registry / stormcloud-video-player / 0.8.45

stormcloud-video-player@0.8.45

Ad-first HLS video player with SCTE-35 support and Google IMA integration for precise ad break alignment

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 4.57 MB of source, external domains: adstorm.co, imasdk.googleapis.com, live.airy.tv, www.hulu.com, www.iab.net

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

Lines 1880-1920javascript

1880 } catch (unused) {}

1881 },

1882 sendAdTouch: function sendAdTouch(event) {

1883 try {

1884 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1885 } catch (unused) {}

1886 },

1887 reset: function reset() {

1888 currentNonce = "";

1889 currentNonceManager = void 0;

1890 }

1891 };

1892}

1893// src/utils/mqttConfig.ts

1894var DEFAULT_MQTT_CONFIG = {

1895 enabled: true,

1896 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1897 brokerPort: 8883,

1898 wsPort: 8084,

1899 username: "for-sonifi",

1900 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1900

1901 topicPrefix: "adstorm/players",

1902 qos: 1

1903};

1904var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1905function applyMQTTConfig(overrides) {

1906 Object.assign(mqttConfig, overrides);

1907}

1908function isMQTTEnabled() {

1909 return mqttConfig.enabled;

1910}

1911function buildMQTTBrokerUrl() {

1912 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1913 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1914}

1915function buildPlayerTopic(licenseKey, channel) {

1916 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1917}

1918// src/utils/mqttClient.ts

1919var import_mqtt = __toESM(require("mqtt"), 1);

1920var LOG = "[StormcloudVideoPlayer][MQTT]";

lib/players/index.cjsView file

Lines 1930-1970javascript

1930 } catch (unused) {}

1931 },

1932 sendAdTouch: function sendAdTouch(event) {

1933 try {

1934 currentNonceManager === null || currentNonceManager === void 0 ?

lib/players/HlsPlayer.cjsView file

Lines 1894-1934javascript

1894 } catch (unused) {}

1895 },

1896 sendAdTouch: function sendAdTouch(event) {

1897 try {

1898 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1885patternName = generic_password severity = medium line = 1885 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1885

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 236-276javascript

236 return sendAdImpressionTracking;

237 },

238 sendAdLoadedTracking: function sendAdLoadedTracking1() {

239 return sendAdLoadedTracking;

240 },

241 sendHeartbeat: function sendHeartbeat1() {

242 return sendHeartbeat;

lib/index.cjsView file

2102patternName = generic_password severity = medium line = 2102 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L2102

lib/player/StormcloudVideoPlayer.cjsView file

1863patternName = generic_password severity = medium line = 1863 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1863

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1298patternName = generic_password severity = medium line = 1298 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1298

Source & flagged code

12 flagged · loading source

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

1900patternName = generic_password severity = medium line = 1900 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1900

lib/players/index.cjsView file

1950patternName = generic_password severity = medium line = 1950 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/index.cjs

lib/players/index.cjsView on unpkg · L1950

lib/players/HlsPlayer.cjsView file

1914patternName = generic_password severity = medium line = 1914 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/players/HlsPlayer.cjs

lib/players/HlsPlayer.cjsView on unpkg · L1914

lib/index.jsView file

1885patternName = generic_password severity = medium line = 1885 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1885

lib/utils/mqttConfig.cjsView file

113patternName = generic_password severity = medium line = 113 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttConfig.cjs

lib/utils/mqttConfig.cjsView on unpkg · L113

lib/utils/mqttClient.cjsView file

129patternName = generic_password severity = medium line = 129 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/mqttClient.cjs

lib/utils/mqttClient.cjsView on unpkg · L129

lib/utils/tracking.cjsView file

256patternName = generic_password severity = medium line = 256 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/utils/tracking.cjs

lib/utils/tracking.cjsView on unpkg · L256

lib/index.cjsView file

2102patternName = generic_password severity = medium line = 2102 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L2102

lib/player/StormcloudVideoPlayer.cjsView file

1863patternName = generic_password severity = medium line = 1863 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1863

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1298patternName = generic_password severity = medium line = 1298 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1298

Findings

14 Medium4 Low

MediumSecret Patterndist/stormcloud-vp.min.js

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternlib/ui/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/players/index.cjs

MediumSecret Patternlib/players/HlsPlayer.cjs

MediumSecret Patternlib/index.js

MediumSecret Patternlib/utils/mqttConfig.cjs

MediumSecret Patternlib/utils/mqttClient.cjs

MediumSecret Patternlib/utils/tracking.cjs

MediumSecret Patternlib/index.cjs

MediumSecret Patternlib/player/StormcloudVideoPlayer.cjs

MediumSecret Patternlib/player/AdBreakOrchestrator.cjs

MediumSecret Patternlib/player/AdConfigManager.cjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

12 flagged

dist/stormcloud-vp.min.jsView file

3patternName = generic_password severity = medium line = 3 matchedText = var e,t,...)});

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/stormcloud-vp.min.jsView on unpkg · L3

lib/ui/StormcloudVideoPlayer.cjsView file

Lines 1880-1920javascript

1880 } catch (unused) {}

1881 },

1882 sendAdTouch: function sendAdTouch(event) {

1883 try {

1884 currentNonceManager === null || currentNonceManager === void 0 ? void 0 : currentNonceManager.sendAdTouch(event);

1885 } catch (unused) {}

1886 },

1887 reset: function reset() {

1888 currentNonce = "";

1889 currentNonceManager = void 0;

1890 }

1891 };

1892}

1893// src/utils/mqttConfig.ts

1894var DEFAULT_MQTT_CONFIG = {

1895 enabled: true,

1896 brokerAddress: "vecbae77.ala.us-east-1.emqxsl.com",

1897 brokerPort: 8883,

1898 wsPort: 8084,

1899 username: "for-sonifi",

1900 password: "sonifi-mqtt",

Medium

Secret Pattern

Hardcoded password in lib/ui/StormcloudVideoPlayer.cjs

lib/ui/StormcloudVideoPlayer.cjsView on unpkg · L1900

1901 topicPrefix: "adstorm/players",

1902 qos: 1

1903};

1904var mqttConfig = _object_spread({}, DEFAULT_MQTT_CONFIG);

1905function applyMQTTConfig(overrides) {

1906 Object.assign(mqttConfig, overrides);

1907}

1908function isMQTTEnabled() {

1909 return mqttConfig.enabled;

1910}

1911function buildMQTTBrokerUrl() {

1912 if (mqttConfig.brokerUrl) return mqttConfig.brokerUrl;

1913 return "wss://".concat(mqttConfig.brokerAddress, ":").concat(mqttConfig.wsPort, "/mqtt");

1914}

1915function buildPlayerTopic(licenseKey, channel) {

1916 return "".concat(mqttConfig.topicPrefix, "/").concat(licenseKey, "/").concat(channel);

1917}

1918// src/utils/mqttClient.ts

1919var import_mqtt = __toESM(require("mqtt"), 1);

1920var LOG = "[StormcloudVideoPlayer][MQTT]";

lib/players/index.cjsView file

Lines 1930-1970javascript

1930 } catch (unused) {}

1931 },

1932 sendAdTouch: function sendAdTouch(event) {

1933 try {

1934 currentNonceManager === null || currentNonceManager === void 0 ?

lib/players/HlsPlayer.cjsView file

Lines 1894-1934javascript

1894 } catch (unused) {}

1895 },

1896 sendAdTouch: function sendAdTouch(event) {

1897 try {

1898 currentNonceManager === null || currentNonceManager === void 0 ?

lib/index.jsView file

1885patternName = generic_password severity = medium line = 1885 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.js

lib/index.jsView on unpkg · L1885

lib/utils/mqttConfig.cjsView file

Lines 93-133javascript

93 return buildMQTTBrokerUrl;

94 },

95 buildPlayerTopic: function buildPlayerTopic1() {

96 return buildPlayerTopic;

97 },

98 isMQTTEnabled: function isMQTTEnabled1() {

99 return isMQTTEnabled;

lib/utils/mqttClient.cjsView file

Lines 109-149javascript

109 },

110 isMQTTConfigured: function isMQTTConfigured1() {

111 return isMQTTConfigured;

112 },

113 isMQTTConnected: function isMQTTConnected1() {

114 return isMQTTConnected;

115 },

116

lib/utils/tracking.cjsView file

Lines 236-276javascript

236 return sendAdImpressionTracking;

237 },

238 sendAdLoadedTracking: function sendAdLoadedTracking1() {

239 return sendAdLoadedTracking;

240 },

241 sendHeartbeat: function sendHeartbeat1() {

242 return sendHeartbeat;

lib/index.cjsView file

2102patternName = generic_password severity = medium line = 2102 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/index.cjs

lib/index.cjsView on unpkg · L2102

lib/player/StormcloudVideoPlayer.cjsView file

1863patternName = generic_password severity = medium line = 1863 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/StormcloudVideoPlayer.cjs

lib/player/StormcloudVideoPlayer.cjsView on unpkg · L1863

lib/player/AdBreakOrchestrator.cjsView file

293patternName = generic_password severity = medium line = 293 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdBreakOrchestrator.cjs

lib/player/AdBreakOrchestrator.cjsView on unpkg · L293

lib/player/AdConfigManager.cjsView file

1298patternName = generic_password severity = medium line = 1298 matchedText = password...tt",

Medium

Secret Pattern

Hardcoded password in lib/player/AdConfigManager.cjs

lib/player/AdConfigManager.cjsView on unpkg · L1298