registry / salt-sdk / 0.0.33

salt-sdk@0.0.33

SDK for interacting with Salt's MPC self custody & treasury

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EvalNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 2 file(s), 1.99 MB of source, external domains: amoy.polygonscan.com, app.hyperliquid-testnet.xyz, app.hyperliquid.xyz, app.salt.space, arbiscan.io, basescan.org, download.docker.com, etherscan.io, explorer.somnia.network, hoodi.etherscan.io, monad-testnet.socialscan.io, monad.socialscan.io, moonbase.moonscan.io, moonscan.io, polygonscan.com, sepolia.arbiscan.io, sepolia.basescan.org, sepolia.etherscan.io, shannon-explorer.somnia.network, staging.salt.space, subnets.avax.network, testnet.avascan.info, testnet.salt.space, us-east-1.console.aws.amazon.com

Source & flagged code

2 flagged

dist/signer-BbarZdLU.jsView file

1const _0x1b8569=_0x2d05;(function(_0x292aef,_0x67444){const _0x24aff0=_0x2d05,_0x3b2b4d=_0x292aef();while(!![]){try{const _0x58b4b4=-parseInt(_0x24aff0(0x83f))/0x1+-parseInt(_0x24a...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/signer-BbarZdLU.jsView on unpkg · L1

1const _0x1b8569=_0x2d05;(function(_0x292aef,_0x67444){const _0x24aff0=_0x2d05,_0x3b2b4d=_0x292aef();while(!![]){try{const _0x58b4b4=-parseInt(_0x24aff0(0x83f))/0x1+-parseInt(_0x24a...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/signer-BbarZdLU.jsView on unpkg · L1

Source & flagged code

2 flagged · loading source

dist/signer-BbarZdLU.jsView file

1const _0x1b8569=_0x2d05;(function(_0x292aef,_0x67444){const _0x24aff0=_0x2d05,_0x3b2b4d=_0x292aef();while(!![]){try{const _0x58b4b4=-parseInt(_0x24aff0(0x83f))/0x1+-parseInt(_0x24a...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/signer-BbarZdLU.jsView on unpkg · L1

1const _0x1b8569=_0x2d05;(function(_0x292aef,_0x67444){const _0x24aff0=_0x2d05,_0x3b2b4d=_0x292aef();while(!![]){try{const _0x58b4b4=-parseInt(_0x24aff0(0x83f))/0x1+-parseInt(_0x24a...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/signer-BbarZdLU.jsView on unpkg · L1

Findings

2 High2 Medium5 Low

HighObfuscated Payload Loaderdist/signer-BbarZdLU.js

HighObfuscated

MediumNetwork

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/signer-BbarZdLU.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License