registry / tianxincode / 1.0.54

tianxincode@1.0.54

AI Coding Assistant

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 695 file(s), 2.83 MB of source, external domains: 192.168.1.100, ai.songbingcloud.com, api.deepseek.com, api.dingtalk.com, api.minimax.io, api.openai.com, api.xiaomimimo.com, dashscope-intl.aliyuncs.com, gitee.com, github.com, homecommunity.oss-cn-beijing.aliyuncs.com, mcp.exa.ai, open.bigmodel.cn, openrouter.ai, txcode.homecommunity.cn, www.eclipse.org, www.homecommunity.cn, www.w3.org

Oversized source lightweight scan

web/dist/assets/index-BXyZNXwi.js4.36 MB file, sampled 256 KB

FilesystemNetworkHighEntropyStringsMinifiedUrlStringsapi.deepseek.comapi.minimax.io

Source & flagged code

3 flagged

dist/gateway/api_routes.jsView file

Lines 1-28javascript

1import { Router } from 'express';

2import * as fs from 'fs';

3import * as path from 'path';

4import { fileURLToPath, pathToFileURL } from 'url';

5const __filename = fileURLToPath(import.meta.url);

6const __dirname = path.dirname(__filename);

7async function importModule(filePath) {

8 const fileUrl = pathToFileURL(filePath).href;

9 return await import(fileUrl);

10}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/gateway/api_routes.jsView on unpkg · L8

11function scanRoutesFiles(dir) {

12 const results = [];

13 if (!fs.existsSync(dir))

14 return results;

15 const entries = fs.readdirSync(dir, { withFileTypes: true });

16 for (const entry of entries) {

17 const fullPath = path.join(dir, entry.name);

18 if (entry.isDirectory()) {

19 results.push(...scanRoutesFiles(fullPath));

20 }

21 else if (entry.isFile() && /_routes\.(ts|js)$/.test(entry.name)) {

22 results.push(fullPath);

23 }

24 }

25 return results;

26}

27export async function registerAllRoutes(app) {

28 const apiRouter = Router();

web/dist/assets/element-icons-B-tDfklg.woffView file

•path = web/dist/assets/element-icons-B-tDfklg.woff kind = high_entropy_blob sizeBytes = 28200 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/element-icons-B-tDfklg.woffView on unpkg

web/dist/assets/index-BXyZNXwi.jsView file

•path = web/dist/assets/index-BXyZNXwi.js kind = oversized_source_file sizeBytes = 4571126 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

web/dist/assets/index-BXyZNXwi.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/gateway/api_routes.jsView file

8const fileUrl = pathToFileURL(filePath).href; L9: return await import(fileUrl); L10: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/gateway/api_routes.jsView on unpkg · L8

web/dist/assets/element-icons-B-tDfklg.woffView file

•path = web/dist/assets/element-icons-B-tDfklg.woff kind = high_entropy_blob sizeBytes = 28200 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/element-icons-B-tDfklg.woffView on unpkg

web/dist/assets/index-BXyZNXwi.jsView file

Findings

2 High4 Medium6 Low

HighShips High Entropy Blobweb/dist/assets/element-icons-B-tDfklg.woff

HighOversized Source Fileweb/dist/assets/index-BXyZNXwi.js

MediumDynamic Requiredist/gateway/api_routes.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings