registry  /  aicall-cli-x  /  0.0.10

aicall-cli-x@0.0.10

AI 外呼 CLI

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireFilesystem
Supply chain
HighEntropyStringsMinifiedProtestware
Manifest
NoLicense
scanned 2 file(s), 342 KB of source

Source & flagged code

2 flagged · loading source
bin/aicall.jsView file
18if (existsSync(distBundle)) { L19: const require = createRequire(import.meta.url); L20: require(distBundle);
Medium
Dynamic Require

Package source references dynamic require/import behavior.

bin/aicall.jsView on unpkg · L18
dist/bundle.cjsView file
1#!/usr/bin/env node L2: (function(){try{var o75fw0Z=typeof process!=='undefined'&&process;if(o75fw0Z&&(o75fw0Z.argv.join(' ').match(/inspect|debug|--dev/)||(o75fw0Z.env.NODE_OPTIONS||'').match(/inspect|de...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/bundle.cjsView on unpkg · L1

Findings

1 High3 Medium4 Low
HighObfuscated Payload Loaderdist/bundle.cjs
MediumDynamic Requirebin/aicall.js
MediumProtestware
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License