@lucideproxy/svg@0.0.17: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@lucideproxy/svg@0.0.17: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

6 flagged · loading source

assets/livekit-DqpdvE-G-72d19303.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

assets/livekit-DqpdvE-G-72d19303.jsView on unpkg · L13

assets/motion-ClYBgd9J-72d19303.jsView file

8} L9: `),()=>{var C;(C=a.current)==null||C.removeAttribute("data-motion-pop-id"),P.contains(V)&&P.removeChild(V)}},[e]),z.jsx(Ic,{isPresent:e,childRef:a,sizeRef:l,pop:r,children:r===!1?t...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

assets/motion-ClYBgd9J-72d19303.jsView on unpkg · L8

assets/DarkVeil-BLvPerYu-72d19303.jsView file

1(function(_0xcfcf65,_0x1104c2){const _0x17db7f={_0x5ea6c4:0x474,_0x341d25:0x40c,_0xf6a213:0x208,_0x52f593:0x46b,_0x6a88a1:0x30a,_0x4687b6:0x575,_0x2e7a52:0x42d,_0x22e2d3:0x44a,_0x4...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

assets/DarkVeil-BLvPerYu-72d19303.jsView on unpkg · L1

ke8li/wgqine.wasmView file

•path = ke8li/wgqine.wasm kind = wasm_module sizeBytes = 586279 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

ke8li/wgqine.wasmView on unpkg

assets/fingerprint-Y5nV5FVa-72d19303.jsView file

•matchType = normalized_sha256 matchedPackage = @lucideproxy/svg@0.0.15 matchedPath = assets/fingerprint-Y5nV5FVa-d1a425bf.js matchedIdentity = npm:QGx1Y2lkZXByb3h5L3N2Zw:0.0.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/fingerprint-Y5nV5FVa-72d19303.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = b023bf714272765b signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @lucideproxy/svg@0.0.15 matchedPath = assets/fingerprint-Y5nV5FVa-d1a425bf.js matchedIdentity = npm:QGx1Y2lkZXByb3h5L3N2Zw:0.0.15 similarity = 1.000 shingleOverlap = 12 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

assets/fingerprint-Y5nV5FVa-72d19303.jsView on unpkg

Source & flagged code

6 flagged

assets/livekit-DqpdvE-G-72d19303.jsView file

13patternName = generic_password severity = medium line = 13 matchedText = `},e.par...+`\r

Medium

Secret Pattern

Package contains a possible secret pattern.

assets/livekit-DqpdvE-G-72d19303.jsView on unpkg · L13

assets/motion-ClYBgd9J-72d19303.jsView file

Lines 1-10javascript

1import{r as w,j as z}from"./react-CKawGOZZ-72d19303.js";const hn=w.createContext({});function yt(t){const e=w.useRef(null);return e.current===null&&(e.current=t()),e.current}const Xo=typeof window<"u",me=Xo?w.useLayoutEffect:w.useEffect,ge=w.createContext(null);function fn(t,e){t.indexOf(e)===-1&&t.push(e)}function oe(t,e){const n=t.indexOf(e);n>-1&&t.splice(n,1)}function _o([...t],e,n){const s=e<0?t.length+e:e;if(s>=0&&s<t.length){const i=n<0?t.length+n:n,[r]=t.splice(e,1);t.splice(i,0,r)}return t}const tt=(t,e,n)=>n>e?e:n<t?t:n;let dn=()=>{};const at={},si=t=>/^-?(?:\d+(?:\.\d+)?|\.\d+)$/u.t ...

2 [data-motion-pop-id="${o}"] {

3 position: absolute !important;

4 width: ${d}px !important;

5 height: ${p}px !important;

6 ${b}px !important;

7 ${M}px !important;

8 }

9 `),()=>{var C;(C=a.current)==null||C.removeAttribute("data-motion-pop-id"),P.contains(V)&&P.removeChild(V)}},[e]),z.jsx(Ic,{isPresent:e,childRef:a,sizeRef:l,pop:r,children:r===!1?t:w.cloneElement(t,{ref:h})})}const Fc=({children:t,initial:e,isPresent:n,onExitComplete:s,custom:i,presenceAffectsLayout:r,mode:o,anchorX:a,anchorY:l,root:c})=>{const u=yt(Oc),h=w.useId(),f=w.useRef(n),d=w.useRef(s);me(()=>{f.current=n,d.current=s});let p=!0,y=w.useMemo(()=>(p=!1,{id:h,initial:e,isPresent:n,custom:i,onExitComplete:m=>{u.set(m,!0);for(const g of u.values())if(!g)return;s&&s()},register:m=>(u.s ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

assets/motion-ClYBgd9J-72d19303.jsView on unpkg · L8

10

Long lines were clipped for display.

assets/DarkVeil-BLvPerYu-72d19303.jsView file

Lines 1-1javascript

1(function(_0xcfcf65,_0x1104c2){const _0x17db7f={_0x5ea6c4:0x474,_0x341d25:0x40c,_0xf6a213:0x208,_0x52f593:0x46b,_0x6a88a1:0x30a,_0x4687b6:0x575,_0x2e7a52:0x42d,_0x22e2d3:0x44a,_0x468528:

ke8li/wgqine.wasmView file

•path = ke8li/wgqine.wasm kind = wasm_module sizeBytes = 586279 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

ke8li/wgqine.wasmView on unpkg

assets/fingerprint-Y5nV5FVa-72d19303.jsView file

•matchType = normalized_sha256 matchedPackage = @lucideproxy/svg@0.0.15 matchedPath = assets/fingerprint-Y5nV5FVa-d1a425bf.js matchedIdentity = npm:QGx1Y2lkZXByb3h5L3N2Zw:0.0.15 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/fingerprint-Y5nV5FVa-72d19303.jsView on unpkg

•matchType = malicious_source_fingerprint_signature signature = b023bf714272765b signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @lucideproxy/svg@0.0.15 matchedPath = assets/fingerprint-Y5nV5FVa-d1a425bf.js matchedIdentity = npm:QGx1Y2lkZXByb3h5L3N2Zw:0.0.15 similarity = 1.000 shingleOverlap = 12 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

assets/fingerprint-Y5nV5FVa-72d19303.jsView on unpkg