registry / floating-games-sdk / 1.0.25

floating-games-sdk@1.0.25

A React Native gaming SDK with 3 built-in games

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetwork

Supply chain

UrlStrings

Manifest

WildcardDependency

scanned 47 file(s), 223 KB of source, external domains: api-floating-game.netapps.ng, api-pg-staging.netapps.ng

Source & flagged code

7 flagged

package.jsonView file

Lines 2-42json

2 "name": "floating-games-sdk",

3 "version": "1.0.25",

4 "description": "A React Native gaming SDK with 3 built-in games",

5 "main": "src/index.tsx",

6 "types": "src/index.tsx",

7 "keywords": [

8 "react-native",

9 "games",

10 "sdk",

11 "expo",

12 "puzzle",

13 "spin-wheel"

14 ],

15 "author": "Olive Okechukwu <bmithzee@gmail.com>",

16 "license": "MIT",

17 "repository": {

18 "type": "git",

19 "url": "https://gitlab.com/bmithzee/floating-games-sdk"

20 },

21 "scripts": {

22 "postinstall": "node install-peers.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L22

23 },

24 "files": [

25 "src",

26 "install-peers.js"

27 ],

28 "devDependencies": {

29 "typescript": "^5.0.0",

30 "@types/react": "*",

31 "@types/react-native": "*",

32 "react": "*",

33 "react-native": "*"

34 },

35 "peerDependencies": {

36 "react": ">=18.0.0",

37 "react-native": ">=0.72.0",

38 "@react-navigation/native": ">=6.0.0",

39 "@react-navigation/native-stack": ">=6.0.0",

40 "@expo-google-fonts/creepster": ">=0.4.0",

41 "@gorhom/bottom-sheet": ">=4.0.0",

42 "expo": ">=49.0.0",

README.mdView file

Lines 8-29markdown

9### 3. Run script instead

10node node_modules/floating-games-sdk/install-peers.js

12### 4. Use it

13import { FloatingGames } from 'floating-games-sdk';

15[//]: # (Call SDK like this)

17<FloatingGames

18 config={{

install-peers.jsView file

Lines 1-55javascript

1const { execSync } = require('child_process');

2const path = require('path');

High

Child Process

Package source references child process execution.

install-peers.jsView on unpkg · L1

3const

src/assets/sounds/timeup-sound.wavView file

•path = src/assets/sounds/timeup-sound.wav kind = high_entropy_blob sizeBytes = 529984 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/assets/sounds/timeup-sound.wavView on unpkg

src/components/payment/CheckoutScreen.tsxView file

Lines 21-61tsx

21 try {

22 const balance = await wallet(config.userId, amount,'top-up');

24 if (balance !== undefined) {

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node install-peers.js

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code