registry  /  wz-cesium  /  1.0.70

wz-cesium@1.0.70

飞行与3d地图整合

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
SourceNo risky source behavior triggered.
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivial
ManifestNo manifest risk signals triggered.
scanned 7 file(s), 109 KB of source

Source & flagged code

3 flagged · loading source
dist/wz.viewer.jsView file
1patternName = supabase_service_key severity = critical line = 1 matchedText = const a6...iew;
Critical
Critical Secret

Package contains a critical-looking secret pattern.

dist/wz.viewer.jsView on unpkg · L1
1patternName = supabase_service_key severity = critical line = 1 matchedText = const a6...iew;
Critical
Secret Pattern

Supabase service role key (JWT) in dist/wz.viewer.js

dist/wz.viewer.jsView on unpkg · L1
dist/wz.flight.jsView file
1(function(_0x189f05,_0x35c6f0){const _0x73a348=a1_0x29f6,_0x19121b=_0x189f05();while(!![]){try{const _0x5b4c7d=-parseInt(_0x73a348(0xb1))/0x1+parseInt(_0x73a348(0xb8))/0x2*(parseIn...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/wz.flight.jsView on unpkg · L1

Findings

2 Critical2 High1 Medium2 Low
CriticalCritical Secretdist/wz.viewer.js
CriticalSecret Patterndist/wz.viewer.js
HighObfuscated Payload Loaderdist/wz.flight.js
HighObfuscated
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings