registry / wowdump / 0.3.5

wowdump@0.3.5

⚠ Under review

WoW native memory analysis CLI with Frida evidence, IDA/iced-x86 disassembly, and an elevated reader broker

Static Scan Results

scanned 27d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 173 KB of source

Source & flagged code

2 flagged

package.jsonView file

Lines 8-48json

8 "url": "git+https://github.com/Follen/wowdump.git"

9 },

10 "files": [

11 "dist",

12 "skills",

13 "README.md",

14 "LICENSE"

15 ],

16 "type": "module",

17 "bin": {

18 "wowdump": "dist/cli.js"

19 },

20 "engines": {

21 "node": ">=22"

22 },

23 "scripts": {

24 "clean": "node scripts/clean-dist.mjs",

25 "build": "npm run clean && npm run build:host",

26 "build:host": "tsc -p tsconfig.json",

27 "wowdump": "node dist/cli.js",

28 "postinstall": "node -e \"const fs=require('node:fs');if(fs.existsSync('dist/toolchain.js'))import('./dist/toolchain.js').then(m=>m.bootstrapToolchain())\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L28

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

29 "prepack": "npm run build",

30 "package:verify": "node scripts/verify-package.mjs",

31 "release:verify": "node scripts/verify-release-workflow.mjs verify",

32 "test": "npm run build:host && node --test tests/*.test.mjs",

33 "typecheck": "tsc --noEmit -p tsconfig.json"

34 },

35 "dependencies": {

36 "commander": "^13.1.0",

37 "frida": "^17.2.0",

38 "iced-x86": "^1.21.0",

39 "koffi": "^2.16.3",

40 "zod": "^3.24.2"

41 },

42 "devDependencies": {

43 "@types/node": "^22.13.4",

44 "typescript": "^5.7.3"

45 },

46 "allowScripts": {

47 "frida@17.17.0": true,

48 "koffi@2.16.3": true

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const fs=require('node:fs');if(fs.existsSync('dist/toolchain.js'))import('./dist/toolchain.js').then(m=>m.bootstrapToolchain())"

wowdump@0.3.5

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code