registry / omnify-bypass / 1.0.0

omnify-bypass@1.0.0

High-performance web scraping automation and resilient HTTP fetch client SDK for Node.js

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 45.6 KB of source, external domains: challenges.cloudflare.com, cloudflare.omnifylabs.sbs, target.com

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-15javascript

1var E=($,Z)=>()=>(Z||$((Z={exports:{}}).exports,Z),Z.exports);var c=E((D2,XZ)=>{class u{constructor(){this.enabled=!1}log(){}}var OZ=new u;XZ.exports={OmnifyTelemetry:u,defaultTelemetry:OZ}});var n=E((b2,WZ)=>{function YZ($){if(!$||$<=0)return"0 B";let Z=1024,N=["B","KB","MB","GB","TB"],G=Math.floor(Math.log($)/Math.log(Z));return`${parseFloat(($/Math.pow(Z,G)).toFixed(2))} ${N[G]}`}class l{constructor($={}){this.concurrency=$.concurrency||3,this.maxQueueSize=$.maxQueueSize||100,this.activeWorkers=0,this.queue=[],this.startTime=Date.now()}async run($){if(this.queue.length>=this.maxQueueSize)th ...

2`)+`

3`}function tZ($,Z={}){let N=(Z.method||"GET").toUpperCase(),G=Z.userAgent||"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36",J=Z.cookieString;if(!J&&Array.isArray(Z.cookies))J=Z.cookies.map((H)=>`${H.name}=${H.value}`).join("; ");let X=Z.singleLine?" ":" \\\n ",V=[`curl -X ${N} "${$}"`];if(V.push(`-H "User-Agent: ${G}"`),J)V.push(`-H "Cookie: ${J}"`);if(V.push('-H "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"'),V.push('-H "Accept-Language: en-US,en;q=0.9"'),Z.headers){for(let[H,Y] ...

4 <!DOCTYPE html>

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L1

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/index.jsView on unpkg · L1

5 <html>

6 <head>

7 <title>Omnify Turnstile Fast Solver</title>

8 <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>

9 </head>

10 <body style="background:#000;margin:0;display:flex;align-items:center;justify-content:center;height:100vh;">

11 <div id="cf-turnstile-container"></div>

12 </body>

13 </html>

14 `;await Y.setContent(j,{waitUntil:"domcontentloaded"});let K=await Y.evaluate(async(Q,z)=>{return new Promise((W)=>{let

Long lines were clipped for display.

package.jsonView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

package.jsonView on unpkg

Source & flagged code

3 flagged · loading source

dist/index.jsView file

1var E=($,Z)=>()=>(Z||$((Z={exports:{}}).exports,Z),Z.exports);var c=E((D2,XZ)=>{class u{constructor(){this.enabled=!1}log(){}}var OZ=new u;XZ.exports={OmnifyTelemetry:u,defaultTele... L2: `)+` L3: `}function tZ($,Z={}){let N=(Z.method||"GET").toUpperCase(),G=Z.userAgent||"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari... L4: <!DOCTYPE html>

omnify-bypass@1.0.0

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code