1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/cli.jsView on unpkg · L1 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+C.message+`
L15: `+C.stack}}function s(O,j){if(typeof O==="object"&&O!==null){var _=Ps.get(O);if(_!==undefi
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/cli.jsView on unpkg · L1 1Trigger-reachable chain: scripts.start -> dist/cli.js
L1: #!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+C.message+`
L15: `+C.stack}}function s(O,j){if(typeof
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/cli.jsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = @deepseekcode/cli@1.0.22
matchedIdentity = npm:QGRlZXBzZWVrY29kZS9jbGk:1.0.22
similarity = 0.545
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/cli.js:
`;return""}KI.dump=_8;return KI}function rl8(){if(a18)return l1;a18=1;const J=ol8();const z=al8();function X(K,Y){return function(){throw new Error("Function yaml."+K+" is removed ...
${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return z.length>200?`${z.slice(0,200)}...`:z}return null}var k3,L48,x3;var P48=K8(()=>{k3={plan:{label:"Plan",accen...
`)return J+"\\n";if(X==="\r")return J+"\\r"}return null}function hN(J){if(!J||typeof J!=="string")return J;let z=J;if(wy(z)){z=kX8(z)}if(z.startsWith('"')&&z.endsWith('"')){z=z.sli...
[truncated]`:K,path:this.relative(X),size:ke8(X).size,truncated:Y}}fileTree(J=
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/cli.jsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/cli.js:
import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
`,H8?1+d:d)}H8=true;_8=true;d=0;const J8=A.position;while(!N(e)&&e!==0){e=A.input.charCodeAt(++A.position)}w8(A,J8,A.position,false)}return true}function g6(A,n){const G8=A.tag;con...
`;return""}KI.dump=_8;return KI}function rl8(){if(a18)return l1;a18=1;const J=ol8();const z=al8();function X(K,Y){return function(){throw new Error("Function yaml."+K+" is removed ...
https://github.com/highlightjs/highlight.js/issues/2277`);$8=g;V8=r}if(s===undefined){s=true}const
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/cli.jsView on unpkg 89L90: [truncated]`:K,path:this.relative(X),size:ke8(X).size,truncated:Y}}fileTree(J=".",z=2,X=200){const K=this.resolve(J);let Y=0;const D=(Z,q)=>{Y+=1;const G=ve8(Z);const V=this.relati...
L91: })`,{filename:"workflow-script.js"});const D=Y.runInContext(K,{timeout:1000});const Z=await D(X);if(!Z){return D$({title:z.message||"Workflow",description:z.message||"Workflow",goa...
...
L101:
L102: `)}`}return Y}resolvePrimitivePrompt(J,z,X){const K=this.definitions.get(X.workflowId);if(!K)return J;const Y=J.input&&typeof J.input==="object"?J.input:{};const D=String(Y.prompt|...
L103: `)}
L104: `}function uy(J){if(J==="passed")return"通过";if(J==="failed")return"失败";if(J==="blocked")return"阻塞";return J}function nN(J){return J.replace(/\|/g,"\\|").replace(/\n/g," ")}var gy,Z...
L105: `)}}var C
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L89 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+C.message+`
L15: `+C.stack}}function s(O,j){if(typeof O==="object"&&O!==null){var _=Ps.get(O);if(_!==undefi
HighObfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/cli.jsView on unpkg · L1 2if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L52: `+P.slice(q8+1)}else{L8+=P.slice(e)}return L8.slice(1)}function W6(P){let d="";let Y8=0;for(let z8=0;z8<P.length;Y8>=65536?z8+=2:z8++){Y8=y6(P,z8);const e=f[Y8];if(!e&&c(Y8)){d+=P[...
L53: `;return""}KI.dump=_8;return KI}function rl8(){if(a18)return l1;a18=1;const J=ol8();const z=al8();function X(K,Y){return function(){throw new Error("Function yaml."+K+" is removed ...
L54: ${z.slice(0,200)}`}return z.slice(0,200)||null}if(z&&z.length>0){return
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/cli.jsView on unpkg · L2 1Trigger-reachable credential exfiltration chain: scripts.start -> dist/cli.js
L1: #!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+C.message+`
L15: `+C.stack}}f
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
dist/cli.jsView on unpkg · L1 89Trigger-reachable command-output exfiltration chain: scripts.start -> dist/cli.js
L89:
L90: [truncated]`:K,path:this.relative(X),size:ke8(X).size,truncated:Y}}fileTree(J=".",z=2,X=200){const K=this.resolve(J);let Y=0;const D=(Z,q)=>{Y+=1;const G=ve8(Z);const V=this.relati...
L91: })`,{filename:"workflow-script.js"});const D=Y.runInContext(K,{timeout:1000});const Z=await D(X);if(!Z){return D$({title:z.message||"Workflow",description:z.message||"Workflow",goa...
...
L101:
L102: `)}`}return Y}resolvePrimitivePrompt(J,z,X){const K=this.definitions.get(X.workflowId);if(!K)return J;const Y=J.input&&typeof J.input==="object"?J.input:{};const D=String(Y.prompt|...
L103: `)}
L104: `}function uy(J){if(J==="passed")return"通过";if(J==="failed")return"失败";if(J==="blocked")return"阻塞";return J}function
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/cli.jsView on unpkg · L89 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.jsView on unpkg 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+C.message+`
L15: `+C.stack}}function s(O,j){if(typeof O==="object"&&O!==null){var _=Ps.get(O);if(_!==undefi
MediumUnsafe Vm Context
Package source executes code through a VM context API.
dist/cli.jsView on unpkg · L1 •path = dist/cli.js
kind = oversized_source_file
sizeBytes = 7678639
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/cli.jsView on unpkg •path = dist/cli.js
kind = oversized_cli_entrypoint
sizeBytes = 7678639
magicHex = [redacted]
MediumOversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/cli.jsView on unpkg 1#!/usr/bin/env node
L2: if(!process.env.DSC_NODE_ENV){process.env.DSC_NODE_ENV='1';process.env.NODE_ENV='production';}
L3: if(!process.execArgv.some(a=>a.includes('max-old-space-size'))&&!process.env.NODE_OPTIONS?.includes('max-old-space-size')&&!process.env.DSC_RELAUNCHED){process.env.DSC_RELAUNCHED='...
L4: import { createRequire as __clsCr } from 'module';
...
L7: __clsInitRequire();
L8: import{createRequire as my8}from"node:module";var vy8=Object.create;var Iy8=Object.getPrototypeOf;var aS=Object.defineProperty;var yy8=Object.getOwnPropertyNames;var ky8=Object.pro...
L9: at`)?" (<anonymous>)":-1<_.stack.indexOf("@")?"@unknown:0:0":""}return`
...
L14: Error generating stack: `+C.message+`
L15: `+C.stack}}function s(O,j){if(typeof O==="object"&&O!==null){var _=Ps.get(O);if(_!==undefi
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/cli.jsView on unpkg · L1