registry / myxl-core / 1.0.3

myxl-core@1.0.3

MyXL API client — auth, payments, family, packages

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 29 file(s), 432 KB of source, external domains: api.myxl.xlaxiata.co.id, gede.ciam.xlaxiata.co.id, xl-ku.my.id

Source & flagged code

1 flagged

dist/device.jsView file

Lines 1-36javascript

1// @bun

2var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);

4// src/lib/encrypt-helper.ts

5var init_encrypt_helper = __esm(() => {

6 init_config();

7});

9// src/encrypt.ts

10var init_encrypt = __esm(() => {

11 init_config();

12 init_encrypt_helper();

13 init_encrypt_helper();

14});

16// src/lib/utils.ts

17import axios from "axios";

18import { v4 as uuidv4 } from "uuid";

19import { DateTime } from "luxon";

20function unseal(getter, fallback) {

21 try {

22 const hex = getter();

23 if (!hex || typeof __SEED__ === "undefined")

24 return fallback;

25 const seed = Buffer.from(__SEED__, "hex");

26 const data = Buffer.from(hex, "hex");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/device.jsView on unpkg · L16

27 return Buffer.from(data.map((b, i) => b ^ seed[i % seed.length])).toString("utf8");

28 } catch {

29 return fallback;

30 }

31}

32var init_utils = __esm(() => {

33 init_config();

34 init_encrypt();

35});

Source & flagged code

1 flagged · loading source

dist/device.jsView file

16// src/lib/utils.ts L17: import axios from "axios"; L18: import { v4 as uuidv4 } from "uuid"; ... L24: return fallback; L25: const seed = Buffer.from(__SEED__, "hex"); L26: const data = Buffer.from(hex, "hex");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/device.jsView on unpkg · L16

Findings

2 Medium5 Low

MediumNetwork

MediumWildcard Dependency

LowScripts Present

LowWeak Cryptodist/device.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License