@barchart/chart-lib@2.390.0: Suspicious npm security report

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 2 file(s), 856 KB of source, external domains: github.com, www.w3.org

Source & flagged code

1 flagged

barchart.chart.jsView file

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t)=>()=>(t... L2: `.indexOf(e)>-1}function ce(e){return e===`$`||e===`@`||e===`_`||e>=`a`&&e<=`z`||e>=`A`&&e<=`Z`}function le(e){return ce(e)||e>=`0`&&e<=`9`}function ue(){var e=r[i];if(ce(e)){for(v... ... L41: </svg>`),xi(this.goToLatestButton,{position:`absolute`,right:0,bottom:0,"z-index":3}),Si(this.goToLatestButton,{class:`go-to-latest`}),this.goToLatestButton.onclick=()=>{this.xAxis... L42: `)}function Wj(e={}){return Uj(zj.call(this,e),e)}function Gj(e={}){let t=this.view.mainCanvas,{width:n,height:r}=t,{width:i,height:a,title:o}=e,s=(e,t)=>{let n=document.createElem...

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

barchart.chart.jsView on unpkg · L1

Source & flagged code

1 flagged · loading source

barchart.chart.jsView file

1var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t)=>()=>(t... L2: `.indexOf(e)>-1}function ce(e){return e===`$`||e===`@`||e===`_`||e>=`a`&&e<=`z`||e>=`A`&&e<=`Z`}function le(e){return ce(e)||e>=`0`&&e<=`9`}function ue(){var e=r[i];if(ce(e)){for(v... ... L41: </svg>`),xi(this.goToLatestButton,{position:`absolute`,right:0,bottom:0,"z-index":3}),Si(this.goToLatestButton,{class:`go-to-latest`}),this.goToLatestButton.onclick=()=>{this.xAxis... L42: `)}function Wj(e={}){return Uj(zj.call(this,e),e)}function Gj(e={}){let t=this.view.mainCanvas,{width:n,height:r}=t,{width:i,height:a,title:o}=e,s=(e,t)=>{let n=document.createElem...

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

barchart.chart.jsView on unpkg · L1

Findings

1 High2 Medium4 Low

HighBase64 Obscured Urlbarchart.chart.js

MediumNetwork

MediumStructural Risk Force Deep Review

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License