Static Scan Results
scanned 2h ago · by rust-scannerStatic analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourcesrc/cjs/fetchUtils/fetchModule.cjsView file
1const fetch = require("node-fetch").default;
L2: const { configExist } = require("../configHelper.cjs");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
src/cjs/fetchUtils/fetchModule.cjsView on unpkg · L1document agent.cmdView file
•path = document agent.cmd
kind = build_helper
sizeBytes = 190
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
document agent.cmdView on unpkgpackage.jsonView file
•Runtime dependency names matching Node built-ins: child_process, os, path
High
Node Builtin Dependency Squat
Package declares a runtime dependency whose name matches a Node built-in module.
package.jsonView on unpkgFindings
1 High5 Medium4 Low
HighNode Builtin Dependency Squatpackage.json
MediumDynamic Requiresrc/cjs/fetchUtils/fetchModule.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdocument agent.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings