@magic5644/graph-it-live: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@magic5644/graph-it-live: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/mcpServer.mjsView file

6const __filename = fileURLToPath(import.meta.url); L7: const __dirname = dirname(__filename); L8: var kS=Object.create;var od=Object.defineProperty;var wS=Object.getOwnPropertyDescriptor;var SS=Object.getOwnPropertyNames;var zS=Object.getPrototypeOf,IS=Object.prototype.hasOwnPr... L9: `)?e:`${e} ... L14: || (${a} === "string" && ${r} && ${r} == +${r} && !(${r} % 1))`).assign(s,(0,X._)`+${r}`);return;case"boolean":o.elseIf((0,X._)`${r} === "false" || ${r} === 0 || ${r} === null`).as... L15: || ${a} === "boolean" || ${r} === null`).assign(s,(0,X._)`[${r}]`)}}}function fE({gen:t,parentData:e,parentDataProperty:n},o){t.if((0,X._)`${e} !== undefined`,()=>t.assign((0,X._)`... L16: missingProperty: ${o}, ... L98: \`\`\``:o=JSON.stringify(t,null,2);return{content:[{type:"text",text:o}],structu

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/mcpServer.mjsView on unpkg · L6

14|| (${a} === "string" && ${r} && ${r} == +${r} && !(${r} % 1))`).assign(s,(0,X._)`+${r}`);return;case"boolean":o.elseIf((0,X._)`${r} === "false" || ${r} === 0 || ${r} === null`).as... L15: || ${a} === "boolean" || ${r} === null`).assign(s,(0,X._)`[${r}]`)}}}function fE({gen:t,parentData:e,parentDataProperty:n},o){t.if((0,X._)`${e} !== undefined`,()=>t.assign((0,X._)`... L16: missingProperty: ${o},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcpServer.mjsView on unpkg · L14

dist/wasm/tree-sitter-go.wasmView file

•path = dist/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/wasm/tree-sitter-go.wasmView on unpkg

dist/astWorker.jsView file

•path = dist/astWorker.js kind = oversized_source_file sizeBytes = 6600580 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/astWorker.jsView on unpkg

dist/graph-it.jsView file

•path = dist/graph-it.js kind = oversized_cli_entrypoint sizeBytes = 10930130 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/graph-it.jsView on unpkg

Source & flagged code

5 flagged

dist/mcpServer.mjsView file

6const __filename = fileURLToPath(import.meta.url); L7: const __dirname = dirname(__filename); L8: var kS=Object.create;var od=Object.defineProperty;var wS=Object.getOwnPropertyDescriptor;var SS=Object.getOwnPropertyNames;var zS=Object.getPrototypeOf,IS=Object.prototype.hasOwnPr... L9: `)?e:`${e} ... L14: || (${a} === "string" && ${r} && ${r} == +${r} && !(${r} % 1))`).assign(s,(0,X._)`+${r}`);return;case"boolean":o.elseIf((0,X._)`${r} === "false" || ${r} === 0 || ${r} === null`).as... L15: || ${a} === "boolean" || ${r} === null`).assign(s,(0,X._)`[${r}]`)}}}function fE({gen:t,parentData:e,parentDataProperty:n},o){t.if((0,X._)`${e} !== undefined`,()=>t.assign((0,X._)`... L16: missingProperty: ${o}, ... L98: \`\`\``:o=JSON.stringify(t,null,2);return{content:[{type:"text",text:o}],structu

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/mcpServer.mjsView on unpkg · L6

14|| (${a} === "string" && ${r} && ${r} == +${r} && !(${r} % 1))`).assign(s,(0,X._)`+${r}`);return;case"boolean":o.elseIf((0,X._)`${r} === "false" || ${r} === 0 || ${r} === null`).as... L15: || ${a} === "boolean" || ${r} === null`).assign(s,(0,X._)`[${r}]`)}}}function fE({gen:t,parentData:e,parentDataProperty:n},o){t.if((0,X._)`${e} !== undefined`,()=>t.assign((0,X._)`... L16: missingProperty: ${o},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcpServer.mjsView on unpkg · L14

dist/wasm/tree-sitter-go.wasmView file

•path = dist/wasm/tree-sitter-go.wasm kind = wasm_module sizeBytes = 235957 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/wasm/tree-sitter-go.wasmView on unpkg

dist/astWorker.jsView file

•path = dist/astWorker.js kind = oversized_source_file sizeBytes = 6600580 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/astWorker.jsView on unpkg

dist/graph-it.jsView file

•path = dist/graph-it.js kind = oversized_cli_entrypoint sizeBytes = 10930130 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/graph-it.jsView on unpkg