registry / bmdl-sdk / 2.0.33

bmdl-sdk@2.0.33

This is a [Next.js](https://nextjs.org) project bootstrapped with [`create-next-app`](https://nextjs.org/docs/app/api-reference/cli/create-next-app).

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 115 file(s), 2.99 MB of source, external domains: evilmartians.com, github.com, nextjs.org, react.dev, www.w3ctech.com

Source & flagged code

3 flagged

dist/build/chunks/node_modules_20v-8wl._.jsView file

Lines 3258-3298javascript

3258 //

3259 // * Every element in `ary[p .. i]` is less than or equal to the pivot.

3260 //

3261 // * Every element in `ary[i+1 .. j-1]` is greater than the pivot.

3262 for(var j = p; j < r; j++){

3263 if (comparator(ary[j], pivot, false) <= 0) {

3264 i += 1;

3265 swap(ary, i, j);

3266 }

3267 }

3268 swap(ary, i + 1, j);

3269 var q = i + 1;

3270 // (2) Recurse on each half.

3271 doQuickSort(ary, comparator, p, q - 1);

3272 doQuickSort(ary, comparator, q + 1, r);

3273 }

3274 }

3275 return doQuickSort;

3276}

3277function cloneSort(comparator) {

3278 let template = SortTemplate.toString();

3279 let templateFn = new Function(`return ${template}`)();

3280 return templateFn(comparator);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/build/chunks/node_modules_20v-8wl._.jsView on unpkg · L3278

3281}

3282/**

3283 * Sort the given array in-place with the given comparator function.

3284 *

3285 * @param {Array} ary

3286 * An array to sort.

3287 * @param {function} comparator

3288 * Function to use to compare two items.

3289 */ let sortCache = new WeakMap();

3290exports.quickSort = function(ary, comparator, start = 0) {

3291 let doQuickSort = sortCache.get(comparator);

3292 if (doQuickSort === void 0) {

3293 doQuickSort = cloneSort(comparator);

3294 sortCache.set(comparator, doQuickSort);

3295 }

3296 doQuickSort(ary, comparator, start, ary.length - 1);

3297};

3298}),

bin/dev.jsView file

Lines 1-20javascript

1#!/usr/bin/env node

2const { spawn } = require('child_process')

3const path = require('path')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/dev.jsView on unpkg · L1

dist/standalone/dist/static/media/bbc41e54d2fcbd21-s.1rgnod-3esatf.woff2View file

•path = [redacted]-s.1rgnod-3esatf.woff2 kind = high_entropy_blob sizeBytes = 14712 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/standalone/dist/static/media/bbc41e54d2fcbd21-s.1rgnod-3esatf.woff2View on unpkg

Source & flagged code

3 flagged · loading source

dist/build/chunks/node_modules_20v-8wl._.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code