Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@adguard/dnr-rulesets@5.0.20260817100103: Clean npm security | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 13 low-signal pattern(s) reviewed.

View on npm All versions

registry / @adguard/dnr-rulesets / 5.0.20260817100103

@adguard/dnr-rulesets@5.0.20260817100103

Utility to create AdGuard DNR rulesets for mv3 extensions

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoFilesystemNetwork

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

CopyleftLicense

scanned 4 file(s), 3.16 MB of source, external domains: af.gog.com, dai.google.com, file-upload.org, filters.adtidy.org, foo.com, future-sale-system.de, googleads.g.doubleclick.net, pubads.g.doubleclick.net, securepubads.g.doubleclick.net, www.facebook.com, www.gog.com, www.iab.net, www.ndtv.com, www.wp.pl

Oversized source lightweight scan

dist/cli.cjs5.61 MB file, sampled 256 KB

FilesystemNetworkChildProcessCrypto

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

HighEntropyStrings

UrlStrings

filters.adtidy.org

Source & flagged code

5 flagged · loading source

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L997: var reservedWords = { L998: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L999: 5: "class enum extends super const export import", ... L1046: if (code <= 0xffff) { L1047: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1048: } ... L8287: start: S.token, L8288: body: block_(), L8289: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adguard/dnr-rulesets@4.2.20260817090101 matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.2.20260817090101 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 5883862 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 5883862 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg

Findings

1 High5 Medium7 Low

HighPrevious Version Dangerous Deltadist/cli.cjs

MediumNetwork

MediumShips Wasm Moduledist/re2.wasm

MediumOversized Source Filedist/cli.cjs

MediumOversized Cli Entrypointdist/cli.cjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/lib/index.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowCopyleft License

93%Pass

Verdict confidence

Firewall policyNo policy match

Package metadata

npm

AuthorAdguard Software Ltd.

Maintainersameshkov, maximtop, blakhard

Version4.1.20260819060046

PublishedAug 17, 2026

LicenseGPL-3.0-only

Dependencies10

Integrityverified

Package size42.4 MB

Files131

Runtime surface

package.json

Entrypointsmain → dist/lib/index.jstypes → dist/types/lib/index.d.tsexports mapbin → dnr-rulesets

RuntimeNo engine / OS / CPU constraints

Artifact216 MB · 131 files1 signature(s)

Install lifecycleNo install hooks · other: build, build:assets, build:docs, build:lib +8

Behavioral surface

ChildProcessCryptoFilesystemNetworkHighEntropyStringsTelemetryUrlStringsCopyleftLicense

LPM CLI

Source & flagged code

5 flagged

dist/lib/index.jsView file

10import { fileURLToPath } from 'node:url'; L11: import axios from 'axios'; L12: import fastGlob from 'fast-glob'; ... L997: var reservedWords = { L998: 3: "abstract boolean byte char class double enum export extends final float goto implements import int interface long native package private protected public short static super syn... L999: 5: "class enum extends super const export import", ... L1046: if (code <= 0xffff) { L1047: return code >= 0xaa && nonASCIIidentifierStart.test(String.fromCharCode(code)); L1048: } ... L8287: start: S.token, L8288: body: block_(), L8289: end: prev()

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/index.jsView on unpkg · L10

dist/re2.wasmView file

•path = dist/re2.wasm kind = wasm_module sizeBytes = 892736 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/re2.wasmView on unpkg

dist/cli.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adguard/dnr-rulesets@4.2.20260817090101 matchedIdentity = npm:QGFkZ3VhcmQvZG5yLXJ1bGVzZXRz:4.2.20260817090101 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_source_file sizeBytes = 5883862 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/cli.cjsView on unpkg

•path = dist/cli.cjs kind = oversized_cli_entrypoint sizeBytes = 5883862 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli.cjsView on unpkg