registry / chief-tool / 0.0.41

chief-tool@0.0.41

猎户座 - Git Branch Management CLI Tool

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 106 KB of source, external domains: open.larksuite.com, www.w3.org

Source & flagged code

5 flagged

bin/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2const { program } = require("commander");

3const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/index.jsView on unpkg · L1

4const { make } = require("../src/image/make.js");

5const { preview } = require("../src/image/preview.js");

6const { handleTest, handlePre, handleMerge } = require("../src/git.js");

7const cssMake = require("../src/css/make.js");

9// 引入语言处理模块

10const toJson = require("../src/lang/toJson.js");

11const toExcel = require("../src/lang/toExcel.js");

12const compare = require("../src/lang/compare.js");

14// 获取 package.json 中的版本号

15const packageJson = require("../package.json");

17// 设置命令

18program

19 .name("chief")

20 .description("Chief Git CLI tool")

21 .version(packageJson.version, '-v, --version', '显示版本号');

examples/excels/pc端多语言.xlsxView file

•path = examples/excels/pc端多语言.xlsx kind = high_entropy_blob sizeBytes = 142418 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

examples/excels/pc端多语言.xlsxView on unpkg

•path = examples/excels/pc端多语言.xlsx kind = compressed_blob sizeBytes = 142418 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

examples/excels/pc端多语言.xlsxView on unpkg

•path = examples/excels/pc端多语言.xlsx kind = nested_archive_needs_inspection sizeBytes = 142418 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

examples/excels/pc端多语言.xlsxView on unpkg

package.jsonView file

Lines 1-30json

2 "name": "chief-tool",

3 "version": "0.0.41",

4 "description": "猎户座 - Git Branch Management CLI Tool",

5 "main": "bin/index.js",

Source & flagged code

5 flagged · loading source

bin/index.jsView file

1#!/usr/bin/env node L2: const { program } = require("commander"); L3: const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/index.jsView on unpkg · L1

examples/excels/pc端多语言.xlsxView file

•path = examples/excels/pc端多语言.xlsx kind = high_entropy_blob sizeBytes = 142418 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

examples/excels/pc端多语言.xlsxView on unpkg

•path = examples/excels/pc端多语言.xlsx kind = compressed_blob sizeBytes = 142418 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

examples/excels/pc端多语言.xlsxView on unpkg

Findings

2 High4 Medium5 Low

HighShips High Entropy Blobexamples/excels/pc端多语言.xlsx

HighNode Builtin Dependency Squatpackage.json

MediumDynamic Requirebin/index.js

MediumNetwork

MediumShips Compressed Blobexamples/excels/pc端多语言.xlsx

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionexamples/excels/pc端多语言.xlsx