•matchType = previous_version_dangerous_delta
matchedPackage = @aseity/lyra@0.4.0
matchedIdentity = npm:QGFzZWl0eS9seXJh:0.4.0
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/index.jsView on unpkg 1683`)}
L1684: `}function ff(e,t=!1){return e.length<=Tl&&!t?e:e.length<=Tl?e+yA:e.slice(0,Tl)+yA}function xt(e,t){if(typeof e!="function")throw new d(`DeepSeek Harness filesystem sandbox session...
L1685:
1848${r}${o}
L1849: `}function TB(e){let t=e.split(/\r?\n/);if(t[0]?.trim()!=="---")return{};let n=t.findIndex((r,i)=>i>0&&r.trim()==="---");if(n===-1)return{};let o={};for(let r of t.slice(1,n)){let ...
L1850: `).replace(/\r/gu,`
...
L1854: `),numLines:u.length,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}if(o==="count"){let{items:a,appliedLimit:l}=Pf(t,e.headLimit,e.offset),u=a.ma...
L1855: `),numMatches:c,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}let{items:r,appliedLimit:i}=Pf(t,e.headLimit,e.offset),s=r.map(n);return{mode:o,nu...
L1856: import pty
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L1848 •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/index.js:
`):e.type==="text"?e.text:JSON.stringify(e)}function zM(e){return typeof e=="string"?e:Array.isArray(e)?e.map(t=>t.type==="input_text"?{type:"text",text:t.text}:t.type==="input_ima...
`,"utf8")}catch{}}async function*Hk(e,t,n){let o=0;try{for await(let r of e)await Kn({type:"stream_chunk",requestId:t,model:n,chunkIndex:o,chunk:r}),o++,yield r;await Kn({type:"str...
`),imageContent:o}}if(e.type==="text")return{toolContent:e.text,imageContent:[]};if(e.type==="image"){let n=Hv(e),o=Ih(n,t);return{toolContent:o.summary,imageContent:o.content}}thr...
`)}function lP(e){let t=Object.keys(e);return t.length===1&&t[0]==="input"}function vd(e,t){retur
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/index.jsView on unpkg 1848${r}${o}
L1849: `}function TB(e){let t=e.split(/\r?\n/);if(t[0]?.trim()!=="---")return{};let n=t.findIndex((r,i)=>i>0&&r.trim()==="---");if(n===-1)return{};let o={};for(let r of t.slice(1,n)){let ...
L1850: `).replace(/\r/gu,`
...
L1854: `),numLines:u.length,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}if(o==="count"){let{items:a,appliedLimit:l}=Pf(t,e.headLimit,e.offset),u=a.ma...
L1855: `),numMatches:c,...l!==void 0?{appliedLimit:l}:{},...(e.offset??0)>0?{appliedOffset:e.offset}:{}}}let{items:r,appliedLimit:i}=Pf(t,e.headLimit,e.offset),s=r.map(n);return{mode:o,nu...
L1856: import pty
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L1848 1/*! Author: Ty <ty29022@gmail.com> */
L2: var z_=Object.defineProperty;var y=(e,t)=>()=>(e&&(t=e(e=0)),t);var K_=(e,t)=>{for(var n in t)z_(e,n,{get:t[n],enumerable:!0})};var Ie,d,Nn,Qr,ei,Un,an,Nt,Ut,Ro,_o,Co,ti,D,js,ni,E=...
L3: `)),n.length>0?n.join(`
...
L14: `)}}function Gn(e,t,n){if(n.length===0)return;let o=e[e.length-1];if(o?.role===t){o.content.push(...n);return}e.push({role:t,content:[...n]})}function bM(e,t,n){return typeof e=="s...
L15: `):e.type==="text"?e.text:JSON.stringify(e)}function zM(e){return typeof e=="string"?e:Array.isArray(e)?e.map(t=>t.type==="input_text"?{type:"text",text:t.text}:t.type==="input_ima...
L16: `),imageContent:o}}if(dn(e)&&e.type==="text"&&typeof e.text=="string")return{toolContent:e.text,imageContent:[]};if(dn(e)&&e.type==="image"){let n=Ak(e),o=
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L1