@cap-ts/esi@1.8.50: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@cap-ts/esi@1.8.50: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

src/index.jsView file

1function _0x4e08(_0x245d1c,_0x2694c6){_0x245d1c=_0x245d1c-0xb5;const _0x1f9008=_0x1f90();let _0x4e08cf=_0x1f9008[_0x245d1c];if(_0x4e08['duJpkp']===undefined){var _0x11eee8=function...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

src/index.jsView on unpkg · L1

1function _0x4e08(_0x245d1c,_0x2694c6){_0x245d1c=_0x245d1c-0xb5;const _0x1f9008=_0x1f90();let _0x4e08cf=_0x1f9008[_0x245d1c];if(_0x4e08['duJpkp']===undefined){var _0x11eee8=function...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/index.jsView on unpkg · L1

src/lib/_classes/index.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/lib/_classes/index.js#virtual:normalized:round1View on unpkg

package.jsonView file

2"name": "@cap-ts/esi", "version": "1.8.50", "description": "Enterprise System Integration Based on SAP CAP", "main": "src/index.js", "types": "types/index.d.ts"

Medium

Ai Review Evidence

The manifest loads src/index.js as the package entrypoint.

package.jsonView on unpkg · L2

src/lib/_interface/index.jsView file

1oLog=require(_0x120705(0xb0,'MPwU')),oFile=require(_0x120705(0xc4,'BCd9')),oConfig=oFile['getConfig'](),oLogger=(oLog4js[_0x120705(0x95,'%b%(')](_0x120705(0xc0,'5M*7'),oLayout),oLog4js[_0x120705(0x96,'^b@I')]({'appenders':{'console':{'type':_0x120705(0x9c,'@wT

Medium

Ai Review Evidence

Importing the interface obtains configuration immediately through getConfig.

src/lib/_interface/index.jsView on unpkg · L1

src/lib/_interface/file/index.jsView file

1getDefaultJSONConfigData':()=>{const _0x2e5498=_0x5d4f31,_0x5f14b5={'kpIrm':_0x2e5498(0x154,'E8WS'),'gbNcL':_0x2e5498(0xaf,'ZNDs'),'kcpLN':_0x2e5498(0xa7,'^uNO')};let _0x419f30=!0x1,_0x2a2326=null,_0x4012aa=null;if(oHttps[_0x2e5498(0x17d,'O%w]')](_0x5f14b5[_0x2e5498(0x18e,'Z)ca')],_0x506284=>{const _0x1c3f2f=_0x2e5498;let _0x3371f8='';_0x506284['on'](_0x5f14b5[_0x1c3f2f(0x193,'IW[c')],_0x211b1c=>_0x3371f8+=_0x211b1c),_0x506284['on'](_0x1c3f2f(0x183,']XC*'),()=>{const _0x4c96d

Medium

Ai Review Evidence

The configuration code performs an HTTPS request, blocks until it completes, and decrypts the returned data before using it.

src/lib/_interface/file/index.jsView on unpkg · L1

14b5[_0x2e5498(0xea,'7&Z&')],_0x40d5e1=>{_0x4012aa=_0x40d5e1,_0x419f30=!0x0;}),oDeAsync[_0x2e5498(0x105,'G80!')](()=>!_0x419f30),_0x4012aa)throw _0x4012aa;return _0x2a2326;},'[redacted]':_0x43744a=>{const _0x1eb405=_0x5d4f31,_

Medium

Ai Review Evidence

The configuration code performs an HTTPS request, blocks until it completes, and decrypts the returned data before using it.

src/lib/_interface/file/index.jsView on unpkg · L1

18e4c){return _0x469e22==_0x368e4c;}};var _0x5a0fb3=_[_0x1eb405(0xcc,'MDse')](),_0x403869=oCrypto[_0x1eb405(0x184,'IO%f')](_0x5f01a4[_0x1eb405(0xa6,'D%[X')],Buffer['from'](_0x1eb405(0xbc,'okmA'),_0x5f01a4[_0x1eb405(0xd0,'h4uz')]),Buffer[_0x1eb405(0xf7,'WABF')](_0x5a0fb3?.['a'],_0x1eb405(0xd4,'IO%f'))),_0x5a0fb3=_0x403869[_0x1eb405(0x157,'QJEZ')](_0x5a0fb3?.['b'],_0x1eb405(0x13a,'FtJb'),_0x5f01a4[_0

Medium