@seele00/seele@0.1.75: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

@seele00/seele@0.1.75: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

8 flagged · loading source

web/dist/assets/javascript-wDzz0qaB.jsView file

1const e=Object.freeze(JSON.parse(`{"displayName":"JavaScript","name":"javascript","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repositor...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web/dist/assets/javascript-wDzz0qaB.jsView on unpkg · L1

libexec/seele-serverView file

•path = libexec/seele-server kind = native_binary sizeBytes = 21111344 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

libexec/seele-serverView on unpkg

scripts/deploy/prepare-proxy.shView file

•path = scripts/deploy/prepare-proxy.sh kind = build_helper sizeBytes = 8902 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/deploy/prepare-proxy.shView on unpkg

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView file

•matchType = normalized_sha256 matchedPackage = @yancyyu/agentcli@1.9.62 matchedPath = dist-renderer/assets/cytoscape.esm-DsxaTqgk.js matchedIdentity = npm:QHlhbmN5eXUvYWdlbnRjbGk:1.9.62 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView on unpkg

web/dist/assets/diagram-G47NLZAW-BK1DpwJZ.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/diagram-G47NLZAW-CW3IhdcI.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/diagram-G47NLZAW-BK1DpwJZ.jsView on unpkg

web/dist/assets/flowDiagram-23GEKE2U-DN8kTppr.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/flowDiagram-23GEKE2U-dCEvzmf4.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/flowDiagram-23GEKE2U-DN8kTppr.jsView on unpkg

web/dist/assets/wardleyDiagram-EHGQE667-DI-p5rkU.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/wardleyDiagram-EHGQE667-DURrUDRq.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/wardleyDiagram-EHGQE667-DI-p5rkU.jsView on unpkg

web/dist/assets/cynefin-VYW2F7L2-rxok3eoB.jsView file

•matchType = malicious_source_fingerprint_signature signature = 66a4f8b4b1290a55 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/cynefin-VYW2F7L2-D-YI4YZ1.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 shingleOverlap = 24 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

web/dist/assets/cynefin-VYW2F7L2-rxok3eoB.jsView on unpkg

Source & flagged code

8 flagged

web/dist/assets/javascript-wDzz0qaB.jsView file

Lines 1-2javascript

1const e=Object.freeze(JSON.parse(`{"displayName":"JavaScript","name":"javascript","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-modifier":{"match":"(?<![$_[:alnum:]])(?:(?<=\\\\.\\\\.\\\\.)|(?<!\\\\.))(abstract|declare|override|public|protected|private|readonly|static)(?![$_[:alnum:]])(?:(?=\\\\.\\\\.\\\\.)|(?!\\\\.))","name":"storage.modifier.js"},"after-operator-block-as-object-literal":{"begin":"(?<!\\\\+\\\\+|--)(?<=[!(+,:=>?\\\\[]|^await|[^$._[:alnum:]]await|^return|[^$._[:alnum:]]return|^yield|[^$._[:alnum:]]yield|^throw|[^$ ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web/dist/assets/javascript-wDzz0qaB.jsView on unpkg · L1

2

Long lines were clipped for display.

libexec/seele-serverView file

•path = libexec/seele-server kind = native_binary sizeBytes = 21111344 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

libexec/seele-serverView on unpkg

scripts/deploy/prepare-proxy.shView file

•path = scripts/deploy/prepare-proxy.sh kind = build_helper sizeBytes = 8902 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/deploy/prepare-proxy.shView on unpkg

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView file

•matchType = normalized_sha256 matchedPackage = @yancyyu/agentcli@1.9.62 matchedPath = dist-renderer/assets/cytoscape.esm-DsxaTqgk.js matchedIdentity = npm:QHlhbmN5eXUvYWdlbnRjbGk:1.9.62 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView on unpkg

web/dist/assets/diagram-G47NLZAW-BK1DpwJZ.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/diagram-G47NLZAW-CW3IhdcI.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/diagram-G47NLZAW-BK1DpwJZ.jsView on unpkg

web/dist/assets/flowDiagram-23GEKE2U-DN8kTppr.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/flowDiagram-23GEKE2U-dCEvzmf4.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/flowDiagram-23GEKE2U-DN8kTppr.jsView on unpkg

web/dist/assets/wardleyDiagram-EHGQE667-DI-p5rkU.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/wardleyDiagram-EHGQE667-DURrUDRq.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/wardleyDiagram-EHGQE667-DI-p5rkU.jsView on unpkg

web/dist/assets/cynefin-VYW2F7L2-rxok3eoB.jsView file

•matchType = malicious_source_fingerprint_signature signature = 66a4f8b4b1290a55 signatureType = suspicious_hashes sourceLabel = final_verdict:malicious matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/cynefin-VYW2F7L2-D-YI4YZ1.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 shingleOverlap = 24 summary = package final verdict is malicious

High

Known Malware Source Fingerprint Signature

Source fingerprint signature matches a known malicious package signature; route for source-aware review.

web/dist/assets/cynefin-VYW2F7L2-rxok3eoB.jsView on unpkg