@gentbajko/slopify@3.12.1: Unknown npm security report (Allow) | LPM Firewall

Loading npm security reports…

@gentbajko/slopify@3.12.1: Unknown npm security report (Allow) | LPM Firewall

Source & flagged code

9 flagged · loading source

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView file

25*/ L26: const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],n=... L27: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView on unpkg · L25

dist/web/assets/index-CzzL9qVN.jsView file

249contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/web/assets/index-CzzL9qVN.jsView on unpkg · L249

dist/extension/slopify-studio-firefox.zipView file

•path = dist/extension/slopify-studio-firefox.zip kind = high_entropy_blob sizeBytes = 127651 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/extension/slopify-studio-firefox.zipView on unpkg

•path = dist/extension/slopify-studio-firefox.zip kind = compressed_blob sizeBytes = 127651 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/extension/slopify-studio-firefox.zipView on unpkg

•path = dist/extension/slopify-studio-firefox.zip kind = nested_archive_needs_inspection sizeBytes = 127651 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

dist/extension/slopify-studio-firefox.zipView on unpkg

dist/adapters/alignment/text.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/adapters/alignment/text.js#virtual:normalized:round1View on unpkg

dist/adapters/ffmpeg.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/adapters/ffmpeg.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapters/ffmpeg.jsView on unpkg

dist/edge/open-browser.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/edge/open-browser.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/edge/open-browser.jsView on unpkg

dist/updater/forward.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/updater/forward.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/updater/forward.jsView on unpkg

Source & flagged code

9 flagged

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView file

25*/ L26: const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[1/0,1/0,-1/0,-1/0],n=... L27: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/web/assets/pdf.worker.min-Dswkl-cV.mjsView on unpkg · L25

dist/web/assets/index-CzzL9qVN.jsView file

249contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/web/assets/index-CzzL9qVN.jsView on unpkg · L249

dist/extension/slopify-studio-firefox.zipView file

•path = dist/extension/slopify-studio-firefox.zip kind = high_entropy_blob sizeBytes = 127651 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/extension/slopify-studio-firefox.zipView on unpkg

•path = dist/extension/slopify-studio-firefox.zip kind = compressed_blob sizeBytes = 127651 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/extension/slopify-studio-firefox.zipView on unpkg

•path = dist/extension/slopify-studio-firefox.zip kind = nested_archive_needs_inspection sizeBytes = 127651 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

dist/extension/slopify-studio-firefox.zipView on unpkg

dist/adapters/alignment/text.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/adapters/alignment/text.js#virtual:normalized:round1View on unpkg

dist/adapters/ffmpeg.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/adapters/ffmpeg.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/adapters/ffmpeg.jsView on unpkg

dist/edge/open-browser.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/edge/open-browser.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/edge/open-browser.jsView on unpkg

dist/updater/forward.jsView file

•matchType = normalized_sha256 matchedPackage = @gentbajko/slopify@1.0.1 matchedPath = dist/updater/forward.js matchedIdentity = npm:QGdlbnRiYWprby9zbG9waWZ5:1.0.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/updater/forward.jsView on unpkg