registry  /  @kasmav/aeropivot  /  2.2.6

@kasmav/aeropivot@2.2.6

High-performance pivot table web component. Framework-agnostic, built for speed and massive datasets.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEvalNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings
ManifestNo manifest risk signals triggered.
scanned 10 file(s), 5.25 MB of source, external domains: cdnjs.cloudflare.com, github.com, jspdf.default.namespaceuri, kasmav.com, opensource.org, purl.org, schemas.microsoft.com, schemas.openxmlformats.org, stuk.github.io, webpjs.appspot.com, www.w3.org
Oversized source lightweight scan
assets/index.js3.45 MB file, sampled 256 KB
NetworkObfuscatedMinifiedUrlStringskasmav.com

Source & flagged code

4 flagged · loading source
assets/exceljs-min.jsView file
22*/ L23: var _0xeed4b4=_0xaf3e;(function(_0x2f244d,_0x410251){var _0x337e34=_0xaf3e,_0x362988=_0x2f244d();while(!![]){try{var _0x5da4e8=parseInt(_0x337e34(0x6d0))/0x1*(parseInt(_0x337e34(0x... L24: * Character classes and associated utilities for the 5th edition of XML 1.0.
Low
Eval

Package source references a known benign dynamic code generation pattern.

assets/exceljs-min.jsView on unpkg · L22
assets/jspdf-es-min.jsView file
142*/ L143: function(_0x4cebdf){var _0x407992=_0x24950b;_0x4cebdf[_0x407992(0x5a5)]=function(_0x168df3,_0x55b6eb,_0x1a0716){return function(_0x5dcd3d,_0x33797d,_0xc698fe){var _0x699743=_0x3c2e... L144: * @license
Medium
Dynamic Require

Package source references dynamic require/import behavior.

assets/jspdf-es-min.jsView on unpkg · L142
pivot-table.es.jsView file
22*/ L23: (function(_0x5cb416,_0x16adcf){var _0x12861b=_0x22a5,_0x2cb2c7=_0x5cb416();while(!![]){try{var _0x1c8142=parseInt(_0x12861b(0x1d8))/0x1+-parseInt(_0x12861b(0x1da))/0x2*(-parseInt(_...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

pivot-table.es.jsView on unpkg · L22
assets/index.jsView file
•path = assets/index.js kind = oversized_source_file sizeBytes = 3622657 magicHex = [redacted]
High
Oversized Source File

Package contains source files above the static scanner size ceiling.

assets/index.jsView on unpkg

Findings

3 High4 Medium4 Low
HighObfuscated Payload Loaderpivot-table.es.js
HighObfuscated
HighOversized Source Fileassets/index.js
MediumDynamic Requireassets/jspdf-es-min.js
MediumNetwork
MediumProtestware
MediumStructural Risk Force Deep Review
LowEvalassets/exceljs-min.js
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings