@seele00/seele@0.1.81: Malicious npm security report (Block) | LPM Firewall

Loading npm security reports…

@seele00/seele@0.1.81: Malicious npm security report (Block) | LPM Firewall

Source & flagged code

9 flagged · loading source

web/dist/assets/javascript-wDzz0qaB.jsView file

1const e=Object.freeze(JSON.parse(`{"displayName":"JavaScript","name":"javascript","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repositor...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web/dist/assets/javascript-wDzz0qaB.jsView on unpkg · L1

libexec/seele-serverView file

•path = libexec/seele-server kind = binary_string_ioc sizeBytes = 22354880 magicHex = [redacted] matchedPrintableString = https://profuse.antgroup-inc.cn/api/shao-meta/agent/notify; fields = instance_id, content, messages

Critical

Binary String Ioc

Native or WebAssembly artifact printable strings contain known collector or webhook infrastructure.

libexec/seele-serverView on unpkg

•path = libexec/seele-server kind = native_binary sizeBytes = 22354880 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

libexec/seele-serverView on unpkg

scripts/deploy/prepare-proxy.shView file

•path = scripts/deploy/prepare-proxy.sh kind = build_helper sizeBytes = 8902 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/deploy/prepare-proxy.shView on unpkg

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView file

•matchType = normalized_sha256 matchedPackage = @jait/gateway@0.1.693 matchedPath = web-dist/assets/cytoscape.esm-BQaXIfA_.js matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.693 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView on unpkg

web/dist/assets/diagram-G47NLZAW-Dj8sbBxp.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/diagram-G47NLZAW-CW3IhdcI.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/diagram-G47NLZAW-Dj8sbBxp.jsView on unpkg

web/dist/assets/flowDiagram-23GEKE2U-Di3U_AN7.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/flowDiagram-23GEKE2U-dCEvzmf4.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/flowDiagram-23GEKE2U-Di3U_AN7.jsView on unpkg

web/dist/assets/wardleyDiagram-EHGQE667-BvSJsS1N.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/wardleyDiagram-EHGQE667-DURrUDRq.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/wardleyDiagram-EHGQE667-BvSJsS1N.jsView on unpkg

scripts/deploy/start.shView file

•matchType = previous_version_dangerous_delta matchedPackage = @seele00/seele@0.1.75 matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.75 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/deploy/start.shView on unpkg

Source & flagged code

9 flagged

web/dist/assets/javascript-wDzz0qaB.jsView file

Lines 1-2javascript

1const e=Object.freeze(JSON.parse(`{"displayName":"JavaScript","name":"javascript","patterns":[{"include":"#directives"},{"include":"#statements"},{"include":"#shebang"}],"repository":{"access-modifier":{"match":"(?<![$_[:alnum:]])(?:(?<=\\\\.\\\\.\\\\.)|(?<!\\\\.))(abstract|declare|override|public|protected|private|readonly|static)(?![$_[:alnum:]])(?:(?=\\\\.\\\\.\\\\.)|(?!\\\\.))","name":"storage.modifier.js"},"after-operator-block-as-object-literal":{"begin":"(?<!\\\\+\\\\+|--)(?<=[!(+,:=>?\\\\[]|^await|[^$._[:alnum:]]await|^return|[^$._[:alnum:]]return|^yield|[^$._[:alnum:]]yield|^throw|[^$ ...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

web/dist/assets/javascript-wDzz0qaB.jsView on unpkg · L1

2

Long lines were clipped for display.

libexec/seele-serverView file

•path = libexec/seele-server kind = binary_string_ioc sizeBytes = 22354880 magicHex = [redacted] matchedPrintableString = https://profuse.antgroup-inc.cn/api/shao-meta/agent/notify; fields = instance_id, content, messages

Critical

Binary String Ioc

Native or WebAssembly artifact printable strings contain known collector or webhook infrastructure.

libexec/seele-serverView on unpkg

•path = libexec/seele-server kind = native_binary sizeBytes = 22354880 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

libexec/seele-serverView on unpkg

scripts/deploy/prepare-proxy.shView file

•path = scripts/deploy/prepare-proxy.sh kind = build_helper sizeBytes = 8902 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/deploy/prepare-proxy.shView on unpkg

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView file

•matchType = normalized_sha256 matchedPackage = @jait/gateway@0.1.693 matchedPath = web-dist/assets/cytoscape.esm-BQaXIfA_.js matchedIdentity = npm:QGphaXQvZ2F0ZXdheQ:0.1.693 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/cytoscape.esm-DTSO7Bv0.jsView on unpkg

web/dist/assets/diagram-G47NLZAW-Dj8sbBxp.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/diagram-G47NLZAW-CW3IhdcI.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/diagram-G47NLZAW-Dj8sbBxp.jsView on unpkg

web/dist/assets/flowDiagram-23GEKE2U-Di3U_AN7.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/flowDiagram-23GEKE2U-dCEvzmf4.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/flowDiagram-23GEKE2U-Di3U_AN7.jsView on unpkg

web/dist/assets/wardleyDiagram-EHGQE667-BvSJsS1N.jsView file

•matchType = normalized_sha256 matchedPackage = @seele00/seele@0.1.66 matchedPath = web/dist/assets/wardleyDiagram-EHGQE667-DURrUDRq.js matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.66 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

web/dist/assets/wardleyDiagram-EHGQE667-BvSJsS1N.jsView on unpkg

scripts/deploy/start.shView file

•matchType = previous_version_dangerous_delta matchedPackage = @seele00/seele@0.1.75 matchedIdentity = npm:QHNlZWxlMDAvc2VlbGU:0.1.75 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/deploy/start.shView on unpkg