registry  /  @wavemaker/app-runtime-wm-build  /  11.15.5-1.256

@wavemaker/app-runtime-wm-build@11.15.5-1.256

All modules required for a wavemaker application.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEval
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 717 file(s), 6.26 MB of source, external domains: momentjs.com
Oversized source lightweight scan
wmapp/scripts/wm-libs.js7.37 MB file, sampled 256 KB
EvalHighEntropyStringsMinified
wmapp/scripts/wm-libs.min.js5.08 MB file, sampled 256 KB
EvalHighEntropyStringsMinified

Source & flagged code

5 flagged · loading source
wmapp/scripts/wm-loader.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = (functio...er);
Medium
Secret Pattern

Package contains a possible secret pattern.

wmapp/scripts/wm-loader.jsView on unpkg · L1
wmapp/scripts/wm-loader.min.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = !functio...ti);
Medium
Secret Pattern

Hardcoded password in wmapp/scripts/wm-loader.min.js

wmapp/scripts/wm-loader.min.jsView on unpkg · L1
1!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("@angular/compiler"),require("lodash-es"),require("rxjs"),require("x2js"),require("moment-time... L2: /**
Low
Eval

Package source references a known benign dynamic code generation pattern.

wmapp/scripts/wm-loader.min.jsView on unpkg · L1
wmapp/styles/css/font/summernote.woff2View file
•path = [redacted].woff2 kind = high_entropy_blob sizeBytes = 6156 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

wmapp/styles/css/font/summernote.woff2View on unpkg
wmapp/scripts/wm-libs.jsView file
•path = wmapp/scripts/wm-libs.js kind = oversized_source_file sizeBytes = 7728683 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

wmapp/scripts/wm-libs.jsView on unpkg

Findings

2 High3 Medium4 Low
HighShips High Entropy Blobwmapp/styles/css/font/summernote.woff2
HighOversized Source Filewmapp/scripts/wm-libs.js
MediumSecret Patternwmapp/scripts/wm-loader.js
MediumStructural Risk Force Deep Review
MediumSecret Patternwmapp/scripts/wm-loader.min.js
LowScripts Present
LowEvalwmapp/scripts/wm-loader.min.js
LowHigh Entropy Strings
LowUrl Strings