registry / mobkit / 0.9.0

mobkit@0.9.0

MobKit —— APICloud / AVM 移动工程的 WiFi 真机同步、用友云工作台集成与 MCP 服务。命令行（mobkit / mk）与程序化库（import { wifiSync } from 'mobkit'）同包。

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 4 file(s), 2.37 MB of source, external domains: 127.0.0.1, community.apicloud.com, github.com, jimmy.warting.se, json-schema.org, open.diwork.com, raw.githubusercontent.com, www.w3.org

Source & flagged code

6 flagged

dist/vite.mjsView file

Lines 1-39javascript

1import{createRequire as H0}from"node:module";var G0=Object.create;var{getPrototypeOf:X0,defineProperty:k$,getOwnPropertyNames:N0}=Object;var K0=Object.prototype.hasOwnProperty;function Y0(n){return this[n]}var U0,W0,Pn=(n,t,i)=>{var f=n!=null&&typeof n==="object";if(f){var $=t?U0??=new WeakMap:W0??=new WeakMap,c=$.get(n);if(c)return c}i=n!=null?G0(X0(n)):{};let u=t||!n||!n.__esModule?k$(i,"default",{value:n,enumerable:!0}):i;for(let y of N0(n))if(!K0.call(u,y))k$(u,y,{get:Y0.bind(n,y),enumerable:!0});if(f)$.set(n,u);return u};var _=(n,t)=>()=>(t||n((t={exports:{}}).exports,t),t.exports);var Qn ...

2`).join(`\r

3`)),$.removeListener("error",fu),J.setSocket($,c,{allowSynchronousEvents:this.options.allowSynchronousEvents,maxBufferedChunks:this.options.maxBufferedChunks,maxFragments:this.options.maxFragments,maxPayload:this.options.maxPayload,skipUTF8Validation:this.options.skipUTF8Validation}),this.clients)this.clients.add(J),J.on("close",()=>{if(this.clients.delete(J),this._shouldEmitClose&&!this.clients.size)process.nextTick(pt,this)});u(J,f)}}cu.exports=$u;function D2(n,t){for(let i of Object.keys(t))n.on(i,t[i]);return function(){for(let f of Object.keys(t))n.removeListener(f,t[f])}}function pt(n){n ...

4`+Object.keys(f).map(($)=>`${$}: ${f[$]}`).join(`\r

5`)+`\r

6\r

7`+i)}function mt(n,t,i,f,$,c){if(n.listenerCount("wsClientError")){let u=Error($);Error.captureStackTrace(u,mt),n.emit("wsClientError",u,i,t)}

8]))+`;v5.KANJI=new RegExp(gi,"g");v5.BYTE_KANJI=new RegExp("[^A-Z0-9 $%*+\\-./:]+","g");v5.BYTE=new RegExp(_5,"g");v5.NUMERIC=new RegExp("[0-9]+","g");v5.ALPHANUMERIC=new RegExp("[A-Z $%*+\\-./:]+","g");var E5=new RegExp("^"+gi+"$"),w5=new RegExp("^[0-9]+$"),D5=new RegExp("^[A-Z0-9 $%*+\\-./:]+$");v5.testKanji=function(t){return E5.test(t)};v5.testNumeric=function(t){return w5.test(t)};v5.testAlphanumeric=function(t){return D5.test(t)}});var ut=_((i6)=>{var n6=Df(),ef=vf();i6.NUMERIC={id:"Numeric",bit:1,ccBits:[10,12,14]};i6.ALPHANUMERIC={id:"Alphanumeric",bit:2,ccBits:[9,11,13]};i6.BYTE={id:" ...

9Make sure your charset is UTF-8`);i=(i>>>8&255)*192+(i&255),n.put(i,13)}};x1.exports=zt});var B1=_((tQ,n$)=>{var Ji={

10 Suggested mode is: `+Gn.toString(f));if(i===Gn.KANJI&&!pi.isKanjiModeEnabled())i=Gn.BYTE;switch(i){case Gn.NUMERIC:return new j1(n);case Gn.ALPHANUMERIC:return new q1(n);case Gn.KANJI:return new L1(n);case Gn.BYTE:return new O1(n)}}A6.fromArray=function(t){return t.reduce(function(i,f){if(typeof f==="string")i.push(s1(f,null));else if(f.data)i.push(s1(f.data,f.mode));return i},[])};A6.fromString=function(t,i){let f=P1(t,pi.isKanjiModeEnabled()),$=T6(f),c=M6($,i),u=W6.find_path(c.map,"start","end"),y=[];for(let g=1;g<u.length-1;g++)y.push(c.table[u[g]].node);return A6.fromArray(H6(y))};A6.rawS ...

11The chosen QR Code version cannot contain this amount of data.

12Minimum version required to store current data is: `+c+`.

13`);let u=E6(t,i,$),y=ki.getSymbolSize(t),g=new C6(y);if(O6(g,t),L6(g),P6(g,t),c$(g,i,0),t>=7)l6(g,t);if(_6(g,u),

14`);let J=Array(f.margin+1).join($.WW);y+=g;for(let F=0;F<c;F+=2){y+=J;for(let Z=0;Z<c;Z++){let m=u[F*c+Z],W=u[(F+1)*c+Z];y+=Ug(m,W,$)}y+=J+`

15`}if(y+=g.slice(0,-1),typeof i==="function")i(null,y);return y};Wg.renderToFile=function(t,i,f,$){if(typeof $>"u")$=f,f=void 0;let c=Qn("fs"),u=Wg.render(i,f);c.writeFile(t,u,$)}});var Oy=_((Tg)=>{Tg.render=function(n,t,i){let f=n.modules.size,$=n.modules.data,c="\x1B[40m \x1B[0m",u="\x1B[47m \x1B[0m",y="",g=Array(f+3).join("\x1B[47m \x1B[0m"),J=Array(2).join("\x1B[47m \x1B[0m");y+=g+`

16`;for(let F=0;F<f;++F){y+="\x1B[47m \x1B[0m";for(let Z=0;Z<f;Z++)y+=$[F*f+Z]?"\x1B[40m \x1B[0m":"\x1B[47m \x1B[0m";y+=J+`

17`}if(y+=g+`

18`,typeof i==="function")i(null,y);return y}});var ly=_((xg)=>{var Ag="\x1B[47m\x1B[30m",Sg="\x1B[40m\x1B[37m",Rg=function(n,t,i){return{"00":"\x1B[0m "+n,"01":"\x1B[0m"+t+"▄"+n,"02":"\x1B[0m"+i+"▄"+n,10:"\x1B[0m"+t+"▀"+n,11:" ",12:"▄",20:"\x1B[0m"+i+"▀"+n,21:"▀",22:"█"}},Ly=function(n,t,i,f){let $=t+1;if(i>=$||f>=$||f<-1||i<-1)return"0";if(i>=t||f>=t||f<0||i<0)return"1";let c=f*t+i;return n[c]?"2":"1"},Py=function(n,t,i,f){return Ly(n,t,i,f)+Ly(n,t,i,f+1)};xg.render=function(n,t,i){let f=n.modules.size,$=n.modules.data,c=!!(t&&t.inverse),u=t&&t.inverse?Sg:Ag,J=Rg(u,c?"\x1B[30m":"\x1B[37m",c?"\ ...

19`+u,Z=u;for(let m=-1;m<f+1;m+=2){for(let W=-1;W<f;W++

20`;if(typeof f==="function")f(null,m);return m}});var Dy=_((_g)=>{var lg=M$();_g

21(function(){

High

Child Process

Package source references child process execution.

dist/vite.mjsView on unpkg · L19

22 function syncOrigin(){

23 if(typeof window.__MOBKIT_SYNC_ORIGIN__==='string'&&window.__MOBKIT_SYNC_ORIGIN__)

24 return window.__MOBKIT_SYNC_ORIGIN__;

25 if(location.protocol==='http:'||location.protocol==='https:')

26 return location.origin;

27 return null;

28 }

29 var base=syncOrigin();

30 if(!base)return;

31 var p=null;

32 try{

33 var x=new XMLHttpRequest();

34 x.open('GET',base+'/_mobkit/dev-lane',false);

35 x.send(null);

36 if(x.status===200&&x.responseText)p=JSON.parse(x.responseText);

37 }catch(e){}

38 if(!p||!p.url)return;

39 var budget=p.timeoutMs||1500,done=false,entry=p.entry||'/index.html';

Long lines were clipped for display.

dist/index.mjsView file

1import{createRequire as lBA}from"node:module";var bBA=Object.create;var{getPrototypeOf:yBA,defineProperty:n9,getOwnPropertyNames:kBA}=Object;var xBA=Object.prototype.hasOwnProperty... L2: `);$=U.pop()??"";for(let N of U)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function rBA(A,Q,B){return new Promise((I,E)=>{let g=u9(A,Q,{sig... L3: `).slice(1)){let I=B.trim();if(!I)continue;let[E,g,...C]=I.split(/\s+/);if(!E||!g)continue;let D=Object.fromEntries(C.map((F)=>F.split(":")).filter((F)=>F.length===2)),$=g==="devic... L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await a9(B,"const.product.model")??B,model:await a9(B,"const.p... L5: `).join(`\r

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.mjsView on unpkg · L1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.mjsView on unpkg · L1

Source & flagged code

6 flagged · loading source

dist/vite.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code