams=Fe.parseParams;he.parseFmtpConfig=Fe.parseFmtpConfig;he.parsePayloads=Fe.parsePayloads;he.parseRemoteCandidates=Fe.parseRemoteCandidates;he.parseImageAttributes=Fe.parseImageAttributes;he.parseSimulcastStreamList=Fe.parseSimulcastStreamList});var qe=k(ws=>{"use strict";Object.defineProperty(ws,"__esModule",{value:!0});ws.parse=jc;var Nc=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function jc(s){let e=Nc.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/index.browser.js
dist/index.browser.jsView on unpkg · L3 Long lines were clipped for display.
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
Ao
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
Vt
(s,t,{get:e[t],enumerable:
!
0
})},
Zs
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
n
of
Io
(e))
!
Mo.
call
(s,n)
&&
n
!==
t
&&
Vt
(s,n,{
get
:()
=>
e[n],enumerable:
!
(r
=
Do
(e,n))
||
r.enumerable});
return
s};
var
vt
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
xo
(
Lo
(s))
:
{},
Zs
(e
||!
s
||!
s.__esModule
?
Vt
(t,
"d ..
.
3`}});var ve=C(pe=>{"use strict";var Oe=ti(),lc=si(),hc=dr();pe.grammar=hc;pe.write=lc;pe.parse=Oe.parse;pe.parseParams=Oe.parseParams;pe.parseFmtpConfig=Oe.parseFmtpConfig;pe.parsePayloads=Oe.parsePayloads;pe.parseRemoteCandidates=Oe.parseRemoteCandidates;pe.parseImageAttributes=Oe.parseImageAttributes;pe.parseSimulcastStreamList=Oe.parseSimulcastStreamList});var Ne=C(ls=>{"use strict";Object.defineProperty(ls,"__esModule",{value:!0});ls.parse=fc;var mc=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function fc(s){let e=mc.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
Long lines were clipped for display.
try
{
return
e
||
s
((e
=
{exports:{}}).exports,e),e.exports}
catch
(t){
throw
e
=
0
,t}},
kn
=
(
s
,
e
)
=>
{
for
(
var
t
in
e)
vt
(s,t,{get:e[t],enumerable:
!
0
})},
hs
=
(
s
,
e
,
t
,
r
)
=>
{
if
(e
&&typeof
e
==
"object"
||typeof
e
==
"function"
)
for
(
let
i
of
Tn
(e))
!
xn.
call
(s,i)
&&
i
!==
t
&&
vt
(s,i,{
get
:()
=>
e[i],enumerable:
!
(r
=
Rn
(e,i))
||
r.enumerable});
return
s};
var
pr
=
(
s
,
e
,
t
)
=>
(t
=
s
!=
null
?
Cn
(
En
(s))
:
{},
hs
(e
||!
s
||!
s.__esModule
?
vt
(t,
"d ..
.
3`}});var de=T(ie=>{"use strict";var be=oi(),to=di(),ro=Mt();ie.grammar=ro;ie.write=to;ie.parse=be.parse;ie.parseParams=be.parseParams;ie.parseFmtpConfig=be.parseFmtpConfig;ie.parsePayloads=be.parsePayloads;ie.parseRemoteCandidates=be.parseRemoteCandidates;ie.parseImageAttributes=be.parseImageAttributes;ie.parseSimulcastStreamList=be.parseSimulcastStreamList});var Se=T(Mr=>{"use strict";Object.defineProperty(Mr,"__esModule",{value:!0});Mr.parse=io;var so=new RegExp("^[LS]([1-9]\\d{0,1})T([1-9]\\d{0,1})");function io(s){let e=so.exec(s??"");return e?{spatialLayers:Number(e[1]),temporalLayers:Num ...
MediumSecret Pattern
Hardcoded password in dist/internal.browser.js
dist/internal.browser.jsView on unpkg · L3 Long lines were clipped for display.