registry  /  edge-currency-accountbased  /  4.85.1

edge-currency-accountbased@4.85.1

Edge currency plugin for account based currencies

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Manifest
NoLicense
scanned 215 file(s), 1.95 MB of source, external domains: 18.196.99.16, 1rpc.io, 3.218.137.187, 3.225.171.164, 34.237.210.82, 34.253.187.192, 37.27.100.59, 52.53.189.99, 54.252.224.209, abscan.org, account.teloscrew.com, algoindexer.algoexplorerapi.io, algoindexer.testnet.algoexplorerapi.io, allo.info, amoy.polygonscan.com, api-amoy.polygonscan.com, api-cali.filscan.io, api-era.zksync.network, api-v2.filscan.io, api.abscan.org, api.arbiscan.io, api.avascan.info, api.avax.network, api.basescan.org, api.binance.org, api.bitmars.one, api.blockchair.com, api.blockcypher.com, api.bscscan.com, api.calibration.node.glif.io, api.eos.wiki, api.eoseoul.io, api.eoslaomao.com, api.eosn.io, api.eospowerup.io, api.eossweden.org, api.etherscan.io, api.fio.alohaeos.com, api.fio.currencyhub.io, api.fio.detroitledger.tech, api.fio.services, api.fiosweden.org, api.koios.rest, api.mainnet-beta.solana.com, api.mainnet.abs.xyz, api.node.glif.io, api.polygonscan.com, api.routescan.io, api.scan.pulsechain.com, api.snowscan.xyz
Oversized source lightweight scan
android/src/main/assets/edge-currency-accountbased/edge-currency-accountbased.js28.6 MB file, sampled 256 KB
ChildProcessEvalObfuscatedHighEntropyStringsMinifiedUrlStrings18.196.99.163.218.137.1873.225.171.16434.237.210.8234.253.187.19237.27.100.5952.53.189.9954.252.224.209account.teloscrew.comalgoindexer.algoexplorerapi.ioallo.infoapi-cali.filscan.ioapi-v2.filscan.ioapi.binance.orgapi.bitmars.oneapi.calibration.node.glif.ioapi.eos.wikiapi.eoseoul.ioapi.eoslaomao.comapi.eosn.ioapi.eospowerup.ioapi.eossweden.orgapi.fio.alohaeos.comapi.fio.currencyhub.io

Source & flagged code

2 flagged · loading source
android/src/main/assets/edge-currency-accountbased/edge-currency-accountbased.jsView file
•path = android/src/main/assets/edge-currency-accountbased/edge-currency-accountbased.js kind = oversized_source_file sizeBytes = 29966639 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

android/src/main/assets/edge-currency-accountbased/edge-currency-accountbased.jsView on unpkg
package.jsonView file
•Remote tarball dependency specs: @zano-project/zano-utils-js@https://github.com/EdgeApp/zano-utils-js/releases/download/v0.0.4-edge.1/zano-project-zano-utils-js-0.0.4.tgz
Medium
Remote Tarball Dependency

Package manifest contains a dependency pinned to a remote tarball URL.

package.jsonView on unpkg

Findings

1 High5 Medium7 Low
HighOversized Source Fileandroid/src/main/assets/edge-currency-accountbased/edge-currency-accountbased.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
MediumRemote Tarball Dependencypackage.json
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License