registry / matterbridge / 3.9.4

matterbridge@3.9.4

⚠ Under review

Matterbridge plugin manager for Matter

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 34 file(s), 1.13 MB of source, external domains: api.npmjs.org, discord.gg, fb.me, github.com, json-schema.org, matterbridge.io, mui.com, raw.githubusercontent.com, react.dev, reactrouter.com, registry.npmjs.org, www.buymeacoffee.com, www.npmjs.com, www.w3.org

Source & flagged code

1 flagged

apps/frontend/build/assets/vendor_mui.jsView file

Lines 118-138javascript

118 0% {

119 stroke-dasharray: 1px, 200px;

120 stroke-dashoffset: 0;

121 }

122

123 50% {

124 stroke-dasharray: 100px, 200px;

125 stroke-dashoffset: -15px;

126 }

127

128 100% {

129 stroke-dasharray: 1px, 200px;

130 stroke-dashoffset: -126px;

131 }

132`,vo=typeof go==`string`?null:s`

133 animation: ${go} 1.4s linear infinite;

134 `,yo=typeof _o==`string`?null:s`

135 animation: ${_o} 1.4s ease-in-out infinite;

136 `,bo=e=>{let{classes:t,variant:n,color:r,disableShrink:i}=e;return K({root:[`root`,n,`color${Y(r)}`],svg:[`svg`],track:[`track`],circle:[`circle`,`circle${Y(n)}`,i&&`circleDisableShrink`]},mo,t)},xo=J(`span`,{name:`MuiCircularProgress`,slot:`Root`,overridesResolver:(e,t)=>{let{ownerState:n}=e;return[t.root,t[n.variant],t[`color${Y(n.color)}`]]}})(X(({theme:e})=>({display:`inline-block`,variants:[{props:{variant:`determinate`},style:{transition:e.transitions.create(`transform`)}},{props:{variant:`indeterminate`},style:vo||{animation:`${go} 1.4s linear infinite`}},...Object.entries(e.palet ...

137`&&(n.value+=` `);let o=a.boxSizing,s=al(a.paddingBottom)+al(a.paddingTop),c=al(a.borderBottomWidth)+al(a.borderTopWidth),u=n.scrollHeight;n.value=`x`;let d=n.scrollHeight,f=u;return i&&(f=Math.max(Number(i)*d,f)),r&&(f=Math.

138`),a=t.selectionStart===r;i&&a&&t.setSelectionRange(r,r),n&&n(e)},ref:u,rows:i,style:a,...s}),(0,T.jsx)(`textarea`,{"aria-hidden":!0,className:e.className,readOnly:!0,ref:p,tabIndex:-1,style:{...ol.shadow,...a,paddingTop:0,paddingBottom:0}})]})});function ul({props:e,states:t,muiFormControl:n}){return t.reduce((t,r)=>(t[r]=e[r],n&&e[r]===void 0&&(t[r]=n[r]),t),{})}var dl=f.createContext(void 0);function fl(){return f.useContext(dl)}function pl(e){return e!=null&&!(Array.isArray(e)&&e.length===0)}function ml(e,t=!1){return e&&(pl(e.value)&&e.value!==``||t&&pl(e.defaultValue)&&e.defaultValue!==` ...

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/frontend/build/assets/vendor_mui.jsView on unpkg · L138

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

apps/frontend/build/assets/vendor_mui.jsView file

138contains invisible/control Unicode U+200B (zero width space) `),a=t.selectionStart===r;i&&a&&t.setSelectionRange(r,r),n&&n(e)},ref:u,rows:i,style:a,...s}),(0,T.jsx)(`textarea`,{"aria-hidden":!0,className:e.className,readOnly:!0,ref:p,tabIndex:-1,style:{...ol.shadow,...a,paddingTop:0,paddingBottom:0}}

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/frontend/build/assets/vendor_mui.jsView on unpkg · L138

Findings

1 Critical4 Medium3 Low

CriticalTrojan Source Unicodeapps/frontend/build/assets/vendor_mui.js

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

apps/frontend/build/assets/vendor_mui.jsView file

Lines 118-138javascript

118 0% {

119 stroke-dasharray: 1px, 200px;

120 stroke-dashoffset: 0;

121 }

122

123 50% {

124 stroke-dasharray: 100px, 200px;

125 stroke-dashoffset: -15px;

126 }

127

128 100% {

129 stroke-dasharray: 1px, 200px;

130 stroke-dashoffset: -126px;

131 }

132`,vo=typeof go==`string`?null:s`

133 animation: ${go} 1.4s linear infinite;

134 `,yo=typeof _o==`string`?null:s`

135 animation: ${_o} 1.4s ease-in-out infinite;

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

apps/frontend/build/assets/vendor_mui.jsView on unpkg · L138

Long lines were clipped for display.