registry / comein-player-web / 0.1.9
comein-player-web@0.1.9
⚠ Under reviewCustomer-facing Web SDK built on top of the Comein player SDK.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 0.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.
Static reason
Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.
Decision evidence
public snapshotBehavioral surface
EnvironmentVarsNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Oversized source lightweight scan
dist/index.esm.js7.44 MB file, sampled 256 KB
NetworkHighEntropyStringsUrlStringsserver.comein.cntestserver.comein.cn
dist/index.umd.js5.06 MB file, sampled 256 KB
NetworkEnvironmentVarsPossibleObfuscationHighEntropyStringsMinifiedUrlStringsserver.comein.cntestserver.comein.cn
Source & flagged code
3 flagged · loading sourcedist/index.umd.jsView file
1!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globa...
L2: /*!
...
L5: * Released under the MIT License.
L6: */var emptyObject=Object.freeze({}),isArray$7=Array.isArray;function isUndef(e){return null==e}function isDef(e){return null!=e}function isTrue(e){return!0===e}function isFalse(e){...
L7: /*!
...
L51: */
L52: return e.mode.CTRGladman=function(){var t=e.lib.BlockCipherMode.extend();function i(e){if(255&~(e>>24))e+=1<<24;else{var t=e>>16&255,i=e>>8&255,n=255&e;255===t?(t=0,255===i?(i=0,25...
L53: /*!
...
L57: */
L58: function applyMixin(e){if(Number(e.version.split(".")[0])>=2)e.mixin({beforeCreate:i});else{var t=e.prototype._init;e.prototype._init=funct
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
dist/index.umd.jsView on unpkg · L1dist/index.esm.jsView file
•path = dist/index.esm.js
kind = oversized_source_file
sizeBytes = 7804362
magicHex = [redacted]
Medium
Oversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/index.esm.jsView on unpkgFindings
2 High4 Medium3 Low
HighBrowser Session Account Hijackdist/index.umd.js
HighSemantic Analysis Limiteddist/index.css
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.esm.js
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to comein-player-web@0.1.9.
See all versions of comein-player-web for other recorded verdicts.
- Review the evidence and your use of comein-player-web@0.1.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.