registry / @pisell/pisellos / 2.2.273

@pisell/pisellos@2.2.273

一个可扩展的前端模块化SDK框架，支持插件系统

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 442 file(s), 7.96 MB of source, external domains: cdn.jsdelivr.net, connect.facebook.net, file.mypisell-dev.com, grafana.example.com, open.feishu.cn, placeholder.local

Source & flagged code

3 flagged

dist/plugins/window.jsView file

Lines 228-268javascript

228 */

229var WindowPluginImpl = /*#__PURE__*/function () {

230 function WindowPluginImpl() {

231 _classCallCheck(this, WindowPluginImpl);

232 _defineProperty(this, "name", 'window');

233 _defineProperty(this, "version", '1.0.0');

234 // 定时器相关

235 _defineProperty(this, "setTimeout", Object.assign(function (handler, timeout) {

236 for (var _len = arguments.length, args = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key <

237 args[_key - 2] = arguments[_key];

238 }

239 if (typeof globalThis !== 'undefined' && globalThis.setTimeout) {

240 return globalThis.setTimeout.apply(globalThis, [handler, timeout].concat(args));

241 }

242 // Fallback 实现，使用 Promise 模拟

243 var timeoutId = Date.now();

244 Promise.resolve().then(function () {

245 setTimeout(function () {

246 if (typeof handler === 'function') {

247 handler.apply(void 0, args);

248 } else {

249 eval(handler);

250 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/plugins/window.jsView on unpkg · L248

251 }, timeout || 0);

252 });

253 return timeoutId;

254 }, {

255 __promisify__: function __promisify__(delay, value) {

256 return new Promise(function (resolve) {

257 return setTimeout(resolve, delay, value);

258 });

259 }

260 }));

261 _defineProperty(this, "clearTimeout", function (timeout) {

262 if (typeof globalThis !== 'undefined' && globalThis.clearTimeout) {

263 globalThis.clearTimeout(timeout);

264 }

265 // Fallback 不做任何操作

266 });

267 _defineProperty(this, "setInterval", Object.assign(function (handler, timeout) {

268 var _this = this;

•matchType = normalized_sha256 matchedPackage = @pisell/pisellos@2.2.272 matchedPath = dist/plugins/window.js matchedIdentity = npm:QHBpc2VsbC9waXNlbGxvcw:2.2.272 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/plugins/window.jsView on unpkg

lib/plugins/window.jsView file

•matchType = normalized_sha256 matchedPackage = @pisell/pisellos@2.2.272 matchedPath = lib/plugins/window.js matchedIdentity = npm:QHBpc2VsbC9waXNlbGxvcw:2.2.272 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/plugins/window.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/plugins/window.jsView file

•

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code