registry / mezon-js / 2.15.65

mezon-js@2.15.65

⚠ Under review

JavaScript client for Mezon server written in TypeScript.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEvalNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTrivial

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.66 MB of source

Source & flagged code

2 flagged

dist/mezon-js.umd.jsView file

1!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globa... L2: //# sourceMappingURL=mezon-js.umd.js.map

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mezon-js.umd.jsView on unpkg · L1

README.mdView file

Lines 31-71markdown

323. Use the connection credentials to build a client object.

34 ```js

35 import {Client} from "mezon-js";

37 var useSSL = false; // Enable if server is run with an SSL certificate.

38 var client = new Client("defaultkey", "127.0.0.1", "7350", useSSL);

39 ```

41## Usage

43The client object has many methods to execute various features in the server or open realtime socket connections with the server.

45### Authenticate

47There's a variety of ways to [authenticate](https://mezon.vn/docs/authentication) with the server. Authentication can create a user if they don't already exist with those credentials. It's also easy to authenticate with a social profile from Google Play Games, Facebook, Game Center, etc.

49```js

50var email = "super@heroes.com";

51var password = "batsignal";

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L51

52const session = await client.authenticateEmail(email, password);

53console.info(session);

54```

56### Sessions

58When authenticated the server responds with an auth token (JWT) which contains useful properties and gets deserialized into a `Session` object.

60```js

61console.info(session.token); // raw JWT token

62console.info(session.refreshToken); // refresh token

63console.info(session.userId);

64console.info(session.username);

65console.info("Session has expired?", session.isexpired(Date.now() / 1000));

66const expiresat = session.expires_at;

67console.warn("Session will expire at", new Date(expiresat * 1000).toISOString());

68```

70It is recommended to store the auth token from the session and check at startup if it has expired. If the token has expired you must reauthenticate. The expiry time of the token can be changed as a setting in the server.

Source & flagged code

2 flagged · loading source

dist/mezon-js.umd.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mezon-js.umd.jsView on unpkg · L1

README.mdView file

51patternName = generic_password severity = medium line = 51 matchedText = var pass...al";

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L51

Findings

1 Critical1 High3 Medium3 Low

CriticalProtestware

HighObfuscated

MediumNetwork

MediumStructural Risk Force Deep Review

MediumSecret PatternREADME.md

LowScripts Present

LowEvaldist/mezon-js.umd.js

LowHigh Entropy Strings

Source & flagged code

2 flagged

dist/mezon-js.umd.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mezon-js.umd.jsView on unpkg · L1

README.mdView file

Lines 31-71markdown

323. Use the connection credentials to build a client object.

34 ```js

35 import {Client} from "mezon-js";

37 var useSSL = false; // Enable if server is run with an SSL certificate.

38 var client = new Client("defaultkey", "127.0.0.1", "7350", useSSL);

39 ```

41## Usage

43The client object has many methods to execute various features in the server or open realtime socket connections with the server.

45### Authenticate

49```js

50var email = "super@heroes.com";

51var password = "batsignal";

Medium

Secret Pattern

Hardcoded password in README.md

README.mdView on unpkg · L51

52const session = await client.authenticateEmail(email, password);

53console.info(session);

54```

56### Sessions

58When authenticated the server responds with an auth token (JWT) which contains useful properties and gets deserialized into a `Session` object.

60```js

61console.info(session.token); // raw JWT token

62console.info(session.refreshToken); // refresh token

63console.info(session.userId);

64console.info(session.username);

65console.info("Session has expired?", session.isexpired(Date.now() / 1000));

66const expiresat = session.expires_at;

67console.warn("Session will expire at", new Date(expiresat * 1000).toISOString());

68```