registry / stormcloud-video-player / 0.8.26

stormcloud-video-player@0.8.26

Ad-first HLS video player with SCTE-35 support and Google IMA integration for precise ad break alignment

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 4.73 MB of source, external domains: adstorm.co, imasdk.googleapis.com, live.airy.tv, www.hulu.com, www.iab.net

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

1736patternName = generic_password severity = medium line = 1736 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1736

lib/players/index.cjsView file

Lines 1766-1806javascript

1766 } catch (unused) {}

1767 },

1768 sendAdTouch: function sendAdTouch(event) {

1769 try {

1770 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1771 } catch (unused) {}

1772 },

1773 reset: function reset() {

1774 currentNonce = "";

1775 currentNonceManager = void 0;

1776 }

1777 };

1778}

1779// src/utils/mqttConfig.ts

1780var DEFAULT_MQTT_CONFIG = {

1781 enabled: true,

1782 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1783 brokerPort: 8883,

1784 wsPort: 8084,

1785 username: "for-sonifi",

1786 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/players/index.cjs

lib/players/index.cjsView on unpkg · L1786

1787 topicPrefix: "adstorm/players",

1788 qos: 1

1789};

1790var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1791function isMQTTEnabled() {

1792 return mqttConfig.enabled;

1793}

1794function buildMQTTBrokerUrl() {

1795 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1796 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1797}

1798function buildPlayerTopic(licenseKey, channel) {

1799 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1800}

1801// src/utils/mqttClient.ts

1802var import_mqtt = __toESM(require("mqtt"), 1);

1803var LOG = "[StormcloudVideoPlayer][MQTT]";

1804var client = null;

1805var status = "disconnected";

1806function initMQTTClient() {

lib/players/HlsPlayer.cjsView file

Lines 1730-1770javascript

1730 } catch (unused) {}

1731 },

1732 sendAdTouch: function sendAdTouch(event) {

1733 try {

1734 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1721patternName = generic_password severity = medium line = 1721 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1721

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 236-276javascript

236 return sendAdImpressionTracking;

237 },

238 sendAdLoadedTracking: function sendAdLoadedTracking1() {

239 return sendAdLoadedTracking;

240 },

241 sendHeartbeat: function sendHeartbeat1() {

242 return sendHeartbeat;

lib/index.cjsView file

1938patternName = generic_password severity = medium line = 1938 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1938

lib/player/StormcloudVideoPlayer.cjsView file

1699patternName = generic_password severity = medium line = 1699 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1699

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1198patternName = generic_password severity = medium line = 1198 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1198

Source & flagged code

12 flagged · loading source

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

1736patternName = generic_password severity = medium line = 1736 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1736

lib/players/index.cjsView file

1786patternName = generic_password severity = medium line = 1786 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/index.cjs

lib/players/index.cjsView on unpkg · L1786

lib/players/HlsPlayer.cjsView file

1750patternName = generic_password severity = medium line = 1750 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/HlsPlayer.cjs

lib/players/HlsPlayer.cjsView on unpkg · L1750

lib/index.jsView file

1721patternName = generic_password severity = medium line = 1721 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1721

lib/utils/mqttConfig.cjsView file

113patternName = generic_password severity = medium line = 113 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttConfig.cjs

lib/utils/mqttConfig.cjsView on unpkg · L113

lib/utils/mqttClient.cjsView file

129patternName = generic_password severity = medium line = 129 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttClient.cjs

lib/utils/mqttClient.cjsView on unpkg · L129

lib/utils/tracking.cjsView file

256patternName = generic_password severity = medium line = 256 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/tracking.cjs

lib/utils/tracking.cjsView on unpkg · L256

lib/index.cjsView file

1938patternName = generic_password severity = medium line = 1938 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1938

lib/player/StormcloudVideoPlayer.cjsView file

1699patternName = generic_password severity = medium line = 1699 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1699

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1198patternName = generic_password severity = medium line = 1198 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1198

Findings

14 Medium4 Low

MediumSecret Patterndist/stormcloud-vp.min.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternlib/ui/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/players/index.cjs

MediumSecret Patternlib/players/HlsPlayer.cjs

MediumSecret Patternlib/index.js

MediumSecret Patternlib/utils/mqttConfig.cjs

MediumSecret Patternlib/utils/mqttClient.cjs

MediumSecret Patternlib/utils/tracking.cjs

MediumSecret Patternlib/index.cjs

MediumSecret Patternlib/player/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/player/AdBreakOrchestrator.cjs

MediumSecret Patternlib/player/AdConfigManager.cjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

1736patternName = generic_password severity = medium line = 1736 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1736

lib/players/index.cjsView file

Lines 1766-1806javascript

1766 } catch (unused) {}

1767 },

1768 sendAdTouch: function sendAdTouch(event) {

1769 try {

1770 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1771 } catch (unused) {}

1772 },

1773 reset: function reset() {

1774 currentNonce = "";

1775 currentNonceManager = void 0;

1776 }

1777 };

1778}

1779// src/utils/mqttConfig.ts

1780var DEFAULT_MQTT_CONFIG = {

1781 enabled: true,

1782 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1783 brokerPort: 8883,

1784 wsPort: 8084,

1785 username: "for-sonifi",

1786 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/players/index.cjs

lib/players/index.cjsView on unpkg · L1786

1787 topicPrefix: "adstorm/players",

1788 qos: 1

1789};

1790var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1791function isMQTTEnabled() {

1792 return mqttConfig.enabled;

1793}

1794function buildMQTTBrokerUrl() {

1795 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1796 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1797}

1798function buildPlayerTopic(licenseKey, channel) {

1799 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1800}

1801// src/utils/mqttClient.ts

1802var import_mqtt = __toESM(require("mqtt"), 1);

1803var LOG = "[StormcloudVideoPlayer][MQTT]";

1804var client = null;

1805var status = "disconnected";

1806function initMQTTClient() {

lib/players/HlsPlayer.cjsView file

Lines 1730-1770javascript

1730 } catch (unused) {}

1731 },

1732 sendAdTouch: function sendAdTouch(event) {

1733 try {

1734 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1721patternName = generic_password severity = medium line = 1721 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1721

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 236-276javascript

236 return sendAdImpressionTracking;

237 },

238 sendAdLoadedTracking: function sendAdLoadedTracking1() {

239 return sendAdLoadedTracking;

240 },

241 sendHeartbeat: function sendHeartbeat1() {

242 return sendHeartbeat;

lib/index.cjsView file

1938patternName = generic_password severity = medium line = 1938 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1938

lib/player/StormcloudVideoPlayer.cjsView file

1699patternName = generic_password severity = medium line = 1699 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1699

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1198patternName = generic_password severity = medium line = 1198 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1198