Loading npm security reports…

@dimm-city/print-md: Suspicious npm security report (Warn) | LPM Firewall

registry / @dimm-city/print-md / 0.8.1

@dimm-city/print-md@0.8.1

Markdown-to-PDF converter for professional print layout using Paged.js and Ghostscript.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicenseWildcardDependency

scanned 31 file(s), 1.77 MB of source, external domains: 127.0.0.1, api.github.com, api.itch.io, bitbucket.org, broth.itch.ovh, bugzilla.mozilla.org, connect.microsoft.com, css-infos.net, cssdot.ru, dev.azure.com, developer.mozilla.org, drafts.csswg.org, drafts.fxtf.org, git.example.com, github.com, help.dottoro.com, help.shopify.com, itch.io, kdp.amazon.com, learn.microsoft.com, msdn.microsoft.com, phrogz.net, registry.npmjs.org, webkit.org, www.color.org, www.drivethrurpg.com, www.ghostscript.com, www.google.com, www.sitepoint.com, www.w3.org

Source & flagged code

3 flagged

dist/cli-9crbxz3g.jsView file

Lines 17-57javascript

17} from "./cli-fwh13qhj.js";

18import {

19 detectProjectSource,

20 syncRemoteFor

21} from "./cli-1tyj4bk3.js";

22import {

23 defaultGitHttp

24} from "./cli-mxcqrexc.js";

25import {

26 __require

27} from "./cli-37x76zdn.js";

29// src/lib/build-error.ts

30var EXIT_CODES = {

31 OK: 0,

32 FINDINGS: 1,

33 USAGE: 2,

34 PIPELINE: 3

35};

37class BuildError extends Error {

38 exitCode;

39 constructor(message, exitCode = EXIT_CODES.PIPELINE) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli-9crbxz3g.jsView on unpkg · L37

40 super(message);

41 this.name = "BuildError";

42 this.exitCode = exitCode;

43 }

44}

46// src/constants.ts

47var NETWORK = {

48 DEFAULT_PORT: 3579

49};

50var DEBOUNCE = {

51 FILE_WATCH: 100

52};

54// src/lib/cli-args.ts

55class UsageError extends Error {

56 exitCode;

57 constructor(message, exitCode = EXIT_CODES.USAGE) {

Lines 556-596javascript

556 ...nodeLoc(decl)

557 });

558 }

559 });

560 root.walkRules((rule) => {

561 for (const selector of splitSelectorList(rule.selector)) {

dist/favicon-wkbm9cjn.icoView file

•path = dist/favicon-wkbm9cjn.ico kind = high_entropy_blob sizeBytes = 61444 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/favicon-wkbm9cjn.icoView on unpkg

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code