registry / @workbits/cli / 0.1.1

@workbits/cli@0.1.1

Publish static sites to *.workbits.page

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 1.14 MB of source, external domains: json-schema.org, workbits.dev

Source & flagged code

4 flagged

dist/lib.jsView file

72L73: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let g of v.seen.entries()){let I=g[1];if(n===g[0]){i(g);continue}if(v.external){let _=v.exter... L74: `,"utf8"),await m8(n,384)}function U4(v){return new Promise((n)=>setTimeout(n,v))}function rJ(v){return Math.min(4000,250*2**Math.max(0,v-1))}async function iJ(v,n,r){let U=0,$,i=!...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/lib.jsView on unpkg · L72

70L71: `)}k.write("payload.value = newResult;"),k.write("return payload;");let w=k.compile();return(R,T)=>w(Y,R,T)},i,g=V$,I=!k$.jitless,_=I&&c4.value,G=n.catchall,X;v._zod.parse=(Y,k)=>{... L72: L73: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let g of v.seen.entries()){let I=g[1];if(n===g[0]){i(g);continue}if(v.external){let _=v.exter... L74: `,"utf8"),await m8(n,384)}function U4(v){return new Promise((n)=>setTimeout(n,v))}function rJ(v){return Math.min(4000,250*2**Math.max(0,v-1))}async function iJ(v,n,r){let U=0,$,i=!... L75: `),process.stderr.write(`Then visit: ${u.verification_uri_complete}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/lib.jsView on unpkg · L70

Source & flagged code

4 flagged · loading source

dist/lib.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code