@gentbajko/slopify@2.5.0: Unknown npm security report (Allow) | LPM Firewall

Loading npm security reports…

@gentbajko/slopify@2.5.0: Unknown npm security report (Allow) | LPM Firewall

Source & flagged code

7 flagged · loading source

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView file

25*/ L26: const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],n=... L27: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView on unpkg · L25

scripts/docker-run.shView file

•path = scripts/docker-run.sh kind = build_helper sizeBytes = 114 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/docker-run.shView on unpkg

dist/kernel/db/migrate.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/kernel/db/migrate.js#virtual:normalized:round1View on unpkg

dist/adapters/ffmpeg.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/adapters/ffmpeg.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapters/ffmpeg.jsView on unpkg

dist/edge/open-browser.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/edge/open-browser.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/edge/open-browser.jsView on unpkg

dist/updater/forward.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/updater/forward.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/updater/forward.jsView on unpkg

dist/adapters/llm/codex-server-models.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gentbajko/slopify@2.2.0 matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:2.2.0 similarity = 0.592 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/adapters/llm/codex-server-models.jsView on unpkg

Source & flagged code

7 flagged

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView file

25*/ L26: const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],n=... L27: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView on unpkg · L25

scripts/docker-run.shView file

•path = scripts/docker-run.sh kind = build_helper sizeBytes = 114 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/docker-run.shView on unpkg

dist/kernel/db/migrate.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/kernel/db/migrate.js#virtual:normalized:round1View on unpkg

dist/adapters/ffmpeg.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/adapters/ffmpeg.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapters/ffmpeg.jsView on unpkg

dist/edge/open-browser.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/edge/open-browser.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/edge/open-browser.jsView on unpkg

dist/updater/forward.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/updater/forward.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/updater/forward.jsView on unpkg

dist/adapters/llm/codex-server-models.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @gentbajko/slopify@2.2.0 matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:2.2.0 similarity = 0.592 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/adapters/llm/codex-server-models.jsView on unpkg