registry  /  genosdb  /  0.21.0

genosdb@0.21.0

GenosDB (GDB): distributed graph database in real-time, peer-to-peer, scalable storage - efficient querying of complex relationships.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
Manifest
NoLicense
scanned 11 file(s), 1.45 MB of source, external domains: aomediacodec.github.io, esm.run, github.com, image.pollinations.ai, raw.githubusercontent.com, www.ietf.org, www.webrtc.org

Source & flagged code

7 flagged · loading source
dist/genossrv.min.jsView file
241`)}else{if(!G)throw Error("Required argument 'tag' is missed");return this.encodeStruct({type:G,rawData:S0.toArrayBuffer(W)})}}static encodeStruct(W){var G;let X=W.type.toLocaleUpp... L242: `)}}O9.CertificateTag="CERTIFICATE";O9.CrlTag="CRL";O9.CertificateRequestTag="CERTIFICATE REQUEST";O9.PublicKeyTag="PUBLIC KEY";O9.PrivateKeyTag="PRIVATE KEY";class K4 extends k6{s... L243: `)+`\r
High
Child Process

Package source references child process execution.

dist/genossrv.min.jsView on unpkg · L241
241`)}else{if(!G)throw Error("Required argument 'tag' is missed");return this.encodeStruct({type:G,rawData:S0.toArrayBuffer(W)})}}static encodeStruct(W){var G;let X=W.type.toLocaleUpp... L242: `)}}O9.CertificateTag="CERTIFICATE";O9.CrlTag="CRL";O9.CertificateRequestTag="CERTIFICATE REQUEST";O9.PublicKeyTag="PUBLIC KEY";O9.PrivateKeyTag="PRIVATE KEY";class K4 extends k6{s... L243: `)+`\r ... L247: `);if(Y.length===1)Y=W.split(` L248: `);return Y.forEach((V)=>{if(V.startsWith("m="))X.push([V]);else if(X.length>0)X[X.length-1].push(V);else G.push(V)}),[G,X]}function OO(W){if(W.includes(":")){let G=h4(W.slice(2),"... L249: `;var ok=BigInt(0),nk=BigInt(1),ik=BigInt(2),rk=BigInt(27),ak=BigInt(28),lH=BigInt(35),GV={};function sk(W){return q5(Q8(W),32)}class z8{#W;#G;#X;#Y;get r(){return this.#W}set r(W)...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/genossrv.min.jsView on unpkg · L241
•matchType = previous_version_dangerous_delta matchedPackage = genosdb@0.20.0 matchedIdentity = npm:Z2Vub3NkYg:0.20.0 similarity = 0.909 summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/genossrv.min.jsView on unpkg
2var log=(()=>{const n=()=>{};return new Proxy(console,{get:(c,m)=>globalThis.__gdbDebug?c[m].bind(c):n})})(); L3: var E_=Object.create;var{getPrototypeOf:$_,defineProperty:UN,getOwnPropertyNames:F_}=Object;var S_=Object.prototype.hasOwnProperty;function x_(W){return this[W]}var k_,__,_1=(W,G,X... L4: `).join(` L5: `+Z),W.push(V+"m+"+$U.exports.humanize(this.diff)+"\x1B[0m")}else W[0]=ih()+G+" "+W[0]}function ih(){if(WM.inspectOpts.hideDate)return"";return new Date().toISOString()+" "}functio... L6: `)}function ah(W){if(W)process.env.DEBUG=W;else delete process.env.DEBUG}function sh(){return process.env.DEBUG}function th(W){W.inspectOpts={};let G=Object.keys(WM.inspectOpts);fo... L7: `).map((G)=>G.trim()).join(" ")};eT.O=function(W){return this.inspectOpts.colors=this.useColors,EU.inspect(W,this.inspectOpts)}});var YM=Y1((ke,LI)=>{if(typeof process>"u"||process... L8: `).map((Y)=>Y.trim()).filter((Y)=>Y!==""&&!Y.startsWith("#"));while(X.length>0)G.push(jb(X));if(G.length===0)throw Error("PEM: no block");return G}constructor(W,G){this.type=W,this... ... L17: this file except in compliance with the License. You may obtain a copy of the L18: License at http://www.apache.org/license
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/genossrv.min.jsView on unpkg · L2
dist/sm.min.jsView file
4`)+` L5: `)!==this.#Q)throw Error(`BIP39 Wordlist for ${this.locale} FAILED`);this.#J=$}return this.#J}getWord($){let Q=this.#Y();return z($>=0&&$<Q.length,`invalid word index: ${$}`,"index...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/sm.min.jsView on unpkg · L4
dist/ai.min.js.gzView file
•path = dist/ai.min.js.gz kind = compressed_blob sizeBytes = 1913 magicHex = [redacted]
Medium
Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/ai.min.js.gzView on unpkg
dist/gdb.min.js.gzView file
•path = dist/gdb.min.js.gz kind = high_entropy_blob sizeBytes = 28470 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/gdb.min.js.gzView on unpkg

Findings

6 High6 Medium5 Low
HighChild Processdist/genossrv.min.js
HighShell
HighSame File Env Network Executiondist/genossrv.min.js
HighObfuscated
HighShips High Entropy Blobdist/gdb.min.js.gz
HighPrevious Version Dangerous Deltadist/genossrv.min.js
MediumDynamic Requiredist/sm.min.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Compressed Blobdist/ai.min.js.gz
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/genossrv.min.js
LowHigh Entropy Strings
LowUrl Strings
LowNo License