registry / fca-eryxenx / 39.0.0

fca-eryxenx@39.0.0

Facebook Chat API - Modified by EryXenX | Stable, Auto Re-login, Fixed setMessageReaction

Static Scan Results

scanned 27d ago · by rust-scanner

Static analysis flagged 26 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 195 file(s), 1.49 MB of source, external domains: facebook.com, github.com, m.facebook.com, minhdong.site, reg-e2ee.facebook.com, registry.npmjs.org, static.xx.fbcdn.net, upload.facebook.com, www.facebook.com, www.messenger.com, www.whatsapp.com

Source & flagged code

19 flagged

src/api/socket/e2ee/e2ee/vendor/fb-e2ee.cjsView file

Lines 110-150javascript

110var require_safe_buffer = __commonJS({

111 "node_modules/ws/node_modules/safe-buffer/index.js"(exports2, module2) {

112 "use strict";

113 init_cjs_shims();

114 var buffer = require("buffer");

115 var Buffer3 = buffer.Buffer;

116 function copyProps(src, dst) {

117 for (var key in src) {

118 dst[key] = src[key];

119 }

120 }

121 if (Buffer3.from && Buffer3.alloc && Buffer3.allocUnsafe && Buffer3.allocUnsafeSlow) {

122 module2.exports = buffer;

123 } else {

124 copyProps(buffer, exports2);

125 exports2.Buffer = SafeBuffer;

126 }

127 function SafeBuffer(arg, encodingOrOffset, length) {

128 return Buffer3(arg, encodingOrOffset, length);

129 }

130 copyProps(Buffer3, SafeBuffer);

131 SafeBuffer.from = function(arg, encodingOrOffset, length) {

132 if (typeof arg === "number") {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

src/api/socket/e2ee/e2ee/vendor/fb-e2ee.cjsView on unpkg · L130

133 throw new TypeError("Argument must not be a number");

134 }

135 return Buffer3(arg, encodingOrOffset, length);

136 };

137 SafeBuffer.alloc = function(size, fill, encoding) {

138 if (typeof size !== "number") {

139 throw new TypeError("Argument must be a number");

140 }

141 var buf = Buffer3(size);

142 if (fill !== void 0) {

143 if (typeof encoding === "string") {

144 buf.fill(fill, encoding);

145 } else {

146 buf.fill(fill);

147 }

148 } else {

149 buf.fill(0);

150 }

Lines 2944-2984javascript

2944 "kyc-id",

2945 "privacy_token",

2946 "readreceipts",

2947 "appointment_only",

2948 "address",

2949 "expected_ts",

2950 "privacy",

2951

module/loginHelper.jsView file

Lines 1-21javascript

1"use strict";

2const fs = require("fs");

3const path = require("path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

module/loginHelper.jsView on unpkg · L1

src/vendor/fca-unofficial/test/data/something.movView file

•path = src/vendor/fca-unofficial/test/data/something.mov kind = high_entropy_blob sizeBytes = 211750 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/vendor/fca-unofficial/test/data/something.movView on unpkg

•path = src/vendor/fca-unofficial/test/data/something.mov kind = payload_in_excluded_dir sizeBytes = 211750 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

src/vendor/fca-unofficial/test/data/something.movView on unpkg

DOCS.mdView file

Lines 20-122markdown

21For a concise codebase overview, see [docs/ARCHITECTURE.md](./docs/ARCHITECTURE.md).

23## Installation

25```bash

26npm install @dongdev/fca-unofficial@latest

27```

29---

src/api/socket/e2ee/vendor/fb-e2ee.cjsView file

Lines 2944-2984javascript

2944 "kyc-id",

2945 "privacy_token",

2946 "readreceipts",

2947 "appointment_only",

2948 "address",

2949 "expected_ts",

2950

src/vendor/fca-unofficial/README.mdView file

40patternName = generic_password severity = medium line = 40 matchedText = login({e...=> {

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/README.md

src/vendor/fca-unofficial/README.mdView on unpkg · L40

78patternName = generic_password severity = medium line = 78 matchedText = login({e...=> {

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/README.md

src/vendor/fca-unofficial/README.mdView on unpkg · L78

91patternName = generic_password severity = medium line = 91 matchedText = login({e...=> {

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/README.md

src/vendor/fca-unofficial/README.mdView on unpkg · L91

115patternName = generic_password severity = medium line = 115 matchedText = var cred...D"};

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/README.md

src/vendor/fca-unofficial/README.md

src/vendor/fca-unofficial/DOCS.mdView file

110patternName = generic_password severity = medium line = 110 matchedText = login({e...=> {

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/DOCS.md

src/vendor/fca-unofficial/DOCS.mdView on unpkg · L110

122patternName = generic_password severity = medium line = 122 matchedText = login({e...=> {

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/DOCS.md

src/vendor/fca-unofficial/DOCS.mdView on unpkg · L122

155patternName = generic_password severity = medium line = 155 matchedText = const ob...D"};

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/DOCS.md

src/vendor/fca-unofficial/DOCS.mdView on unpkg · L155

1575patternName = generic_password severity = medium line = 1575 matchedText = login({e...=> {

Medium

Secret Pattern

Hardcoded password in src/vendor/fca-unofficial/DOCS.md

src/vendor/fca-unofficial/DOCS.md

Source & flagged code

19 flagged · loading source

src/api/socket/e2ee/e2ee/vendor/fb-e2ee.cjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code