Static Scan Results
scanned 2h ago · by rust-scannerStatic analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
2 flagged · loading sourcedist/pptxgen.bundle.jsView file
1/* PptxGenJS 0.0.1 @ 2026-07-06T01:38:25.769Z */
L2: !function(e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):("undefined"!=typeof window?window:"undefine...
L3: | SLIDE [${d.length}]: ROW [${e}]: START...`),0),s=0,A=!1;for(;!A;){var l=n[i];let e=o[i];n.forEach(e=>{e._lineHeight>=s&&(s=e._lineHeight)}),f+s>u&&(p.verbose&&(console.log("\n|--...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/pptxgen.bundle.jsView on unpkg · L1package.jsonView file
•Runtime dependency names matching Node built-ins: https
High
Node Builtin Dependency Squat
Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkgFindings
1 High1 Medium5 Low
HighNode Builtin Dependency Squatpackage.json
MediumNetwork
LowScripts Present
LowEvaldist/pptxgen.bundle.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings