•matchType = previous_version_dangerous_delta
matchedPackage = @picsart/gen-ai@2.59.3
matchedIdentity = npm:QHBpY3NhcnQvZ2VuLWFp:2.59.3
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
CriticalPrevious Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
cli.jsView on unpkg 1import {spawnSync,spawn,execFileSync}from'child_process';import*as Re from'fs';import Re__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}from'fs';import*as tn from'o...
L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(`
133`);}close(){this.#r.close();}get(t){Qb(t);let r=this.#l(t);return r?{body:r.body?Buffer.from(r.body.buffer,r.body.byteOffset,r.body.byteLength):void 0,statusCode:r.statusCode,statu...
L134: ${o}`;break;case "retry":mG(o)&&(r[n]=o);break;case "id":hG(o)&&(r[n]=o);break;case "event":o.length>0&&(r[n]=o);break}}processEvent(t){t.retry&&mG(t.retry)&&(this.state.reconnecti...
L135: <html><head><meta charset="utf-8"><title>gen-ai \u2014 Login Successful</title>
1import {spawnSync,spawn,execFileSync}from'child_process';import*as Re from'fs';import Re__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}from'fs';import*as tn from'o...
L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(`
...
L5:
L6: ${a}`;throw new Error(l)}findProvider(t){return this.providers.get(t)||this.parent?.findProvider(t)}typeName(t){return t instanceof La?`Token(${t.key})`:this.isClass(t)?t.name:Stri...
L7: `)||e.includes("\r")||e.includes("\0"))===false}function Ide(e){let t=(e.headersList.get("referrer-policy",true)??"").split(","),r="";if(t.length)for(let i=t.length;i!==0;i--){let ...
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
cli.jsView on unpkg · L1 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
cli.js:
import {spawnSync,spawn,execFileSync}from'child_process';import*as Re from'fs';import Re__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}from'fs';import*as tn from'o...
${a}`;throw new Error(l)}findProvider(t){return this.providers.get(t)||this.parent?.findProvider(t)}typeName(t){return t instanceof La?`Token(${t.key})`:this.isClass(t)?t.name:Stri...
`)||e.includes("\r")||e.includes("\0"))===false}function Ide(e){let t=(e.headersList.get("referrer-policy",true)??"").split(","),r="";if(t.length)for(let i=t.length;i!==0;i--){let ...
`,this[cge]=a??3e5,this[Age]=i??3e5,this[dge]=y??true,this[zB]=w,this[Kn]=null,this
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
cli.jsView on unpkg 1import {spawnSync,spawn,execFileSync}from'child_process';import*as Re from'fs';import Re__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}from'fs';import*as tn from'o...
L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(`
L3: `):"",this.name="UnsubscriptionError",this.errors=r;}});});var Mi=C(Ef=>{Object.defineProperty(Ef,"__esModule",{value:true});Ef.arrRemove=void 0;function p6(e,t){if(e){var r=e.inde...
L4: `))}return r}getOrCreate(t){if(t===e)return this;let r=this.store.get(t);if(r)return r;let i=this.tasks.get(t);if(i)return i.waitUntilResolved();i=new wm;let n=this.providers.get(t...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
cli.jsView on unpkg · L1 1Trigger-reachable command-output exfiltration chain: manifest.main -> cli.js
L1: import {spawnSync,spawn,execFileSync}from'child_process';import*as Re from'fs';import Re__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}from'fs';import*as tn from'o...
L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(`
L3: `):"",this.name="UnsubscriptionError",this.errors=r;}});});var Mi=C(Ef=>{Object.defineProperty(Ef,"__esModule",{value:true});Ef.arrRemove=void 0;function p6(e,t){if(e){var r=e.inde...
L4: `))}return r}getOrCreate(t){if(t===e)return this;let r=this.store.get(t);if(r)return r;let i=this.tasks.get(t);if(i)return i.waitUntilResolved();i=new wm;let n=this.providers.get(t...
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
cli.jsView on unpkg · L1 5L6: ${a}`;throw new Error(l)}findProvider(t){return this.providers.get(t)||this.parent?.findProvider(t)}typeName(t){return t instanceof La?`Token(${t.key})`:this.isClass(t)?t.name:Stri...
L7: `)||e.includes("\r")||e.includes("\0"))===false}function Ide(e){let t=(e.headersList.get("referrer-policy",true)??"").split(","),r="";if(t.length)for(let i=t.length;i!==0;i--){let ...
MediumDynamic Require
Package source references dynamic require/import behavior.
cli.jsView on unpkg · L5 1import {spawnSync,spawn,execFileSync}from'child_process';import*as Re from'fs';import Re__default,{readFileSync,existsSync,mkdirSync,readdirSync,cpSync}from'fs';import*as tn from'o...
L2: `+r.map(function(i,n){return n+1+") "+i.toString()}).join(`
L3: `):"",this.name="UnsubscriptionError",this.errors=r;}});});var Mi=C(Ef=>{Object.defineProperty(Ef,"__esModule",{value:true});Ef.arrRemove=void 0;function p6(e,t){if(e){var r=e.inde...
L4: `))}return r}getOrCreate(t){if(t===e)return this;let r=this.store.get(t);if(r)return r;let i=this.tasks.get(t);if(i)return i.waitUntilResolved();i=new wm;let n=this.providers.get(t...
L5:
L6: ${a}`;throw new Error(l)}findProvider(t){return this.providers.get(t)||this.parent?.findProvider(t)}typeName(t){return t instanceof La?`Token(${t.key})`:this.isCla
LowWeak Crypto
Package source references weak cryptographic algorithms.
cli.jsView on unpkg · L1