Static Scan Results
scanned 2h ago · by rust-scannerStatic analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
DynamicRequire
MinifiedObfuscated
NoLicense
Source & flagged code
2 flagged · loading sourcebin/cli.jsView file
1#!/usr/bin/env node
L2: require('../dist/main');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/cli.jsView on unpkg · L1dist/mcp-tools.jsView file
1(function(_0x341e67,_0x43effa){function _0x52900f(_0x54ee57,_0x590740){return a0_0x533e(_0x54ee57-0x6c,_0x590740);}function _0x3c01d1(_0x3bd8f9,_0x1059a1){return a0_0x533e(_0x1059a...
High
Obfuscated Payload Loader
Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/mcp-tools.jsView on unpkg · L1Findings
2 High2 Medium3 Low
HighObfuscated Payload Loaderdist/mcp-tools.js
HighObfuscated
MediumDynamic Requirebin/cli.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowNo License