js-x-ray

JS-X-Ray is a static application security testing (SAST) tool designed for JavaScript and TypeScript, focusing on detecting malicious patterns, security vulnerabilities, and code anomalies. It leverages an Abstract Syntax Tree (AST) approach for variable tracing and dynamic import resolution, enabling the identification of sophisticated obfuscation and malicious constructs such as data exfiltration and vulnerable coding practices. Notable features include the ability to detect various forms of obfuscated code, flag weak cryptographic algorithms, and provide configurable sensitivity modes for tailored analysis.