registry  /  ue-softphone-sdk-beta  /  4.0.64

ue-softphone-sdk-beta@4.0.64

ue-softphone-sdk-beta

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessCryptoEvalNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 643 KB of source, external domains: socket.io

Source & flagged code

4 flagged · loading source
dist/lib/ue-soft-phone.min.jsView file
1patternName = private_key_rsa severity = critical line = 1 matchedText = var ueSo...}();
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/lib/ue-soft-phone.min.jsView on unpkg · L1
1patternName = private_key_rsa severity = critical line = 1 matchedText = var ueSo...}();
Critical
Secret Pattern

RSA private key in dist/lib/ue-soft-phone.min.js

dist/lib/ue-soft-phone.min.jsView on unpkg · L1
1var ueSoftPhone=function(){"use strict";var extendStatics$1=function(e,t){return extendStatics$1=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}...
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/lib/ue-soft-phone.min.jsView on unpkg · L1
1var ueSoftPhone=function(){"use strict";var extendStatics$1=function(e,t){return extendStatics$1=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}...
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/ue-soft-phone.min.jsView on unpkg · L1

Findings

2 Critical1 High2 Medium5 Low
CriticalCritical Secretdist/lib/ue-soft-phone.min.js
CriticalSecret Patterndist/lib/ue-soft-phone.min.js
HighObfuscated
MediumNetwork
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvaldist/lib/ue-soft-phone.min.js
LowWeak Cryptodist/lib/ue-soft-phone.min.js
LowHigh Entropy Strings
LowUrl Strings