registry  /  @wujie-shell/config  /  1.0.5

@wujie-shell/config@1.0.5

`@wujie-shell/config` is the product configuration loader for `wujie-shell`. It reads a UI product project's environment files and `shell.config.mjs`, then normalizes paths, ports, runtime directories, model config, and OpenClaw asset locations for shell-

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystem
Supply chain
MinifiedObfuscatedTrivial
Manifest
NoLicense
scanned 1 file(s), 22.4 KB of source

Source & flagged code

2 flagged · loading source
dist/src/index.mjsView file
1const _0x5aad5a=_0x4cae;(function(_0x15dceb,_0x3c6705){const _0x2ba7cd=_0x4cae,_0x10c5cd=_0x15dceb();while(!![]){try{const _0x424daa=-parseInt(_0x2ba7cd(0xd5))/0x1*(-parseInt(_0x2b...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/src/index.mjsView on unpkg · L1
1const _0x5aad5a=_0x4cae;(function(_0x15dceb,_0x3c6705){const _0x2ba7cd=_0x4cae,_0x10c5cd=_0x15dceb();while(!![]){try{const _0x424daa=-parseInt(_0x2ba7cd(0xd5))/0x1*(-parseInt(_0x2b...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/src/index.mjsView on unpkg · L1

Findings

2 High3 Medium3 Low
HighObfuscated Payload Loaderdist/src/index.mjs
HighObfuscated
MediumDynamic Requiredist/src/index.mjs
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowNo License