@magda/semantic-indexer-sdk @7.0.0-pr.3762.4

Summary

@magda/semantic-indexer-sdk ships a minified dist/index.js bundle for a Magda semantic-indexer SDK. Static keyword patterns fired on the co-occurrence of POST HTTP verbs at several offsets in the minified bundle and on the substring dyndns at line 44075. These are keyword matches on a large rolled-up bundle — the POST occurrences reflect ordinary HTTP client usage expected from an SDK, and a dyndns substring in a minified blob does not by itself indicate a dynamic-DNS C2 destination (it commonly appears inside dependency names, TLD lists, or unrelated string tables). No hardcoded attacker-controlled domain or IP bound to install-time or import-time network I/O, no credential or environment scraping, no lifecycle-script execution, no dropper, and no obfuscated destination decoding are present. The observed patterns are consistent with a normal SDK client bundle.

Source: amazon-inspector (020b70c247fbc09223610616ef9c39ce27218404bff50de29b8a28706679fc14)