registry / kasookoo-click-to-call-widget / 0.1.0-beta.0
kasookoo-click-to-call-widget@0.1.0-beta.0
⚠ Under reviewFramework-agnostic click-to-call widget for Kasookoo — a built-in dialer and call window that places outbound SIP/phone calls over WebRTC.
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsNetworkWebSocket
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
3 flaggeddist/kasookoo-dialer.jsView file
1var Pr=i=>{throw TypeError(i)};var ri=(i,e,t)=>e.has(i)||Pr("Cannot "+t);var Qt=(i,e,t)=>(ri(i,e,"read from private field"),t?t.call(i):e.get(i)),Xt=(i,e,t)=>e.has(i)?Pr("Cannot ad...
L2: `:case"\r":case" ":case" ":continue;default:throw Error("invalid base64 string.")}switch(s){case 0:o=r,s=1;break;case 1:t[n++]=o<<2|(r&48)>>4,o=r,s=2;break;case 2:t[n++]=(o&15)<<4|...
High
Child Process
Package source references child process execution.
dist/kasookoo-dialer.jsView on unpkg · L11var Pr=i=>{throw TypeError(i)};var ri=(i,e,t)=>e.has(i)||Pr("Cannot "+t);var Qt=(i,e,t)=>(ri(i,e,"read from private field"),t?t.call(i):e.get(i)),Xt=(i,e,t)=>e.has(i)?Pr("Cannot ad...
L2: `:case"\r":case" ":case" ":continue;default:throw Error("invalid base64 string.")}switch(s){case 0:o=r,s=1;break;case 1:t[n++]=o<<2|(r&48)>>4,o=r,s=2;break;case 2:t[n++]=(o&15)<<4|...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/kasookoo-dialer.jsView on unpkg · L112patternName = generic_password
severity = medium
line = 12
Findings
2 High3 Medium4 Low
HighChild Processdist/kasookoo-dialer.js
HighSame File Env Network Executiondist/kasookoo-dialer.js
MediumSecret Patterndist/kasookoo-dialer.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to kasookoo-click-to-call-widget@0.1.0-beta.0.
See all versions of kasookoo-click-to-call-widget for other recorded verdicts.
- Review the evidence and your use of kasookoo-click-to-call-widget@0.1.0-beta.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.