registry  /  sliftutils  /  1.4.88

sliftutils@1.4.88

A build system and utility library for MobX + Preact projects.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
WildcardDependency
scanned 115 file(s), 4.12 MB of source, external domains: 65.109.93.113, api.backblazeb2.com, api.cloudflare.com, github.com, nodejs.org, openrouter.ai, planquickly.com, schemas.xmlsoap.org, www.w3.org
Oversized source lightweight scan
build-nodejs/server.js9.19 MB file, sampled 256 KB
FilesystemEnvironmentVarsEvalCryptoDynamicRequireHighEntropyStringsUrlStringsgithub.comnodejs.org
build-web/browser.js9.62 MB file, sampled 256 KB
FilesystemEnvironmentVarsEvalCryptoDynamicRequireHighEntropyStringsUrlStringsgithub.comnodejs.org

Source & flagged code

4 flagged · loading source
build-electron/electronRenderer.jsView file
1;(function initModule(serialized) { globalThis.registeredModules = globalThis.registeredModules || {}; globalThis.registeredModules[serialized.id] = serialized; ... L2: }) }); ... L98: // NOTE: Not using import, as the types complain about what we are doing too much. L99: const Module = eval("require")("module"); L100: // We need at least 1 export, to force this to be treated like a module ... L185: ;(function initModule(serialized) { globalThis.registeredModules = globalThis.registeredModules || {}; globalThis.registeredModules[serialized.id] = serialized; ... L186: * [js-sha256]{@link https://github.com/emn178/js-sha256} L187: * ... L270: var bufferFrom; L271: if (Buffer.from && !root.JS_SHA256_NO_BUFFER_FROM) { L272: bufferFrom = Buffer.from; ... L876: require.main = newModule;
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

build-electron/electronRenderer.jsView on unpkg · L1
98// NOTE: Not using import, as the types complain about what we are doing too much. L99: const Module = eval("require")("module"); L100: // We need at least 1 export, to force this to be treated like a module
Low
Eval

Package source references a known benign dynamic code generation pattern.

build-electron/electronRenderer.jsView on unpkg · L98
builders/nodeJSBuildRun.jsView file
1#!/usr/bin/env node L2: require("typenode"); L3: require("./nodeJSBuild");
Medium
Dynamic Require

Package source references dynamic require/import behavior.

builders/nodeJSBuildRun.jsView on unpkg · L1
build-nodejs/server.jsView file
•path = build-nodejs/server.js kind = oversized_source_file sizeBytes = 9631328 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

build-nodejs/server.jsView on unpkg

Findings

2 High5 Medium7 Low
HighObfuscated Payload Loaderbuild-electron/electronRenderer.js
HighOversized Source Filebuild-nodejs/server.js
MediumDynamic Requirebuilders/nodeJSBuildRun.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvalbuild-electron/electronRenderer.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings