180`+ve:"",ze!==null?`
L181: `+ze:""))}}}return B}a(Z7,"constructClassInstance");function eO(T,R,j){{var J=pn(R)||"Component",_=T.render;_||(R.prototype&&typeof R.prototype.render=="function"?o("%s(...): No `r...
L182:
...
L193: Error generating stack: `+J.message+`
L194: `+J.stack}}a(qS,"getStackByComponentStackNode");var Wm=n.ReactCurrentDispatcher,Ac=n.ReactDebugCurrentFrame,ag=0,Yu=1,HS=2,c3=3,jS=4,kp=0,u3=1,Lp=2,Km=12800;function d3(T){return c...
L195: `));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getChar"),tt={ttys:[],init(){},shutdown(){},register(A,P){tt.ttys[A]={input:[],output:[],ops:P},Y.registerDevice(A,tt...
L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function JQe(e){let t=e.match(/^loc
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
server/WebServer.mjsView on unpkg · L180 1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return z3(e.na...
L10: `.repea
CriticalHardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
server/WebServer.mjsView on unpkg · L1 1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return z3(e.na...
L10: `.repea
CriticalCredential Exfiltration
Source appears to send environment or credential material to an external endpoint.
server/WebServer.mjsView on unpkg · L1 1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return z3(e.na...
L10: `.repea
CriticalBrowser Credential Phishing
Source appears to collect browser login credentials for exfiltration.
server/WebServer.mjsView on unpkg · L1 1Trigger-reachable chain: manifest.main -> server/WebServer.mjs
L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("This is not an AST node."
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
server/WebServer.mjsView on unpkg · L1 •matchType = previous_version_dangerous_delta
matchedPackage = @knockdata/objectexplorer@0.7.4
matchedIdentity = npm:[redacted]:0.7.4
similarity = 0.971
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
server/WebServer.mjsView on unpkg 195`));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getChar"),tt={ttys:[],init(){},shutdown(){},register(A,P){tt.ttys[A]={input:[],output:[],ops:P},Y.registerDevice(A,tt...
L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function JQe(e){let t=e.match(/^local\[(\*|\d+)\]$/);return t?t[1]==="*"...
L197: `).find(n=>n.trim().startsWith("version"));return r?r.split("=")[1].trim():""}catch{return""}}async function qv(e){let t=Gv(e),r=[];try{r=await c8.readdir(t)}catch{r=[]}let n=[];fo...
HighChild Process
Package source references child process execution.
server/WebServer.mjsView on unpkg · L195 195`));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getChar"),tt={ttys:[],init(){},shutdown(){},register(A,P){tt.ttys[A]={input:[],output:[],ops:P},Y.registerDevice(A,tt...
L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function JQe(e){let t=e.match(/^local\[(\*|\d+)\]$/);return t?t[1]==="*"...
L197: `).find(n=>n.trim().startsWith("version"));return r?r.split("=")[1].trim():""}catch{return""}}async function qv(e){let t=Gv(e),r=[];try{r=await c8.readdir(t)}catch{r=[]}let n=[];fo...
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
server/WebServer.mjs:
`),"blockTransform")})}function bI(e,t){if(!t)return e;let r=typeof t[0]=="string"?t[0]:"[",n=typeof t[1]=="string"?t[1]:"]";return r+e+n}function uX(e,t,r,n,i){let o=typeof t=="fu...
`);n.next.cells.push({colspan:t,rowspan:r,text:i})}closeTableRow(){let t=this._popStackItem();t.next.rows.push(t.cells)}closeTable({tableToString:t,leadingLineBreaks:r=2,trailingLi...
`+J.stack}}a(qS,"getStackByComponentStackNode");var Wm=n.ReactCurrentDispatcher,Ac=n.ReactDebugCurrentFrame,ag=0,Yu=1,HS=2,c3=3,jS=4,kp=0,u3=1,Lp=2,Km=12800;function d3(T){return c...
`));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getCha
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
server/WebServer.mjsView on unpkg 180`+ve:"",ze!==null?`
L181: `+ze:""))}}}return B}a(Z7,"constructClassInstance");function eO(T,R,j){{var J=pn(R)||"Component",_=T.render;_||(R.prototype&&typeof R.prototype.render=="function"?o("%s(...): No `r...
L182:
...
L193: Error generating stack: `+J.message+`
L194: `+J.stack}}a(qS,"getStackByComponentStackNode");var Wm=n.ReactCurrentDispatcher,Ac=n.ReactDebugCurrentFrame,ag=0,Yu=1,HS=2,c3=3,jS=4,kp=0,u3=1,Lp=2,Km=12800;function d3(T){return c...
L195: `));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getChar"),tt={ttys:[],init(){},shutdown(){},register(A,P){tt.ttys[A]={input:[],output:[],ops:P},Y.registerDevice(A,tt...
L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.startsWith(`${t} `))return n.slice(t.length).trim()}return""}function JQe(e){let t=e.match(/^loc
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
server/WebServer.mjsView on unpkg · L180 1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return z3(e.na...
L10: `.repea
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
server/WebServer.mjsView on unpkg · L1 1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("This is not an AST node.");switch(e.type){case"universal":return z3(e.na...
L10: `.repea
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
server/WebServer.mjsView on unpkg · L1 14`).map(o=>"> "+o).join(`
L15: `),"blockTransform")})}function bI(e,t){if(!t)return e;let r=typeof t[0]=="string"?t[0]:"[",n=typeof t[1]=="string"?t[1]:"]";return r+e+n}function uX(e,t,r,n,i){let o=typeof t=="fu...
L16: `)}splitLongWord(t){let r=[],n=0;for(;t.length>this.maxLineLength;){let i=t.substring(0,this.maxLineLength),o=t.substring(this.maxLineLength),s=i.lastIndexOf(this.wrapCharacters[n]...
...
L193: Error generating stack: `+J.message+`
L194: `+J.stack}}a(qS,"getStackByComponentStackNode");var Wm=n.ReactCurrentDispatcher,Ac=n.ReactDebugCurrentFrame,ag=0,Yu=1,HS=2,c3=3,jS=4,kp=0,u3=1,Lp=2,Km=12800;function d3(T){return c...
L195: `));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getChar"),tt={ttys:[],init(){},shutdown(){},register(A,P){tt.ttys[A]={input:[],output
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
server/WebServer.mjsView on unpkg · L14 1Cross-file remote execution chain: server/WebServer.mjs spawns app/assets/index.js; helper contains network access plus dynamic code execution.
L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){retu
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
server/WebServer.mjsView on unpkg · L1 1Trigger-reachable credential exfiltration chain: manifest.main -> server/WebServer.mjs
L1: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L2: var OOe=Object.create;var A3=Object.defineProperty;var IOe=Object.getOwnPropertyDescriptor;var NOe=Object.getOwnPropertyNames;var kOe=Object.getPrototypeOf,LOe=Object.prototype.has...
L3: `)}function Xr(...e){let t=R3(2,"info");process.stderr.write(`
L4: ${t.link} ${O3(e)}`),I3("INFO ",e,t.short)}function Hr(...e){let t=R3(2,"warn");process.stderr.write(`
...
L8: `+lQ(t,i.offset,i.len))}return n.value}function lQ(e,t,r=1){return`${e.replace(/(\t)|(\r)|(\n)/g,(n,i,o)=>i?"\u2409":o?"\u240D":"\u240A")}
L9: ${"".padEnd(t)}${"^".repeat(r)}`}function mQ(e){return UIe(HO,e)}function Il(e){if(!e.type)throw new Error("T
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
server/WebServer.mjsView on unpkg · L1 180Trigger-reachable command-output exfiltration chain: manifest.main -> server/WebServer.mjs
L180: `+ve:"",ze!==null?`
L181: `+ze:""))}}}return B}a(Z7,"constructClassInstance");function eO(T,R,j){{var J=pn(R)||"Component",_=T.render;_||(R.prototype&&typeof R.prototype.render=="function"?o("%s(...): No `r...
L182:
...
L193: Error generating stack: `+J.message+`
L194: `+J.stack}}a(qS,"getStackByComponentStackNode");var Wm=n.ReactCurrentDispatcher,Ac=n.ReactDebugCurrentFrame,ag=0,Yu=1,HS=2,c3=3,jS=4,kp=0,u3=1,Lp=2,Km=12800;function d3(T){return c...
L195: `));if(!A)return null;me=Le(A,!0)}return me.shift()},"FS_stdin_getChar"),tt={ttys:[],init(){},shutdown(){},register(A,P){tt.ttys[A]={input:[],output:[],ops:P},Y.registerDevice(A,tt...
L196: `)){let n=r.trim();if(n.startsWith(`${t} `)||n.start
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
server/WebServer.mjsView on unpkg · L180 •matchType = normalized_sha256
matchedPackage = @knockdata/objectexplorer@0.7.0
matchedPath = server/WebServer.mjs
matchedIdentity = npm:[redacted]:0.7.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
HighKnown Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
server/WebServer.mjsView on unpkg