registry  /  mcp-inbox  /  2.0.0

mcp-inbox@2.0.0

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 23 file(s), 1.20 MB of source, external domains: dotenvx.com, github.com, pris.ly, unpkg.com, www.prisma.io

Source & flagged code

3 flagged · loading source
prisma/generated/client/client.jsView file
4// biome-ignore-all lint: generated file L5: module.exports = { ...require('.') }
Medium
Dynamic Require

Package source references dynamic require/import behavior.

prisma/generated/client/client.jsView on unpkg · L4
prisma/generated/client/libquery_engine-debian-openssl-3.0.x.so.nodeView file
•path = prisma/generated/client/libquery_engine-debian-openssl-3.0.x.so.node kind = native_binary sizeBytes = 17547808 magicHex = [redacted]
Medium
Ships Native Binary

Package ships native binary artifacts.

prisma/generated/client/libquery_engine-debian-openssl-3.0.x.so.nodeView on unpkg
prisma/generated/client/query_engine_bg.wasmView file
•path = prisma/generated/client/query_engine_bg.wasm kind = wasm_module sizeBytes = 2297601 magicHex = [redacted]
Medium
Ships Wasm Module

Package ships WebAssembly modules.

prisma/generated/client/query_engine_bg.wasmView on unpkg

Findings

1 High7 Medium5 Low
HighObfuscated
MediumDynamic Requireprisma/generated/client/client.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Native Binaryprisma/generated/client/libquery_engine-debian-openssl-3.0.x.so.node
MediumShips Wasm Moduleprisma/generated/client/query_engine_bg.wasm
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings