registry  /  cobrowse-sdk-js  /  3.25.1

cobrowse-sdk-js@3.25.1

Cobrowse.io SDK for web

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 22 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
Manifest
NoLicense
scanned 22 file(s), 22.1 MB of source, external domains: aomediacodec.github.io, api.cobrowse.io, api.elevenlabs.io, api.eu.residency.elevenlabs.io, api.in.residency.elevenlabs.io, api.us.elevenlabs.io, cdn.jsdelivr.net, example.com, fonts.googleapis.com, github.com, ns.adobe.com, placeholder.base, storage.googleapis.com, tailwindcss.com, www.ibm.com, www.w3.org, www.xfa.org

Source & flagged code

9 flagged · loading source
dist/index.bundler2.mjsView file
1import{_ as e,a as t,b as n,c as i,d as r,e as o,f as a,g as s,s as u}from"./index.bundler.mjs";import"core-js/modules/es.json.stringify.js";import"core-js/modules/web.dom-collecti...
High
Child Process

Package source references child process execution.

dist/index.bundler2.mjsView on unpkg · L1
1import{_ as e,a as t,b as n,c as i,d as r,e as o,f as a,g as s,s as u}from"./index.bundler.mjs";import"core-js/modules/es.json.stringify.js";import"core-js/modules/web.dom-collecti...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.bundler2.mjsView on unpkg · L1
1patternName = generic_password severity = medium line = 1 matchedText = import{_...ps};
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/index.bundler2.mjsView on unpkg · L1
dist/CobrowseIO.static.B2lhxUgT.mjsView file
1import{v as t,I as e,J as n,d as s,K as i,L as a,M as r,N as o,O as l,P as c,Q as h,R as f,S as u,w as d,g as p,r as m,k as g,p as b,T as w,U as v,V as k,W as y,X as j,Y as q,Z as ...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/CobrowseIO.static.B2lhxUgT.mjsView on unpkg · L1
dist/CobrowseIO.static.ipZefKF5.mjsView file
1patternName = generic_password severity = medium line = 1 matchedText = import{r...ps};
Medium
Secret Pattern

Hardcoded password in dist/CobrowseIO.static.ipZefKF5.mjs

dist/CobrowseIO.static.ipZefKF5.mjsView on unpkg · L1
dist/elevenlabs.CobrowseIO.umd.chunk.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Hardcoded password in dist/elevenlabs.CobrowseIO.umd.chunk.js

dist/elevenlabs.CobrowseIO.umd.chunk.jsView on unpkg · L1
dist/elevenlabs.universal-client.chunk.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Hardcoded password in dist/elevenlabs.universal-client.chunk.js

dist/elevenlabs.universal-client.chunk.jsView on unpkg · L1
dist/universal-client.static.DPkYORFl.mjsView file
1patternName = generic_password severity = medium line = 1 matchedText = import{r...ps};
Medium
Secret Pattern

Hardcoded password in dist/universal-client.static.DPkYORFl.mjs

dist/universal-client.static.DPkYORFl.mjsView on unpkg · L1
dist/elevenlabs.CobrowseIO.chunk.jsView file
1patternName = generic_password severity = medium line = 1 matchedText = "use str...}]);
Medium
Secret Pattern

Hardcoded password in dist/elevenlabs.CobrowseIO.chunk.js

dist/elevenlabs.CobrowseIO.chunk.jsView on unpkg · L1

Findings

3 High11 Medium8 Low
HighChild Processdist/index.bundler2.mjs
HighShell
HighSame File Env Network Executiondist/index.bundler2.mjs
MediumSecret Patterndist/index.bundler2.mjs
MediumDynamic Requiredist/CobrowseIO.static.B2lhxUgT.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/CobrowseIO.static.ipZefKF5.mjs
MediumSecret Patterndist/elevenlabs.CobrowseIO.umd.chunk.js
MediumSecret Patterndist/elevenlabs.universal-client.chunk.js
MediumSecret Patterndist/universal-client.static.DPkYORFl.mjs
MediumSecret Patterndist/elevenlabs.CobrowseIO.chunk.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License