registry  /  os-dpt  /  0.2.0

os-dpt@0.2.0

⚠ Under review

Local web-based SQL editor with a built-in chat-to-SQL AI agent.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 4 file(s), 2.11 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, console.anthropic.com, example.com, github.com, radix-ui.com, react.dev, www.braintrust.dev, www.ibm.com, www.w3.org

Source & flagged code

2 flagged · loading source
server/dist/client/assets/index-4qMZFL9L.jsView file
93contains invisible/control Unicode U+200B (zero width space) `).at(-1);if(a&&a.trim().length>0)return`${t}<U+200B>`}if(NAe.test(i)&&!n.match(MAe)){let a=r.split(`
Critical
Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/dist/client/assets/index-4qMZFL9L.jsView on unpkg · L93
server/dist/client/assets/inter-greek-wght-normal-CkhJZR-_.woff2View file
•path = server/dist/client/assets/inter-greek-wght-normal-CkhJZR-_.woff2 kind = high_entropy_blob sizeBytes = 18996 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

server/dist/client/assets/inter-greek-wght-normal-CkhJZR-_.woff2View on unpkg

Findings

1 Critical1 High4 Medium7 Low
CriticalTrojan Source Unicodeserver/dist/client/assets/index-4qMZFL9L.js
HighShips High Entropy Blobserver/dist/client/assets/inter-greek-wght-normal-CkhJZR-_.woff2
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings