registry / stormcloud-video-player / 0.8.32

stormcloud-video-player@0.8.32

Ad-first HLS video player with SCTE-35 support and Google IMA integration for precise ad break alignment

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 28 file(s), 4.41 MB of source, external domains: adstorm.co, imasdk.googleapis.com, live.airy.tv, www.hulu.com, www.iab.net

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

Lines 1773-1813javascript

1773 } catch (unused) {}

1774 },

1775 sendAdTouch: function sendAdTouch(event) {

1776 try {

1777 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1778 } catch (unused) {}

1779 },

1780 reset: function reset() {

1781 currentNonce = "";

1782 currentNonceManager = void 0;

1783 }

1784 };

1785}

1786// src/utils/mqttConfig.ts

1787var DEFAULT_MQTT_CONFIG = {

1788 enabled: true,

1789 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1790 brokerPort: 8883,

1791 wsPort: 8084,

1792 username: "for-sonifi",

1793 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1793

1794 topicPrefix: "adstorm/players",

1795 qos: 1

1796};

1797var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1798function isMQTTEnabled() {

1799 return mqttConfig.enabled;

1800}

1801function buildMQTTBrokerUrl() {

1802 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1803 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1804}

1805function buildPlayerTopic(licenseKey, channel) {

1806 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1807}

1808// src/utils/mqttClient.ts

1809var import_mqtt = __toESM(require("mqtt"), 1);

1810var LOG = "[StormcloudVideoPlayer][MQTT]";

1811var client = null;

1812var status = "disconnected";

1813function initMQTTClient() {

lib/players/index.cjsView file

Lines 1823-1863javascript

1823 } catch (unused) {}

1824 },

1825 sendAdTouch: function sendAdTouch(event) {

1826 try {

1827 currentNonceManager === null || currentNonceManager === void 0 ?

lib/players/HlsPlayer.cjsView file

Lines 1787-1827javascript

1787 } catch (unused) {}

1788 },

1789 sendAdTouch: function sendAdTouch(event) {

1790 try {

1791 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1778patternName = generic_password severity = medium line = 1778 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1778

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 236-276javascript

236 return sendAdImpressionTracking;

237 },

238 sendAdLoadedTracking: function sendAdLoadedTracking1() {

239 return sendAdLoadedTracking;

240 },

241 sendHeartbeat: function sendHeartbeat1() {

242 return sendHeartbeat;

lib/index.cjsView file

1995patternName = generic_password severity = medium line = 1995 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1995

lib/player/StormcloudVideoPlayer.cjsView file

1756patternName = generic_password severity = medium line = 1756 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1756

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1263patternName = generic_password severity = medium line = 1263 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1263

Source & flagged code

12 flagged · loading source

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

1793patternName = generic_password severity = medium line = 1793 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1793

lib/players/index.cjsView file

1843patternName = generic_password severity = medium line = 1843 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/index.cjs

lib/players/index.cjsView on unpkg · L1843

lib/players/HlsPlayer.cjsView file

1807patternName = generic_password severity = medium line = 1807 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/HlsPlayer.cjs

lib/players/HlsPlayer.cjsView on unpkg · L1807

lib/index.jsView file

1778patternName = generic_password severity = medium line = 1778 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1778

lib/utils/mqttConfig.cjsView file

113patternName = generic_password severity = medium line = 113 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttConfig.cjs

lib/utils/mqttConfig.cjsView on unpkg · L113

lib/utils/mqttClient.cjsView file

129patternName = generic_password severity = medium line = 129 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttClient.cjs

lib/utils/mqttClient.cjsView on unpkg · L129

lib/utils/tracking.cjsView file

256patternName = generic_password severity = medium line = 256 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/tracking.cjs

lib/utils/tracking.cjsView on unpkg · L256

lib/index.cjsView file

1995patternName = generic_password severity = medium line = 1995 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1995

lib/player/StormcloudVideoPlayer.cjsView file

1756patternName = generic_password severity = medium line = 1756 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1756

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1263patternName = generic_password severity = medium line = 1263 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1263

Findings

14 Medium4 Low

MediumSecret Patterndist/stormcloud-vp.min.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternlib/ui/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/players/index.cjs

MediumSecret Patternlib/players/HlsPlayer.cjs

MediumSecret Patternlib/index.js

MediumSecret Patternlib/utils/mqttConfig.cjs

MediumSecret Patternlib/utils/mqttClient.cjs

MediumSecret Patternlib/utils/tracking.cjs

MediumSecret Patternlib/index.cjs

MediumSecret Patternlib/player/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/player/AdBreakOrchestrator.cjs

MediumSecret Patternlib/player/AdConfigManager.cjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

Lines 1773-1813javascript

1773 } catch (unused) {}

1774 },

1775 sendAdTouch: function sendAdTouch(event) {

1776 try {

1777 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1778 } catch (unused) {}

1779 },

1780 reset: function reset() {

1781 currentNonce = "";

1782 currentNonceManager = void 0;

1783 }

1784 };

1785}

1786// src/utils/mqttConfig.ts

1787var DEFAULT_MQTT_CONFIG = {

1788 enabled: true,

1789 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1790 brokerPort: 8883,

1791 wsPort: 8084,

1792 username: "for-sonifi",

1793 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1793

1794 topicPrefix: "adstorm/players",

1795 qos: 1

1796};

1797var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1798function isMQTTEnabled() {

1799 return mqttConfig.enabled;

1800}

1801function buildMQTTBrokerUrl() {

1802 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1803 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1804}

1805function buildPlayerTopic(licenseKey, channel) {

1806 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1807}

1808// src/utils/mqttClient.ts

1809var import_mqtt = __toESM(require("mqtt"), 1);

1810var LOG = "[StormcloudVideoPlayer][MQTT]";

1811var client = null;

1812var status = "disconnected";

1813function initMQTTClient() {

lib/players/index.cjsView file

Lines 1823-1863javascript

1823 } catch (unused) {}

1824 },

1825 sendAdTouch: function sendAdTouch(event) {

1826 try {

1827 currentNonceManager === null || currentNonceManager === void 0 ?

lib/players/HlsPlayer.cjsView file

Lines 1787-1827javascript

1787 } catch (unused) {}

1788 },

1789 sendAdTouch: function sendAdTouch(event) {

1790 try {

1791 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1778patternName = generic_password severity = medium line = 1778 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1778

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 236-276javascript

236 return sendAdImpressionTracking;

237 },

238 sendAdLoadedTracking: function sendAdLoadedTracking1() {

239 return sendAdLoadedTracking;

240 },

241 sendHeartbeat: function sendHeartbeat1() {

242 return sendHeartbeat;

lib/index.cjsView file

1995patternName = generic_password severity = medium line = 1995 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L1995

lib/player/StormcloudVideoPlayer.cjsView file

1756patternName = generic_password severity = medium line = 1756 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1756

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1263patternName = generic_password severity = medium line = 1263 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1263