•matchType = previous_version_dangerous_delta
matchedPackage = @picsart/gen-ai@2.31.4
matchedIdentity = npm:QHBpY3NhcnQvZ2VuLWFp:2.31.4
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli.jsView on unpkg 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Z,{Chalk}from'chalk';import*as I from'fs';import I__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}fr...
L2: `)}
1import {Flags,Args,Command,run,execute}from'@oclif/core';import Z,{Chalk}from'chalk';import*as I from'fs';import I__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}fr...
L2: `)}
...
L8: `);}function Me(e){process.stderr.write(`${e}
L9: `);}function Cc(e){let{color:t,quiet:r,debug:o,plainMode:i}=e;return {result(n){ae(n);},info(n){if(r)return;let s=t.blue("i");Me(`${s} ${n}`);},success(n){if(r)return;let s=t.green...
L10: `).find(m=>m.includes(`gen-ai-${i}${n}`))?.trim().split(/\s+/)[0];if(!d)return I.unlinkSync(a),{updated:false,oldVersion:e,newVersion:o,message:`Could not find checksum for ${i} in...
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
cli.jsView on unpkg · L1 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Z,{Chalk}from'chalk';import*as I from'fs';import I__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}fr...
L2: `)}
...
L6: `)}
L7: `}let m=[c,u,...p],g=t.maxWidth??Er();return F(m,{color:o,padding:1,borderColor:t.borderColor,maxWidth:g})}function ae(e){process.stdout.write(`${e}
L8: `);}function Me(e){process.stderr.write(`${e}
L9: `);}function Cc(e){let{color:t,quiet:r,debug:o,plainMode:i}=e;return {result(n){ae(n);},info(n){if(r)return;let s=t.blue("i");Me(`${s} ${n}`);},success(n){if(r)return;let s=t.green...
L10: `).find(m=>m.includes(`gen-ai-${i}${n}`))?.trim().split(/\s+/)[0];if(!d)return I.unlinkSync(a),{updated:false,oldVersion:e,newVersion:o,message:`Could not find checksum for ${i} in...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
cli.jsView on unpkg · L1 10`).find(m=>m.includes(`gen-ai-${i}${n}`))?.trim().split(/\s+/)[0];if(!d)return I.unlinkSync(a),{updated:false,oldVersion:e,newVersion:o,message:`Could not find checksum for ${i} in...
L11: `);I.writeFileSync(t,r),spawn("cmd.exe",["/c",t],{detached:true,stdio:"ignore",windowsHide:true}).unref();}async function Tc(){let e=await Ao(Mc);if(!e)return null;try{return JSON....
L12: `);}var Nc="https://registry.npmjs.org/@picsart/gen-ai/latest",jc=`${process.env.GEN_AI_BASE_URL??"https://picsart.com/gen-ai-cli/releases"}/latest.txt`,Gc="update-check.json",Bc=1...
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
cli.jsView on unpkg · L10 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Z,{Chalk}from'chalk';import*as I from'fs';import I__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}fr...
L2: `)}
...
L6: `)}
L7: `}let m=[c,u,...p],g=t.maxWidth??Er();return F(m,{color:o,padding:1,borderColor:t.borderColor,maxWidth:g})}function ae(e){process.stdout.write(`${e}
L8: `);}function Me(e){process.stderr.write(`${e}
L9: `);}function Cc(e){let{color:t,quiet:r,debug:o,plainMode:i}=e;return {result(n){ae(n);},info(n){if(r)return;let s=t.blue("i");Me(`${s} ${n}`);},success(n){if(r)return;let s=t.green...
L10: `).find(m=>m.includes(`gen-ai-${i}${n}`))?.trim().split(/\s+/)[0];if(!d)return I.unlinkSync(a),{updated:false,oldVersion:e,newVersion:o,message:`Could not find checksum for ${i} in...
L11: `);I.wr
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
cli.jsView on unpkg · L1 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Z,{Chalk}from'chalk';import*as I from'fs';import I__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}fr...
L2: `)}
...
L6: `)}
L7: `}let m=[c,u,...p],g=t.maxWidth??Er();return F(m,{color:o,padding:1,borderColor:t.borderColor,maxWidth:g})}function ae(e){process.stdout.write(`${e}
L8: `);}function Me(e){process.stderr.write(`${e}
L9: `);}function Cc(e){let{color:t,quiet:r,debug:o,plainMode:i}=e;return {result(n){ae(n);},info(n){if(r)return;let s=t.blue("i");Me(`${s} ${n}`);},success(n){if(r)return;let s=t.green...
L10: `).find(m=>m.includes(`gen-ai-${i}${n}`))?.trim().split(/\s+/)[0];if(!d)return I.unlinkSync(a),{updated:false,oldVersion:e,newVersion:o,message:`Could not find checksum for ${i} in...
L11: `);I.wr
LowWeak Crypto
Package source references weak cryptographic algorithms.
cli.jsView on unpkg · L1