registry  /  cobrowse-sdk-js  /  3.25.2

cobrowse-sdk-js@3.25.2

Cobrowse.io SDK for web

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 21 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
Manifest
NoLicense
scanned 22 file(s), 20.7 MB of source, external domains: aomediacodec.github.io, api.cobrowse.io, api.elevenlabs.io, api.eu.residency.elevenlabs.io, api.in.residency.elevenlabs.io, api.us.elevenlabs.io, cdn.jsdelivr.net, example.com, fonts.googleapis.com, github.com, ns.adobe.com, placeholder.base, storage.googleapis.com, tailwindcss.com, www.ibm.com, www.w3.org, www.xfa.org

Source & flagged code

9 flagged · loading source
dist/index.bundler2.mjsView file
1import"core-js/modules/es.json.stringify.js";import"core-js/modules/es.symbol.dispose.js";import"core-js/modules/es.array.at.js";import"core-js/modules/es.array.push.js";import"cor...
High
Child Process

Package source references child process execution.

dist/index.bundler2.mjsView on unpkg · L1
1import"core-js/modules/es.json.stringify.js";import"core-js/modules/es.symbol.dispose.js";import"core-js/modules/es.array.at.js";import"core-js/modules/es.array.push.js";import"cor...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.bundler2.mjsView on unpkg · L1
1patternName = generic_password severity = medium line = 1 matchedText = import"c...ps};
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.bundler2.mjsView on unpkg · L1
dist/CobrowsePDFViewer.umd.bundler.mjsView file
1import"core-js/modules/es.array.at.js";import"core-js/modules/es.array.find-last.js";import"core-js/modules/es.array.push.js";import"core-js/modules/es.array.unshift.js";import"cor...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/CobrowsePDFViewer.umd.bundler.mjsView on unpkg · L1
dist/universal-client.static.E699iE1a.mjsView file
1patternName = generic_password severity = medium line = 1 matchedText = import{r...ps};
Medium
Secret Pattern

Hardcoded password in dist/universal-client.static.E699iE1a.mjs

dist/universal-client.static.E699iE1a.mjsView on unpkg · L1
dist/elevenlabs.CobrowseIO.umd.chunk.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Hardcoded password in dist/elevenlabs.CobrowseIO.umd.chunk.js

dist/elevenlabs.CobrowseIO.umd.chunk.jsView on unpkg · L1
dist/elevenlabs.universal-client.chunk.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Hardcoded password in dist/elevenlabs.universal-client.chunk.js

dist/elevenlabs.universal-client.chunk.jsView on unpkg · L1
dist/CobrowseIO.static.CUXfBY33.mjsView file
1patternName = generic_password severity = medium line = 1 matchedText = import{r...ps};
Medium
Secret Pattern

Hardcoded password in dist/CobrowseIO.static.CUXfBY33.mjs

dist/CobrowseIO.static.CUXfBY33.mjsView on unpkg · L1
dist/elevenlabs.CobrowseIO.chunk.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Hardcoded password in dist/elevenlabs.CobrowseIO.chunk.js

dist/elevenlabs.CobrowseIO.chunk.jsView on unpkg · L1

Findings

2 High11 Medium8 Low
HighChild Processdist/index.bundler2.mjs
HighSame File Env Network Executiondist/index.bundler2.mjs
MediumSecret Patterndist/index.bundler2.mjs
MediumDynamic Requiredist/CobrowsePDFViewer.umd.bundler.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/universal-client.static.E699iE1a.mjs
MediumSecret Patterndist/elevenlabs.CobrowseIO.umd.chunk.js
MediumSecret Patterndist/elevenlabs.universal-client.chunk.js
MediumSecret Patterndist/CobrowseIO.static.CUXfBY33.mjs
MediumSecret Patterndist/elevenlabs.CobrowseIO.chunk.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License