registry / stormcloud-video-player / 0.8.24

stormcloud-video-player@0.8.24

Ad-first HLS video player with SCTE-35 support and Google IMA integration for precise ad break alignment

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 4.54 MB of source, external domains: adstorm.co, imasdk.googleapis.com, live.airy.tv, www.hulu.com, www.iab.net

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

Lines 1444-1484javascript

1444 } catch (unused) {}

1445 },

1446 sendAdTouch: function sendAdTouch(event) {

1447 try {

1448 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1449 } catch (unused) {}

1450 },

1451 reset: function reset() {

1452 currentNonce = "";

1453 currentNonceManager = void 0;

1454 }

1455 };

1456}

1457// src/utils/mqttConfig.ts

1458var DEFAULT_MQTT_CONFIG = {

1459 enabled: true,

1460 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1461 brokerPort: 8883,

1462 wsPort: 8084,

1463 username: "for-sonifi",

1464 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1464

1465 topicPrefix: "adstorm/players",

1466 qos: 1

1467};

1468var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1469function isMQTTEnabled() {

1470 return mqttConfig.enabled;

1471}

1472function buildMQTTBrokerUrl() {

1473 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1474 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1475}

1476function buildPlayerTopic(licenseKey, channel) {

1477 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1478}

1479// src/utils/mqttClient.ts

1480var import_mqtt = __toESM(require("mqtt"), 1);

1481var LOG = "[StormcloudVideoPlayer][MQTT]";

1482var client = null;

1483var status = "disconnected";

1484function initMQTTClient() {

lib/players/index.cjsView file

Lines 1494-1534javascript

1494 } catch (unused) {}

1495 },

1496 sendAdTouch: function sendAdTouch(event) {

1497 try {

1498 currentNonceManager === null || currentNonceManager === void 0 ?

lib/players/HlsPlayer.cjsView file

Lines 1458-1498javascript

1458 } catch (unused) {}

1459 },

1460 sendAdTouch: function sendAdTouch(event) {

1461 try {

1462 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1449patternName = generic_password severity = medium line = 1449 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1449

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 233-273javascript

233 return sendAdImpressionTracking;

234 },

235 sendAdLoadedTracking: function sendAdLoadedTracking1() {

236 return sendAdLoadedTracking;

237 },

238 sendHeartbeat: function sendHeartbeat1() {

239 return sendHeartbeat;

lib/index.cjsView file

1663patternName = generic_password severity = medium line = 1663 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1663

lib/player/StormcloudVideoPlayer.cjsView file

1427patternName = generic_password severity = medium line = 1427 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1427

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1185patternName = generic_password severity = medium line = 1185 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1185

Source & flagged code

12 flagged · loading source

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

1464patternName = generic_password severity = medium line = 1464 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1464

lib/players/index.cjsView file

1514patternName = generic_password severity = medium line = 1514 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/index.cjs

lib/players/index.cjsView on unpkg · L1514

lib/players/HlsPlayer.cjsView file

1478patternName = generic_password severity = medium line = 1478 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/HlsPlayer.cjs

lib/players/HlsPlayer.cjsView on unpkg · L1478

lib/index.jsView file

1449patternName = generic_password severity = medium line = 1449 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1449

lib/utils/mqttConfig.cjsView file

113patternName = generic_password severity = medium line = 113 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttConfig.cjs

lib/utils/mqttConfig.cjsView on unpkg · L113

lib/utils/mqttClient.cjsView file

129patternName = generic_password severity = medium line = 129 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttClient.cjs

lib/utils/mqttClient.cjsView on unpkg · L129

lib/utils/tracking.cjsView file

253patternName = generic_password severity = medium line = 253 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/tracking.cjs

lib/utils/tracking.cjsView on unpkg · L253

lib/index.cjsView file

1663patternName = generic_password severity = medium line = 1663 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1663

lib/player/StormcloudVideoPlayer.cjsView file

1427patternName = generic_password severity = medium line = 1427 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1427

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1185patternName = generic_password severity = medium line = 1185 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1185

Findings

14 Medium4 Low

MediumSecret Patterndist/stormcloud-vp.min.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternlib/ui/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/players/index.cjs

MediumSecret Patternlib/players/HlsPlayer.cjs

MediumSecret Patternlib/index.js

MediumSecret Patternlib/utils/mqttConfig.cjs

MediumSecret Patternlib/utils/mqttClient.cjs

MediumSecret Patternlib/utils/tracking.cjs

MediumSecret Patternlib/index.cjs

MediumSecret Patternlib/player/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/player/AdBreakOrchestrator.cjs

MediumSecret Patternlib/player/AdConfigManager.cjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

Lines 1444-1484javascript

1444 } catch (unused) {}

1445 },

1446 sendAdTouch: function sendAdTouch(event) {

1447 try {

1448 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1449 } catch (unused) {}

1450 },

1451 reset: function reset() {

1452 currentNonce = "";

1453 currentNonceManager = void 0;

1454 }

1455 };

1456}

1457// src/utils/mqttConfig.ts

1458var DEFAULT_MQTT_CONFIG = {

1459 enabled: true,

1460 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1461 brokerPort: 8883,

1462 wsPort: 8084,

1463 username: "for-sonifi",

1464 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1464

1465 topicPrefix: "adstorm/players",

1466 qos: 1

1467};

1468var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1469function isMQTTEnabled() {

1470 return mqttConfig.enabled;

1471}

1472function buildMQTTBrokerUrl() {

1473 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1474 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1475}

1476function buildPlayerTopic(licenseKey, channel) {

1477 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1478}

1479// src/utils/mqttClient.ts

1480var import_mqtt = __toESM(require("mqtt"), 1);

1481var LOG = "[StormcloudVideoPlayer][MQTT]";

1482var client = null;

1483var status = "disconnected";

1484function initMQTTClient() {

lib/players/index.cjsView file

Lines 1494-1534javascript

1494 } catch (unused) {}

1495 },

1496 sendAdTouch: function sendAdTouch(event) {

1497 try {

1498 currentNonceManager === null || currentNonceManager === void 0 ?

lib/players/HlsPlayer.cjsView file

Lines 1458-1498javascript

1458 } catch (unused) {}

1459 },

1460 sendAdTouch: function sendAdTouch(event) {

1461 try {

1462 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1449patternName = generic_password severity = medium line = 1449 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1449

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 233-273javascript

233 return sendAdImpressionTracking;

234 },

235 sendAdLoadedTracking: function sendAdLoadedTracking1() {

236 return sendAdLoadedTracking;

237 },

238 sendHeartbeat: function sendHeartbeat1() {

239 return sendHeartbeat;

lib/index.cjsView file

1663patternName = generic_password severity = medium line = 1663 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1663

lib/player/StormcloudVideoPlayer.cjsView file

1427patternName = generic_password severity = medium line = 1427 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1427

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1185patternName = generic_password severity = medium line = 1185 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1185