registry / xpxpmd / 1.0.0

xpxpmd@1.0.0

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVars

Supply chain

HighEntropyStringsMinifiedTrivialUrlStrings

Manifest

NoLicense

scanned 1 file(s), 256 KB of source, external domains: commandcode.ai, staging.commandcode.ai

Oversized source lightweight scan

dist/cli.mjs2.10 MB file, sampled 256 KB

EnvironmentVarsHighEntropyStringsMinifiedUrlStringscommandcode.aistaging.commandcode.ai

Source & flagged code

6 flagged

dist/index.mjsView file

Lines 1-2javascript

1#!/usr/bin/env node

2var r=process.env;r.NODE_ENV||(r.NODE_ENV="production"),await import(new URL("./cli.mjs",import.meta.url).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L1

vsix/commandcode-vscode.vsixView file

•path = vsix/commandcode-vscode.vsix kind = high_entropy_blob sizeBytes = 47491 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vsix/commandcode-vscode.vsixView on unpkg

•path = vsix/commandcode-vscode.vsix kind = compressed_blob sizeBytes = 47491 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vsix/commandcode-vscode.vsixView on unpkg

•path = vsix/commandcode-vscode.vsix kind = nested_archive_needs_inspection sizeBytes = 47491 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

vsix/commandcode-vscode.vsixView on unpkg

dist/cli.mjsView file

•path = dist/cli.mjs kind = oversized_source_file sizeBytes = 2200464 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli.mjsView on unpkg

•path = dist/cli.mjs kind = oversized_cli_entrypoint sizeBytes = 2200464 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.mjsView on unpkg

Source & flagged code

6 flagged · loading source

dist/index.mjsView file

1#!/usr/bin/env node L2: var r=process.env;r.NODE_ENV||(r.NODE_ENV="production"),await import(new URL("./cli.mjs",import.meta.url).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.mjsView on unpkg · L1

vsix/commandcode-vscode.vsixView file

•path = vsix/commandcode-vscode.vsix kind = high_entropy_blob sizeBytes = 47491 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

vsix/commandcode-vscode.vsixView on unpkg

•path = vsix/commandcode-vscode.vsix kind = compressed_blob sizeBytes = 47491 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

vsix/commandcode-vscode.vsixView on unpkg

Findings

2 High5 Medium4 Low

HighShips High Entropy Blobvsix/commandcode-vscode.vsix

HighOversized Source Filedist/cli.mjs

MediumDynamic Requiredist/index.mjs

MediumEnvironment Vars

MediumShips Compressed Blobvsix/commandcode-vscode.vsix

MediumOversized Cli Entrypointdist/cli.mjs

MediumStructural Risk Force Deep Review

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionvsix/commandcode-vscode.vsix

LowNo License