registry  /  skykoi  /  2026.3.389

skykoi@2026.3.389

⚠ Under review

SkyKoi — Koi runtime. Multi-channel gateway CLI with RPC Koi.

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 50 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 779 file(s), 19.5 MB of source, external domains: 127.0.0.1, 169.254.169.254, 169.254.170.2, 192.168.1.100, a.co, accounts.google.com, albumart.url, api.anthropic.com, api.botframework.com, api.cerebras.ai, api.chutes.ai, api.deepgram.com, api.elevenlabs.io, api.firecrawl.dev, api.github.com, api.groq.com, api.individual.githubcopilot.com, api.kimi.com, api.minimax.chat, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.perplexity.ai, api.plivo.com, api.synthetic.new, api.telnyx.com, api.twilio.com, api.us.nylas.com, api.venice.ai, api.voyageai.com, api.x.ai, api.xiaomimimo.com, attacker.azureedge.net, auth.openai.com, aws.amazon.com, bedrock-runtime.us-east-1.amazonaws.com, bot-api.zaloplatforms.com, bot.zaloplatforms.com, bun.sh, cfg.example.org, chat.example.com, chat.googleapis.com, chat.qwen.ai, chatgpt.com, chutes.ai, claude.ai, cli.github.com
Oversized source lightweight scan
dist/dist-DmzuSdk3.js4.72 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsCryptoShellHighEntropyStringsUrlStringscli.github.comgithub.compi.dev
dist/dist-niRQNrwJ.js2.01 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsWebSocketHighEntropyStringsUrlStrings127.0.0.1accounts.google.comapi.anthropic.comapi.cerebras.aiapi.groq.comapi.individual.githubcopilot.comapi.kimi.comapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.openai.comauth.openai.combedrock-runtime.us-east-1.amazonaws.comchatgpt.comclaude.aicloudcode-pa.googleapis.comconsole.anthropic.comdaily-cloudcode-pa.sandbox.googleapis.comgenerativelanguage.googleapis.comgoo.gleoauth2.googleapis.comopencode.airouter.huggingface.cowww.googleapis.com
dist/login-qr-Bq6nob7r.js3.90 MB file, sampled 256 KB
FilesystemChildProcessEvalCryptoShellWebSocket
dist/opus-ml-BT8HD4Wf.js3.91 MB file, sampled 256 KB
HighEntropyStrings
dist/plugin-sdk/index.js7.98 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellWebSocketHighEntropyStringsUrlStringsskykoi.com
dist/plugin-sdk/opus-ml-0BycUTjo.js3.91 MB file, sampled 256 KB
HighEntropyStrings
dist/plugin-sdk/pi-model-discovery-lynj0LAO.js5.86 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellWebSocketHighEntropyStringsUrlStringsapi.anthropic.comapi.cerebras.aiapi.github.comapi.groq.comapi.individual.githubcopilot.comapi.kimi.comapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.openai.combedrock-runtime.us-east-1.amazonaws.comchatgpt.comcloudcode-pa.googleapis.comcodeload.github.comdaily-cloudcode-pa.sandbox.googleapis.comgenerativelanguage.googleapis.comgist.githubusercontent.comgithub.comopencode.airouter.huggingface.co
dist/pw-ai-ByKRZUzk.js4.20 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsEvalCryptoDynamicRequireHighEntropyStringsUrlStringsdotenvx.comwww.apache.org
dist/reply-CfA8e7Pe.js5.28 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsNativeBindingsCryptoShellHighEntropyStringsUrlStringsapi.deepgram.comapi.groq.comapi.openai.comexample.comgenerativelanguage.googleapis.com

Source & flagged code

40 flagged · loading source
dist/dist-BJQ4qJgE.jsView file
20273patternName = aws_access_key severity = critical line = 20273 matchedText = var Q = ...==";
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/dist-BJQ4qJgE.jsView on unpkg · L20273
20273patternName = aws_access_key severity = critical line = 20273 matchedText = var Q = ...==";
Critical
Secret Pattern

AWS access key ID in dist/dist-BJQ4qJgE.js

dist/dist-BJQ4qJgE.jsView on unpkg · L20273
dist/doctor-completion-CDF0CrIu.jsView file
7import path from "node:path"; L8: import { spawnSync } from "node:child_process"; L9:
High
Child Process

Package source references child process execution.

dist/doctor-completion-CDF0CrIu.jsView on unpkg · L7
dist/gateway-cli-CcHR-Pug.jsView file
59import "./tui-fast-lane-Ev2oUXQf.js"; L60: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-Bxhfs1xr.js"; L61: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Cz2pl07T.js"; L62: import { $ as validateNodePairListParams, A as [redacted], At as errorShape, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb... L63: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-BTi_uq-4.js"; ... L84: import { n as resolveMessageChannelSelection } from "./channel-selection-BSuFqCaq.js"; L85: import { g as isPrivateMode, h as isAudioMuted, v as setAudioMuted, y as setPrivateMode } from "./identify-DFi1kVgv.js"; L86: import "./registry-BwlCjCgP.js"; ... L146: import { execFile, spawn, spawnSync } from "node:child_process"; L147: import { WebSocketServer } from "ws"; L148: import crypto, { createHash, randomUUID } from "node:crypto"; ... L207: });
Critical
Remote Asset Decode Execute

Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L59
•Trigger-reachable chain: manifest.main -> dist/index.js -> dist/register.subclis-Bjjgcf7H.js -> dist/gateway-cli-CcHR-Pug.js Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/gateway-cli-CcHR-Pug.jsView on unpkg
61import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Cz2pl07T.js"; L62: import { $ as validateNodePairListParams, A as [redacted], At as errorShape, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb... L63: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-BTi_uq-4.js";
High
Shell

Package source references shell execution.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L61
59import "./tui-fast-lane-Ev2oUXQf.js"; L60: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-Bxhfs1xr.js"; L61: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Cz2pl07T.js"; L62: import { $ as validateNodePairListParams, A as [redacted], At as errorShape, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb... L63: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-BTi_uq-4.js"; ... L84: import { n as resolveMessageChannelSelection } from "./channel-selection-BSuFqCaq.js"; L85: import { g as isPrivateMode, h as isAudioMuted, v as setAudioMuted, y as setPrivateMode } from "./identify-DFi1kVgv.js"; L86: import "./registry-BwlCjCgP.js"; ... L146: import { execFile, spawn, spawnSync } from "node:child_process"; L147: import { WebSocketServer } from "ws"; L148: import crypto, { createHash, randomUUID } from "node:crypto"; ... L207: });
High
Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L59
59Cross-file remote execution chain: dist/gateway-cli-CcHR-Pug.js spawns dist/model-selection-DANeZg-K.js; helper contains network access plus dynamic code execution. L59: import "./tui-fast-lane-Ev2oUXQf.js"; L60: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-Bxhfs1xr.js"; L61: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Cz2pl07T.js"; L62: import { $ as validateNodePairListParams, A as [redacted], At as errorShape, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb... L63: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-BTi_uq-4.js"; ... L84: import { n as resolveMessageChannelSelection } from "./channel-selection-BSuFqCaq.js"; L85: import { g as isPrivateMode, h as isAudioMuted, v as setAudioMuted, y as setPrivateMode } from "./identify-DFi1kVgv.js"; L86: import "./registry-BwlCjCgP.js"; ... L146: import { execFile, spawn, spawnSync } from "node:child_process"; L147: import { WebSocketServer } from "ws"; L148: import crypto, { createHash, randomUUID } from "node:crypto"; ... L207: });
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L59
4610if (isDisabledByEnv$1()) return { stop: async () => {} }; L4611: const { getResponder, Protocol } = await import("./lib-DwFfM5Cm.js").then((m) => /* @__PURE__ */ __toESM(m.default, 1)); L4612: const responder = getResponder();
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L4610
59import "./tui-fast-lane-Ev2oUXQf.js"; L60: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-Bxhfs1xr.js"; L61: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Cz2pl07T.js"; L62: import { $ as validateNodePairListParams, A as [redacted], At as errorShape, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb... L63: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-BTi_uq-4.js"; ... L84: import { n as resolveMessageChannelSelection } from "./channel-selection-BSuFqCaq.js"; L85: import { g as isPrivateMode, h as isAudioMuted, v as setAudioMuted, y as setPrivateMode } from "./identify-DFi1kVgv.js"; L86: import "./registry-BwlCjCgP.js"; ... L146: import { execFile, spawn, spawnSync } from "node:child_process"; L147: import { WebSocketServer } from "ws"; L148: import crypto, { createHash, randomUUID } from "node:crypto"; ... L207: });
Medium
Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L59
59import "./tui-fast-lane-Ev2oUXQf.js"; L60: import { i as [redacted], s as verifyDeviceSignature, t as deriveDeviceIdFromPublicKey } from "./device-identity-Bxhfs1xr.js"; L61: import { n as pickPrimaryTailnetIPv6, t as pickPrimaryTailnetIPv4 } from "./tailnet-Cz2pl07T.js"; L62: import { $ as validateNodePairListParams, A as [redacted], At as errorShape, B as validateKoiIdentityParams, C as validateCronUpdateParams, Ct as validateWeb... L63: import { n as callGateway, s as loadGatewayTlsRuntime$1 } from "./call-BTi_uq-4.js"; ... L84: import { n as resolveMessageChannelSelection } from "./channel-selection-BSuFqCaq.js"; L85: import { g as isPrivateMode, h as isAudioMuted, v as setAudioMuted, y as setPrivateMode } from "./identify-DFi1kVgv.js"; L86: import "./registry-BwlCjCgP.js"; ... L146: import { execFile, spawn, spawnSync } from "node:child_process"; L147: import { WebSocketServer } from "ws"; L148: import crypto, { createHash, randomUUID } from "node:crypto"; ... L207: });
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/gateway-cli-CcHR-Pug.jsView on unpkg · L59
skills/model-usage/scripts/model_usage.pyView file
•path = skills/model-usage/scripts/model_usage.py kind = build_helper sizeBytes = 10483 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/model_usage.pyView on unpkg
dist/pw-ai-ByKRZUzk.jsView file
•path = dist/pw-ai-ByKRZUzk.js kind = oversized_source_file sizeBytes = 4402452 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/pw-ai-ByKRZUzk.jsView on unpkg
dist/plugin-sdk/dist-C2SauqMb.jsView file
22264patternName = aws_access_key severity = critical line = 22264 matchedText = var Q = ...==";
Critical
Secret Pattern

AWS access key ID in dist/plugin-sdk/dist-C2SauqMb.js

dist/plugin-sdk/dist-C2SauqMb.jsView on unpkg · L22264
dist/esm-DqRYstC3.jsView file
5594patternName = generic_password severity = medium line = 5594 matchedText = password...d]",
Medium
Secret Pattern

Hardcoded password in dist/esm-DqRYstC3.js

dist/esm-DqRYstC3.jsView on unpkg · L5594
docs/zh-CN/help/faq.mdView file
2191patternName = generic_password severity = medium line = 2191 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in docs/zh-CN/help/faq.md

docs/zh-CN/help/faq.mdView on unpkg · L2191
docs/zh-CN/gateway/tailscale.mdView file
80patternName = generic_password severity = medium line = 80 matchedText = auth: { ..." },
Medium
Secret Pattern

Hardcoded password in docs/zh-CN/gateway/tailscale.md

docs/zh-CN/gateway/tailscale.mdView on unpkg · L80
docs/zh-CN/gateway/configuration.mdView file
2967patternName = generic_password severity = medium line = 2967 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in docs/zh-CN/gateway/configuration.md

docs/zh-CN/gateway/configuration.mdView on unpkg · L2967
docs/zh-CN/channels/bluebubbles.mdView file
43patternName = generic_password severity = medium line = 43 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in docs/zh-CN/channels/bluebubbles.md

docs/zh-CN/channels/bluebubbles.mdView on unpkg · L43
docs/help/faq.mdView file
2387patternName = generic_password severity = medium line = 2387 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L2387
docs/gateway/tailscale.mdView file
81patternName = generic_password severity = medium line = 81 matchedText = auth: { ..." },
Medium
Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L81
docs/gateway/configuration.mdView file
3050patternName = generic_password severity = medium line = 3050 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in docs/gateway/configuration.md

docs/gateway/configuration.mdView on unpkg · L3050
docs/channels/bluebubbles.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in docs/channels/bluebubbles.md

docs/channels/bluebubbles.mdView on unpkg · L37
extensions/bluebubbles/src/attachments.test.tsView file
34patternName = generic_password severity = medium line = 34 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/attachments.test.ts

extensions/bluebubbles/src/attachments.test.tsView on unpkg · L34
44patternName = generic_password severity = medium line = 44 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/attachments.test.ts

extensions/bluebubbles/src/attachments.test.tsView on unpkg · L44
76patternName = generic_password severity = medium line = 76 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/attachments.test.ts

extensions/bluebubbles/src/attachments.test.tsView on unpkg · L76
98patternName = generic_password severity = medium line = 98 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/attachments.test.ts

extensions/bluebubbles/src/attachments.test.tsView on unpkg · L98
228patternName = generic_password severity = medium line = 228 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/attachments.test.ts

extensions/bluebubbles/src/attachments.test.tsView on unpkg · L228
extensions/bluebubbles/src/send.test.tsView file
847patternName = generic_password severity = medium line = 847 matchedText = password...ss",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/send.test.ts

extensions/bluebubbles/src/send.test.tsView on unpkg · L847
extensions/bluebubbles/src/monitor.test.tsView file
241patternName = generic_password severity = medium line = 241 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/monitor.test.ts

extensions/bluebubbles/src/monitor.test.tsView on unpkg · L241
439patternName = generic_password severity = medium line = 439 matchedText = const ac... });
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/monitor.test.ts

extensions/bluebubbles/src/monitor.test.tsView on unpkg · L439
475patternName = generic_password severity = medium line = 475 matchedText = const ac... });
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/monitor.test.ts

extensions/bluebubbles/src/monitor.test.tsView on unpkg · L475
515patternName = generic_password severity = medium line = 515 matchedText = const ac... });
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/monitor.test.ts

extensions/bluebubbles/src/monitor.test.tsView on unpkg · L515
550patternName = generic_password severity = medium line = 550 matchedText = const ac... });
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/monitor.test.ts

extensions/bluebubbles/src/monitor.test.tsView on unpkg · L550
extensions/bluebubbles/src/actions.test.tsView file
72patternName = generic_password severity = medium line = 72 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/actions.test.ts

extensions/bluebubbles/src/actions.test.tsView on unpkg · L72
86patternName = generic_password severity = medium line = 86 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/actions.test.ts

extensions/bluebubbles/src/actions.test.tsView on unpkg · L86
159patternName = generic_password severity = medium line = 159 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/actions.test.ts

extensions/bluebubbles/src/actions.test.tsView on unpkg · L159
178patternName = generic_password severity = medium line = 178 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/actions.test.ts

extensions/bluebubbles/src/actions.test.tsView on unpkg · L178
197patternName = generic_password severity = medium line = 197 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/actions.test.ts

extensions/bluebubbles/src/actions.test.tsView on unpkg · L197
219patternName = generic_password severity = medium line = 219 matchedText = password...rd",
Medium
Secret Pattern

Hardcoded password in extensions/bluebubbles/src/actions.test.ts

extensions/bluebubbles/src/actions.test.tsView on unpkg · L219

Findings

5 Critical5 High32 Medium8 Low
CriticalCritical Secretdist/dist-BJQ4qJgE.js
CriticalRemote Asset Decode Executedist/gateway-cli-CcHR-Pug.js
CriticalTrigger Reachable Dangerous Capabilitydist/gateway-cli-CcHR-Pug.js
CriticalSecret Patterndist/dist-BJQ4qJgE.js
CriticalSecret Patterndist/plugin-sdk/dist-C2SauqMb.js
HighChild Processdist/doctor-completion-CDF0CrIu.js
HighShelldist/gateway-cli-CcHR-Pug.js
HighSandbox Evasion Gated Capabilitydist/gateway-cli-CcHR-Pug.js
HighCross File Remote Execution Contextdist/gateway-cli-CcHR-Pug.js
HighOversized Source Filedist/pw-ai-ByKRZUzk.js
MediumDynamic Requiredist/gateway-cli-CcHR-Pug.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/gateway-cli-CcHR-Pug.js
MediumShips Build Helperskills/model-usage/scripts/model_usage.py
MediumStructural Risk Force Deep Review
MediumSecret Patterndist/esm-DqRYstC3.js
MediumSecret Patterndocs/zh-CN/help/faq.md
MediumSecret Patterndocs/zh-CN/gateway/tailscale.md
MediumSecret Patterndocs/zh-CN/gateway/configuration.md
MediumSecret Patterndocs/zh-CN/channels/bluebubbles.md
MediumSecret Patterndocs/help/faq.md
MediumSecret Patterndocs/gateway/tailscale.md
MediumSecret Patterndocs/gateway/configuration.md
MediumSecret Patterndocs/channels/bluebubbles.md
MediumSecret Patternextensions/bluebubbles/src/attachments.test.ts
MediumSecret Patternextensions/bluebubbles/src/attachments.test.ts
MediumSecret Patternextensions/bluebubbles/src/attachments.test.ts
MediumSecret Patternextensions/bluebubbles/src/attachments.test.ts
MediumSecret Patternextensions/bluebubbles/src/attachments.test.ts
MediumSecret Patternextensions/bluebubbles/src/send.test.ts
MediumSecret Patternextensions/bluebubbles/src/monitor.test.ts
MediumSecret Patternextensions/bluebubbles/src/monitor.test.ts
MediumSecret Patternextensions/bluebubbles/src/monitor.test.ts
MediumSecret Patternextensions/bluebubbles/src/monitor.test.ts
MediumSecret Patternextensions/bluebubbles/src/monitor.test.ts
MediumSecret Patternextensions/bluebubbles/src/actions.test.ts
MediumSecret Patternextensions/bluebubbles/src/actions.test.ts
MediumSecret Patternextensions/bluebubbles/src/actions.test.ts
MediumSecret Patternextensions/bluebubbles/src/actions.test.ts
MediumSecret Patternextensions/bluebubbles/src/actions.test.ts
MediumSecret Patternextensions/bluebubbles/src/actions.test.ts
LowScripts Present
LowEval
LowWeak Cryptodist/gateway-cli-CcHR-Pug.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings