encrypt-string-ttak@1.0.1

One or more suspicious static signals were detected.

Consumer imports/configures the module and invokes handleEncryptResponse on application responses.

Account credentials and MFA-related secret material can be exfiltrated.

Credential harvesting followed by encrypted storage and remote JSONBin synchronization.

The exported runtime handler inspects response URLs and plaintext response data, extracts account/password values and googleCodeSecretKey, then passes them to encryptString. That function writes encrypted records to UniApp storage and conditionally uploads them through uni.request with JSONBin headers, including X-Master-Key. Obfuscation conceals configuration strings, while the README documents remote loading and new Function execution by its companion loader.

This is concrete credential and secret collection with remote synchronization, not a package-aligned encryption primitive. Absence of lifecycle hooks limits activation to consumer runtime but does not remove the exfiltration behavior.