Loading npm security reports…
A video editing library for creating and editing videos with Shotstack
No confirmed attack surface was identified. Flagged plugin setup is animation functionality, and inspected remote loading supports font and graphics rendering.
The AI recommended clean. Static policy retained a warning. The static scanner classified the package as malicious with confidence of at least 85%. A critical static finding has confidence of at least 90%. These conditions do not mean that the AI confirmed malicious behavior.
Package source references dynamic code evaluation.
dist/shotstack-studio.umd.jsView on unpkg · L205Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/shotstack-studio.umd.jsView on unpkg · L65Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/shotstack-studio.es.jsView on unpkg · L43420A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/shotstack-studio.es.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/shotstack-studio.es.jsView on unpkgThis report applies to @shotstack/shotstack-studio@2.16.1.
See version security history for other recorded verdicts.
Evidence last updated: .
Package source references dynamic code evaluation.
dist/shotstack-studio.umd.jsView on unpkg · L205Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/shotstack-studio.umd.jsView on unpkg · L65Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/shotstack-studio.es.jsView on unpkg · L43420A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/shotstack-studio.es.jsView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/shotstack-studio.es.jsView on unpkg