registry / f-termx / 1.3.32

f-termx@1.3.32

Modern terminal tunnel platform with multiple SSH sessions

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 204 KB of source, external domains: www.w3.org

Source & flagged code

3 flagged

bin/ftermx.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

3// ╔══════════════════════════════════════════════════════════════════════════╗

4// ║ ║

5// ║ ███████╗ █████╗ ██████╗ ███████╗██╗ ██████╗ ███████╗██╗ ██╗ ║

6// ║ ██╔════╝██╔══██╗██╔══██╗██╔════╝██║ ██╔══██╗██╔════╝██║ ██║ ║

7// ║ █████╗ ███████║██████╔╝█████╗ ██║ ██║ ██║█████╗ ██║ ██║ ║

8// ║ ██╔══╝ ██╔══██║██╔══██╗██╔══╝ ██║ ██║ ██║██╔══╝ ╚██╗ ██╔╝ ║

9// ║ ██║ ██║ ██║██║ ██║███████╗███████╗██████╔╝███████╗ ╚████╔╝ ║

10// ║ ╚═╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚══════╝╚═════╝ ╚══════╝ ╚═══╝ ║

11// ║ ║

12// ║ ✦ Source By FarelDev ✦ ║

13// ║ ────────────────────────────────── ║

15// ║ Licensed under the Apache License, Version 2.0 ║

16// ║ See LICENSE file for full details. ║

17// ║ ║

18// ╚══════════════════════════════════════════════════════════════════════════╝

20'use strict';

22const { spawn, execSync } = require('child_process');

23const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ftermx.jsView on unpkg · L21

24const os = require('os');

25const fs = require('fs');

26const chalk = require('chalk');

27const figlet = require('figlet');

28const gradient = require('gradient-string');

29const inquirer = require('inquirer');

31const C = {

32 cyan: s => chalk.hex('#00d4ff')(s),

33 green: s => chalk.hex('#00ff88')(s),

34 purple: s => chalk.hex('#a855f7')(s),

35 dim: s => chalk.hex('#3d5068')(s),

36 mid: s => chalk.hex('#7a8fa6')(s),

37 bright: s => chalk.hex('#e2eaf5')(s),

38 red: s => chalk.hex('#ff3d5a')(s),

39 orange: s => chalk.hex('#ff8c42')(s),

40 yellow: s => chalk.hex('#ffd700')(s),

41 bold: s => chalk.bold(s),

Lines 539-579javascript

539async function changePassword(presetName) {

540 let users;

541 try {

542 const { loadUsers } = require(path.join(__dirname, '../src/auth'));

src/private/js/terminal.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/private/js/terminal.jsView on unpkg

Source & flagged code

3 flagged · loading source

bin/ftermx.jsView file

559patternName = generic_password severity = medium line = 559 matchedText = { type: ...' },

Medium

Secret Pattern

Package contains a possible secret pattern.

bin/ftermx.jsView on unpkg · L559

21L22: const { spawn, execSync } = require('child_process'); L23: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ftermx.jsView on unpkg · L21

src/private/js/terminal.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/private/js/terminal.jsView on unpkg

Findings

1 High4 Medium4 Low

HighSemantic Analysis Limitedsrc/private/js/terminal.js

MediumSecret Patternbin/ftermx.js

MediumDynamic Requirebin/ftermx.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings