registry / telephone-clients / 3.0.2-31-5

telephone-clients@3.0.2-31-5

呼叫模块前台组件

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 146 file(s), 2.45 MB of source, external domains: 127.0.0.1, 134.175.9.52, 192.168.20.219, 192.168.60.4, example.com, github.com, inakibaz.me, jssip.net, mobile.xacbank.com, www.kawa.net, www.w3.org

Source & flagged code

8 flagged

static/js/adapter.min.jsView file

Lines 1812-1852javascript

1812 mkiValue: e[2] ? e[2].split(":")[0] : void 0,

1813 mkiLength: e[2] ? e[2].split(":")[1] : void 0

1814 }

1815 },

1816 p.writeCryptoKeyParams = function (e) {

1817 return e.keyMethod + ":" + e.keySalt + (e.lifeTime ? "|" + e.lifeTime : "") + (e.mkiValue && e.mkiLength ? "|" + e.mkiValue + ":" + e.mkiLength : "")

1818 },

1819 p.getCryptoParameters = function (e, t) {

1820 return p.matchPrefix(e + t, "a=crypto:").map(p.parseCryptoLine)

1821 },

1822 p.getIceParameters = function (e, t) {

1823 var r = p.matchPrefix(e + t, "a=ice-ufrag:")[0],

1824 t = p.matchPrefix(e + t, "a=ice-pwd:")[0];

1825 return r && t ? {

1826 usernameFragment: r.substr(12),

1827 password: t.substr(10)

1828 }

1829 : null

1830 },

1831 p.writeIceParameters = function (e) {

1832 var t = "a=ice-ufrag:" + e.usernameFragment + "\r\na=ice-pwd:" + e.password + "\r\n";

Medium

Secret Pattern

Package contains a possible secret pattern.

static/js/adapter.min.jsView on unpkg · L1832

1833 return e.iceLite && (t += "a=ice-lite\r\n"),

1834 t

1835 },

1836 p.parseRtpParameters = function (e) {

1837 for (var t = {

1838 codecs: [],

1839 headerExtensions: [],

1840 fecMechanisms: [],

1841 rtcp: []

1842 }, r = p.splitLines(e)[0].split(" "), n = 3; n < r.length; n++) {

1843 var i = r[n],

1844 o = p.matchPrefix(e, "a=rtpmap:" + i + " ")[0];

1845 if (o) {

1846 var a = p.parseRtpMap(o),

1847 o = p.matchPrefix(e, "a=fmtp:" + i + " ");

1848 switch (a.parameters = o.length ? p.parseFmtp(o[0]) : {}, a.rtcpFeedback = p.matchPrefix(e, "a=rtcp-fb:" + i + " ").map(p.parseRtcpFb), t.codecs.push(a), a.name.toUpperCase()) {

1849 case "RED":

1850 case "ULPFEC":

1851 t.fecMechanisms.push(a.name.toUpperCase())

1852 }

src/filiale/hanzhong/PagedList.jsView file

Lines 214-249javascript

214 gen = postGenNew(this, pageNo);

215 } else {

216 gen = postGen(this, pageNo);

217 }

218 let redata = co(gen);

219 return redata

static/js/jssip.jsView file

145L146: var Utils = require('./Utils'); L147:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

static/js/jssip.jsView on unpkg · L145

release.batView file

•path = release.bat kind = build_helper sizeBytes = 114 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

release.batView on unpkg

src/bootstrap/less/less.7zView file

•path = src/bootstrap/less/less.7z kind = compressed_blob sizeBytes = 0

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

src/bootstrap/less/less.7zView on unpkg

•path = src/bootstrap/less/less.7z kind = nested_archive_needs_inspection sizeBytes = 0

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

src/bootstrap/less/less.7zView on unpkg

src/bootstrap/fonts/汉仪菱心体简.ttfView file

•path = src/bootstrap/fonts/汉仪菱心体简.ttf kind = high_entropy_blob sizeBytes = 959228 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/bootstrap/fonts/汉仪菱心体简.ttfView on unpkg

adapter.min.jsView file

Lines 1812-1852javascript

1812 mkiValue: e[2] ? e[2].split(":")[0] : void 0,

1813 mkiLength: e[2] ? e[2].split(":")[1] :

Source & flagged code

8 flagged · loading source

static/js/adapter.min.jsView file

1832patternName = generic_password severity = medium line = 1832 matchedText = var t = ...\n";

Medium

Secret Pattern

Package contains a possible secret pattern.

static/js/adapter.min.jsView on unpkg · L1832

src/filiale/hanzhong/PagedList.jsView file

234/*eslint-disable */ L235: this.params[name] = eval(this.paramSource[name]) L236: /*eslint-enable */

Low

Eval

Package source references a known benign dynamic code generation pattern.

src/filiale/hanzhong/PagedList.jsView on unpkg · L234

static/js/jssip.jsView file

145L146: var Utils = require('./Utils'); L147:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

static/js/jssip.jsView on unpkg · L145

release.batView file

•path = release.bat kind = build_helper sizeBytes = 114 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

release.batView on unpkg

src/bootstrap/less/less.7zView file

•path = src/bootstrap/less/less.7z kind = compressed_blob sizeBytes = 0

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

src/bootstrap/less/less.7zView on unpkg

•path = src/bootstrap/less/less.7z kind = nested_archive_needs_inspection sizeBytes = 0

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

src/bootstrap/less/less.7zView on unpkg

src/bootstrap/fonts/汉仪菱心体简.ttfView file

•path = src/bootstrap/fonts/汉仪菱心体简.ttf kind = high_entropy_blob sizeBytes = 959228 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/bootstrap/fonts/汉仪菱心体简.ttfView on unpkg

adapter.min.jsView file

1832patternName = generic_password severity = medium line = 1832 matchedText = var t = ...\n";

Medium

Secret Pattern

Hardcoded password in adapter.min.js

adapter.min.jsView on unpkg · L1832

Findings

1 High8 Medium8 Low

HighShips High Entropy Blobsrc/bootstrap/fonts/汉仪菱心体简.ttf

MediumSecret Patternstatic/js/adapter.min.js

MediumDynamic Requirestatic/js/jssip.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperrelease.bat

MediumShips Compressed Blobsrc/bootstrap/less/less.7z

MediumStructural Risk Force Deep Review

MediumSecret Patternadapter.min.js

LowScripts Present

LowEvalsrc/filiale/hanzhong/PagedList.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNested Archive Needs Inspectionsrc/bootstrap/less/less.7z

Source & flagged code

8 flagged

static/js/adapter.min.jsView file

Lines 1812-1852javascript

1812 mkiValue: e[2] ? e[2].split(":")[0] : void 0,

1813 mkiLength: e[2] ? e[2].split(":")[1] : void 0

1814 }

1815 },

1816 p.writeCryptoKeyParams = function (e) {

1817 return e.keyMethod + ":" + e.keySalt + (e.lifeTime ? "|" + e.lifeTime : "") + (e.mkiValue && e.mkiLength ? "|" + e.mkiValue + ":" + e.mkiLength : "")

1818 },

1819 p.getCryptoParameters = function (e, t) {

1820 return p.matchPrefix(e + t, "a=crypto:").map(p.parseCryptoLine)

1821 },

1822 p.getIceParameters = function (e, t) {

1823 var r = p.matchPrefix(e + t, "a=ice-ufrag:")[0],

1824 t = p.matchPrefix(e + t, "a=ice-pwd:")[0];

1825 return r && t ? {

1826 usernameFragment: r.substr(12),

1827 password: t.substr(10)

1828 }

1829 : null

1830 },

1831 p.writeIceParameters = function (e) {

1832 var t = "a=ice-ufrag:" + e.usernameFragment + "\r\na=ice-pwd:" + e.password + "\r\n";

Medium

Secret Pattern

Package contains a possible secret pattern.

static/js/adapter.min.jsView on unpkg · L1832

1833 return e.iceLite && (t += "a=ice-lite\r\n"),

1834 t

1835 },

1836 p.parseRtpParameters = function (e) {

1837 for (var t = {

1838 codecs: [],

1839 headerExtensions: [],

1840 fecMechanisms: [],

1841 rtcp: []

1842 }, r = p.splitLines(e)[0].split(" "), n = 3; n < r.length; n++) {

1843 var i = r[n],

1844 o = p.matchPrefix(e, "a=rtpmap:" + i + " ")[0];

1845 if (o) {

1846 var a = p.parseRtpMap(o),

1847 o = p.matchPrefix(e, "a=fmtp:" + i + " ");

1848 switch (a.parameters = o.length ? p.parseFmtp(o[0]) : {}, a.rtcpFeedback = p.matchPrefix(e, "a=rtcp-fb:" + i + " ").map(p.parseRtcpFb), t.codecs.push(a), a.name.toUpperCase()) {

1849 case "RED":

1850 case "ULPFEC":

1851 t.fecMechanisms.push(a.name.toUpperCase())

1852 }

src/filiale/hanzhong/PagedList.jsView file

Lines 214-249javascript

214 gen = postGenNew(this, pageNo);

215 } else {

216 gen = postGen(this, pageNo);

217 }

218 let redata = co(gen);

219 return redata

static/js/jssip.jsView file

145L146: var Utils = require('./Utils'); L147:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

static/js/jssip.jsView on unpkg · L145

release.batView file

•path = release.bat kind = build_helper sizeBytes = 114 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

release.batView on unpkg

src/bootstrap/less/less.7zView file

•path = src/bootstrap/less/less.7z kind = compressed_blob sizeBytes = 0

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

src/bootstrap/less/less.7zView on unpkg

•path = src/bootstrap/less/less.7z kind = nested_archive_needs_inspection sizeBytes = 0

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

src/bootstrap/less/less.7zView on unpkg

src/bootstrap/fonts/汉仪菱心体简.ttfView file

•path = src/bootstrap/fonts/汉仪菱心体简.ttf kind = high_entropy_blob sizeBytes = 959228 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

src/bootstrap/fonts/汉仪菱心体简.ttfView on unpkg

adapter.min.jsView file

Lines 1812-1852javascript

1812 mkiValue: e[2] ? e[2].split(":")[0] : void 0,

1813 mkiLength: e[2] ? e[2].split(":")[1] :