registry  /  bnotify-web-sdk  /  1.2.0

bnotify-web-sdk@1.2.0

Professional web push notification SDK with beautiful subscription popups

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequire
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 1.18 MB of source, external domains: bnotify.convexinteractive.com

Source & flagged code

2 flagged · loading source
dist/index.jsView file
1function _0x15b0(){const _0x29aa38=['WPhdGrBcSCo6','W5tdU3VcUSki','WQyibcSU','W5tdUuVcSmog','WOBdJetdNSkE','sSo3W6dcS3e','vu8iW7Cq','W6nzCmkWFa','W71eWPZdUSop','W5WpWOn1ya','h8kQim...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1
1function _0x15b0(){const _0x29aa38=['WPhdGrBcSCo6','W5tdU3VcUSki','WQyibcSU','W5tdUuVcSmog','WOBdJetdNSkE','sSo3W6dcS3e','vu8iW7Cq','W6nzCmkWFa','W71eWPZdUSop','W5WpWOn1ya','h8kQim...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

Findings

2 High2 Medium3 Low
HighObfuscated Payload Loaderdist/index.js
HighObfuscated
MediumDynamic Requiredist/index.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings