@knockdata/objectexplorer@0.3.13: Suspicious npm security report | LPM Firewall

Loading npm security reports…

@knockdata/objectexplorer@0.3.13: Suspicious npm security report | LPM Firewall

Source & flagged code

8 flagged · loading source

app/assets/WorkerParser.jsView file

53`),t=t.replace(ra,`�`),e.src=t}function aa(e){let t;e.inlineMode?(t=new e.Token(`inline`,``,0),t.content=e.src,t.map=[0,1],t.children=[],e.tokens.push(t)):e.md.block.parse(e.src,e.... L54: `,o.map=[t,e.line],!0}function ja(e,t,n,i){let a=e.bMarks[t]+e.tShift[t],o=e.eMarks[t];if(e.sCount[t]-e.blkIndent>=4||a+3>o)return!1;let s=e.src.charCodeAt(a);if(s!==126&&s!==96)re... L55: https://github.com/highlightjs/highlight.js/issues/2277`),a=e,i=t),n===void 0&&(n=!0);let o={code:i,language:a};ce(`before:highlight`,o);let s=o.result?o.result:b(o.language,o.code...

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L53

cli.jsView file

114else if (process.platform === "win32") { L115: spawn(process.env.COMSPEC || "cmd.exe", ["/c", "start", "", target], { stdio: "ignore", detached: true }).unref() L116: }

High

Shell

Package source references shell execution.

cli.jsView on unpkg · L114

app/assets/esm-worker.jsView file

1const e=`https://unpkg.com/@ffmpeg/core@0.12.9/dist/umd/ffmpeg-core.js`;var t;(function(e){e.LOAD=`LOAD`,e.EXEC=`EXEC`,e.FFPROBE=`FFPROBE`,e.WRITE_FILE=`WRITE_FILE`,e.READ_FILE=`RE...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/assets/esm-worker.jsView on unpkg · L1

app/assets/ffmpeg-core.jsView file

7L8: var Module=typeof createFFmpegCore!="undefined"?createFFmpegCore:{};var readyPromiseResolve,readyPromiseReject;Module["ready"]=new Promise((resolve,reject)=>{readyPromiseResolve=re... L9:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

app/assets/ffmpeg-core.jsView on unpkg · L7

app/assets/index.jsView file

1880contains invisible/control Unicode U+200B (zero width space) ${g}`)).style(`margin-left`,u?`${+u}px`:null).style(`width`,p===void 0?null:`${+p}px`).style(`font-variant`,cB(o,`normal`)).call(fB,f).node()}var RH=new Map([[`symbol`,IH],[`color`,VH],[`opacity`,HH]]);function zH(e,t,n={}){return(r,a)=>{if

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

app/assets/index.jsView on unpkg · L1880

app/assets/ffmpeg-core.wasmView file

•path = app/assets/ffmpeg-core.wasm kind = wasm_module sizeBytes = 32232419 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

app/assets/ffmpeg-core.wasmView on unpkg

app/seti.woffView file

•path = app/seti.woff kind = high_entropy_blob sizeBytes = 37996 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

app/seti.woffView on unpkg

server/WebServer.mjsView file

•path = server/WebServer.mjs kind = oversized_source_file sizeBytes = 5426558 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

server/WebServer.mjsView on unpkg

Source & flagged code

8 flagged

app/assets/WorkerParser.jsView file

53`),t=t.replace(ra,`�`),e.src=t}function aa(e){let t;e.inlineMode?(t=new e.Token(`inline`,``,0),t.content=e.src,t.map=[0,1],t.children=[],e.tokens.push(t)):e.md.block.parse(e.src,e.... L54: `,o.map=[t,e.line],!0}function ja(e,t,n,i){let a=e.bMarks[t]+e.tShift[t],o=e.eMarks[t];if(e.sCount[t]-e.blkIndent>=4||a+3>o)return!1;let s=e.src.charCodeAt(a);if(s!==126&&s!==96)re... L55: https://github.com/highlightjs/highlight.js/issues/2277`),a=e,i=t),n===void 0&&(n=!0);let o={code:i,language:a};ce(`before:highlight`,o);let s=o.result?o.result:b(o.language,o.code...

High

Child Process

Package source references child process execution.

app/assets/WorkerParser.jsView on unpkg · L53

cli.jsView file

114else if (process.platform === "win32") { L115: spawn(process.env.COMSPEC || "cmd.exe", ["/c", "start", "", target], { stdio: "ignore", detached: true }).unref() L116: }

High

Shell

Package source references shell execution.

cli.jsView on unpkg · L114

app/assets/esm-worker.jsView file

1const e=`https://unpkg.com/@ffmpeg/core@0.12.9/dist/umd/ffmpeg-core.js`;var t;(function(e){e.LOAD=`LOAD`,e.EXEC=`EXEC`,e.FFPROBE=`FFPROBE`,e.WRITE_FILE=`WRITE_FILE`,e.READ_FILE=`RE...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

app/assets/esm-worker.jsView on unpkg · L1

app/assets/ffmpeg-core.jsView file

7L8: var Module=typeof createFFmpegCore!="undefined"?createFFmpegCore:{};var readyPromiseResolve,readyPromiseReject;Module["ready"]=new Promise((resolve,reject)=>{readyPromiseResolve=re... L9:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

app/assets/ffmpeg-core.jsView on unpkg · L7

app/assets/index.jsView file

1880contains invisible/control Unicode U+200B (zero width space) ${g}`)).style(`margin-left`,u?`${+u}px`:null).style(`width`,p===void 0?null:`${+p}px`).style(`font-variant`,cB(o,`normal`)).call(fB,f).node()}var RH=new Map([[`symbol`,IH],[`color`,VH],[`opacity`,HH]]);function zH(e,t,n={}){return(r,a)=>{if

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

app/assets/index.jsView on unpkg · L1880

app/assets/ffmpeg-core.wasmView file

•path = app/assets/ffmpeg-core.wasm kind = wasm_module sizeBytes = 32232419 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

app/assets/ffmpeg-core.wasmView on unpkg

app/seti.woffView file

•path = app/seti.woff kind = high_entropy_blob sizeBytes = 37996 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

app/seti.woffView on unpkg

server/WebServer.mjsView file

•path = server/WebServer.mjs kind = oversized_source_file sizeBytes = 5426558 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

server/WebServer.mjsView on unpkg