1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/cli.jsView on unpkg · L1 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+E.message+`
L15: `+E.stack}}function n(O,Q){if(typeof O==="object"&&O!==null){var _=kr.get(O);if(_!==undefi
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L1 1Trigger-reachable chain: scripts.start -> dist/cli.js
L1: #!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+E.message+`
L15: `+E.stack}}function n(O,Q){if(typeof
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/cli.jsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = @deepseekcode/cli@1.0.22
matchedIdentity = npm:QGRlZXBzZWVrY29kZS9jbGk:1.0.22
similarity = 0.591
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.js:
`;return""}vv.dump=j8;return vv}function $c8(){if(D18)return p1;D18=1;const J=Wc8();const z=Oc8();function X(K,D){return function(){throw new Error("Function yaml."+K+" is removed ...
${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return z.length>200?`${z.slice(0,200)}...`:z}return null}var F3,b58,M3;var x58=X8(()=>{F3={plan:{label:"Plan",accen...
`)return J+"\\n";if(X==="\r")return J+"\\r"}return null}function NF(J){if(!J||typeof J!=="string")return J;let z=J;if(Zy(z)){z=pz8(z)}if(z.startsWith('"')&&z.endsWith('"')){z=z.sli...
[truncated]`:K,path:this.relative(X),size:os8(X).size,truncated:D}}fileTree(J=
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.jsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/cli.js:
import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
`,Z8?1+c:c)}Z8=true;j8=true;c=0;const t=U.position;while(!F(s)&&s!==0){s=U.input.charCodeAt(++U.position)}o8(U,t,U.position,false)}return true}function f6(U,i){const G8=U.tag;const...
`;return""}vv.dump=j8;return vv}function $c8(){if(D18)return p1;D18=1;const J=Wc8();const z=Oc8();function X(K,D){return function(){throw new Error("Function yaml."+K+" is removed ...
https://github.com/highlightjs/highlight.js/issues/2277`);V8=u;O8=D8}if(n===undefined){n=true}const
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/cli.jsView on unpkg 89L90: [truncated]`:K,path:this.relative(X),size:os8(X).size,truncated:D}}fileTree(J=".",z=2,X=200){const K=this.resolve(J);let D=0;const Y=(Z,q)=>{D+=1;const G=ds8(Z);const V=this.relati...
L91: })`,{filename:"workflow-script.js"});const Y=D.runInContext(K,{timeout:1000});const Z=await Y(X);if(!Z){return m3({title:z.message||"Workflow",description:z.message||"Workflow",goa...
...
L101:
L102: `)}`}return D}resolvePrimitivePrompt(J,z,X){const K=this.definitions.get(X.workflowId);if(!K)return J;const D=J.input&&typeof J.input==="object"?J.input:{};const Y=String(D.prompt|...
L103: `)}
L104: `}function jy(J){if(J==="passed")return"通过";if(J==="failed")return"失败";if(J==="blocked")return"阻塞";return J}function SF(J){return J.replace(/\|/g,"\\|").replace(/\n/g," ")}var Qy,$...
L105: `)}}var v
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L89 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+E.message+`
L15: `+E.stack}}function n(O,Q){if(typeof O==="object"&&O!==null){var _=kr.get(O);if(_!==undefi
HighObfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/cli.jsView on unpkg · L1 2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L52: `+R.slice(q8+1)}else{_8+=R.slice(s)}return _8.slice(1)}function W6(R){let c="";let K8=0;for(let e=0;e<R.length;K8>=65536?e+=2:e++){K8=k6(R,e);const s=g[K8];if(!s&&p(K8)){c+=R[e];if...
L53: `;return""}vv.dump=j8;return vv}function $c8(){if(D18)return p1;D18=1;const J=Wc8();const z=Oc8();function X(K,D){return function(){throw new Error("Function yaml."+K+" is removed ...
L54: ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/cli.jsView on unpkg · L2 1Trigger-reachable credential exfiltration chain: scripts.start -> dist/cli.js
L1: #!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+E.message+`
L15: `+E.stack}}f
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/cli.jsView on unpkg · L1 89Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js
L89:
L90: [truncated]`:K,path:this.relative(X),size:os8(X).size,truncated:D}}fileTree(J=".",z=2,X=200){const K=this.resolve(J);let D=0;const Y=(Z,q)=>{D+=1;const G=ds8(Z);const V=this.relati...
L91: })`,{filename:"workflow-script.js"});const Y=D.runInContext(K,{timeout:1000});const Z=await Y(X);if(!Z){return m3({title:z.message||"Workflow",description:z.message||"Workflow",goa...
...
L101:
L102: `)}`}return D}resolvePrimitivePrompt(J,z,X){const K=this.definitions.get(X.workflowId);if(!K)return J;const D=J.input&&typeof J.input==="object"?J.input:{};const Y=String(D.prompt|...
L103: `)}
L104: `}function jy(J){if(J==="passed")return"通过";if(J==="failed")return"失败";if(J==="blocked")return"阻塞";return J}function
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.jsView on unpkg · L89 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.jsView on unpkg 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+E.message+`
L15: `+E.stack}}function n(O,Q){if(typeof O==="object"&&O!==null){var _=kr.get(O);if(_!==undefi
MediumUnsafe Vm Context
Package source executes code through a VM context API.
dist/cli.jsView on unpkg · L1 •path = dist/cli.js
kind = oversized_source_file
sizeBytes = 7596437
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/cli.jsView on unpkg •path = dist/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 7596437
magicHex = [redacted]
MediumOversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/cli.jsView on unpkg 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as DI8}from"node:module";var av8=Object.create;var rv8=Object.getPrototypeOf;var CS=Object.defineProperty;var sv8=Object.getOwnPropertyNames;var tv8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+E.message+`
L15: `+E.stack}}function n(O,Q){if(typeof O==="object"&&O!==null){var _=kr.get(O);if(_!==undefi
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/cli.jsView on unpkg · L1