trycase: Suspicious npm security report (Warn)

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 558 KB of source, external domains: 127.0.0.1, github.com, quiet-lark-507.eu-west-1.convex.site, www.trycase.dev

Source & flagged code

1 flagged

dist/index.jsView file

51class CommanderError extends Error { L52: constructor(exitCode, code, message) { L53: super(message); ... L769: var EventEmitter = __require("node:events").EventEmitter; L770: var childProcess = __require("node:child_process"); L771: var path = __require("node:path"); ... L815: this._outputConfiguration = { L816: writeOut: (str) => process2.stdout.write(str), L817: writeErr: (str) => process2.stderr.write(str), ... L2164: var RETURN_FALSE = () => false; L2165: var sanitizeRange = (range) => range.replace(REGEX_REGEXP_RANGE, (match, from, to) => from.charCodeAt(0) <= to.charCodeAt(0) ? match : EMPTY); L2166: var cleanRangeBackSlash = (slashes) => {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L51

Source & flagged code

1 flagged · loading source

dist/index.jsView file

51class CommanderError extends Error { L52: constructor(exitCode, code, message) { L53: super(message); ... L769: var EventEmitter = __require("node:events").EventEmitter; L770: var childProcess = __require("node:child_process"); L771: var path = __require("node:path"); ... L815: this._outputConfiguration = { L816: writeOut: (str) => process2.stdout.write(str), L817: writeErr: (str) => process2.stderr.write(str), ... L2164: var RETURN_FALSE = () => false; L2165: var sanitizeRange = (range) => range.replace(REGEX_REGEXP_RANGE, (match, from, to) => from.charCodeAt(0) <= to.charCodeAt(0) ? match : EMPTY); L2166: var cleanRangeBackSlash = (slashes) => {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L51

Findings

1 High3 Medium4 Low

HighSandbox Evasion Gated Capabilitydist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings