oddsockets-nodejs@1.0.2

Official Node.js SDK for OddSockets real-time messaging platform

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequire

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 9 file(s), 460 KB of source, external domains: cdn.example.com

Source & flagged code

2 flagged

dist/Channel.jsView file

Lines 1-1javascript

1function a0_0x371337(_0x1c09e5,_0x45eb2e){return a0_0x2299(_0x45eb2e- -0x1aa,_0x1c09e5);}(function(_0x44f5e3,_0x1ce0b4){function _0x221cf0(_0x5d2017,_0x2b0d0b){return a0_0x2299(_0x5d2017-0x2bf,_0x2b0d0b);}function _0x33a6a0(_0xdd84b3,_0x3d4337){return a0_0x2299(_0xdd84b3-0x1a0,_0x3d4337);}const _0x2887c3=_0x44f5e3();while(!![]){try{const _0x4a0085=-parseInt(_0x33a6a0(0x388,'\x51\x79\x4c\x6b'))/(-0xbd0+0x13d7*0x1+-0x806)*(parseInt(_0x33a6a0(0x387,'\x28\x2a\x77\x45'))/(-0x468+-0xe*0x11e+-0x12e*-0x11))+parseInt(_0x221cf0(0x5ad,'\x38\x69\x4b\x4c'))/(-0xd77+-0x19df+-0x59f*-0x7)*(-parseInt(_0x33a6a0 ...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/Channel.jsView on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/Channel.jsView on unpkg · L1

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

dist/Channel.jsView file

1function a0_0x371337(_0x1c09e5,_0x45eb2e){return a0_0x2299(_0x45eb2e- -0x1aa,_0x1c09e5);}(function(_0x44f5e3,_0x1ce0b4){function _0x221cf0(_0x5d2017,_0x2b0d0b){return a0_0x2299(_0x...

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code