•matchType = previous_version_dangerous_delta
matchedPackage = @picsart/gen-ai@2.31.4
matchedIdentity = npm:QHBpY3NhcnQvZ2VuLWFp:2.31.4
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli.jsView on unpkg 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Je,{Chalk}from'chalk';import*as H from'fs';import H__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}f...
L2: `);return S.substr(0,S.length-2)},this.getRequestHeader=function(S){return typeof S=="string"&&d[S]?d[S]:""},this.send=function(S){if(this.readyState!=this.OPENED)throw new Error("...
1import {Flags,Args,Command,run,execute}from'@oclif/core';import Je,{Chalk}from'chalk';import*as H from'fs';import H__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}f...
L2: `);return S.substr(0,S.length-2)},this.getRequestHeader=function(S){return typeof S=="string"&&d[S]?d[S]:""},this.send=function(S){if(this.readyState!=this.OPENED)throw new Error("...
L3: `).join(`
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
cli.jsView on unpkg · L1 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Je,{Chalk}from'chalk';import*as H from'fs';import H__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}f...
L2: `);return S.substr(0,S.length-2)},this.getRequestHeader=function(S){return typeof S=="string"&&d[S]?d[S]:""},this.send=function(S){if(this.readyState!=this.OPENED)throw new Error("...
L3: `).join(`
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
cli.jsView on unpkg · L1 26`).find(o=>o.trim().endsWith(i))?.trim().split(/\s+/)[0]}async function oT(e,t){let i=(await im(`${As}/latest.txt`))?.trim();if(!i)return {updated:false,oldVersion:e,newVersion:e,m...
L27: `);H.writeFileSync(t,r),spawn("cmd.exe",["/c",t],{detached:true,stdio:"ignore",windowsHide:true}).unref();}async function sT(){let e=await im(ZO);if(!e)return null;try{return JSON....
L28: `);}var cT="https://registry.npmjs.org/@picsart/gen-ai/latest",pT=`${process.env.GEN_AI_BASE_URL??"https://picsart.com/gen-ai-cli/releases"}/latest.txt`,mT="update-check.json",fT=1...
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
cli.jsView on unpkg · L26 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Je,{Chalk}from'chalk';import*as H from'fs';import H__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}f...
L2: `);return S.substr(0,S.length-2)},this.getRequestHeader=function(S){return typeof S=="string"&&d[S]?d[S]:""},this.send=function(S){if(this.readyState!=this.OPENED)throw new Error("...
L3: `).join(`
MediumDynamic Require
Package source references dynamic require/import behavior.
cli.jsView on unpkg · L1 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Je,{Chalk}from'chalk';import*as H from'fs';import H__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}f...
L2: `);return S.substr(0,S.length-2)},this.getRequestHeader=function(S){return typeof S=="string"&&d[S]?d[S]:""},this.send=function(S){if(this.readyState!=this.OPENED)throw new Error("...
L3: `).join(`
...
L5: `)}function HT(e){e?process.env.DEBUG=e:delete process.env.DEBUG;}function JT(){return process.env.DEBUG}function YT(e){e.inspectOpts={};let t=Object.keys(me.inspectOpts);for(let r...
L6: `).map(t=>t.trim()).join(" ")};Ty.O=function(e){return this.inspectOpts.colors=this.useColors,Vs.inspect(e,this.inspectOpts)};});var Ge=_((mie,fm)=>{typeof process>"u"||process.typ...
L7: `).join(`\r
...
L11: \r
L1
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
cli.jsView on unpkg · L1 1import {Flags,Args,Command,run,execute}from'@oclif/core';import Je,{Chalk}from'chalk';import*as H from'fs';import H__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}f...
L2: `);return S.substr(0,S.length-2)},this.getRequestHeader=function(S){return typeof S=="string"&&d[S]?d[S]:""},this.send=function(S){if(this.readyState!=this.OPENED)throw new Error("...
L3: `).join(`
...
L5: `)}function HT(e){e?process.env.DEBUG=e:delete process.env.DEBUG;}function JT(){return process.env.DEBUG}function YT(e){e.inspectOpts={};let t=Object.keys(me.inspectOpts);for(let r...
L6: `).map(t=>t.trim()).join(" ")};Ty.O=function(e){return this.inspectOpts.colors=this.useColors,Vs.inspect(e,this.inspectOpts)};});var Ge=_((mie,fm)=>{typeof process>"u"||process.typ...
L7: `).join(`\r
...
L11: \r
L1
LowWeak Crypto
Package source references weak cryptographic algorithms.
cli.jsView on unpkg · L1