@sis-cc/dotstatsuite-visions@15.0.2: Suspicious npm security | LPM Firewall

Loading npm security reports…

@sis-cc/dotstatsuite-visions@15.0.2: Suspicious npm security | LPM Firewall

Source & flagged code

5 flagged · loading source

dist/assets/iframe-BQjKj6F_.jsView file

351patternName = generic_password severity = medium line = 351 matchedText = `+t),t},...r"?`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/assets/iframe-BQjKj6F_.jsView on unpkg · L351

dist/assets/axe-BCVQpbcP.jsView file

6`,r:"\r",t:" ",f:"\f","\\":"\\",'"':'"'}}),qh=y(function(e){Object.defineProperty(e,"__esModule",{value:!0});var t=dl();function r(a,n,i,o,u,s){var l=a.length,c="";function d(g,D){... L7: `||c==="\r"||c==="\f";)g=!0,n++,c=a.charAt(n);return g}function m(){var g=h();if(n<l)throw Error('Rule expected but "'+a.charAt(n)+'" found.');return g}function h(){var g=v();if(!g... L8: Consider to rely on 'then' or 'done' mode instead.`);k&&(delete c[p],d[p]=R,l.emit("setasync",p,k))},g=function(){v=!0,c[p]&&(delete c[p],delete f[p],l.delete(p))},D=s;if(D||(D="th...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/axe-BCVQpbcP.jsView on unpkg · L6

dist/vite-inject-mocker-entry.jsView file

1import{_ as ve}from"./assets/preload-helper-PPVm8Dsz.js";var se=class{registryByUrl=new Map;registryById=new Map;clear(){this.registryByUrl.clear(),this.registryById.clear()}keys()... L2: `),t=r.findIndex(i=>i.includes(` at Object.${e}`)||i.includes(`${e}@`));return it(r[t+1])?.file||""}var{now:oe}=Date,at=class{registry=new se;queue=new Set;mockedIds=new Set;constr...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/vite-inject-mocker-entry.jsView on unpkg · L1

dist/nunito-sans-bold-italic.woff2View file

•path = dist/nunito-sans-bold-italic.woff2 kind = high_entropy_blob sizeBytes = 49460 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/nunito-sans-bold-italic.woff2View on unpkg

dist/assets/DocsRenderer-JROSPFPF-CK4KoVSj.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sis-cc/dotstatsuite-visions@14.4.1 matchedIdentity = npm:[redacted]:14.4.1 similarity = 0.875 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/assets/DocsRenderer-JROSPFPF-CK4KoVSj.jsView on unpkg

Source & flagged code

5 flagged

dist/assets/iframe-BQjKj6F_.jsView file

351patternName = generic_password severity = medium line = 351 matchedText = `+t),t},...r"?`

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/assets/iframe-BQjKj6F_.jsView on unpkg · L351

dist/assets/axe-BCVQpbcP.jsView file

6`,r:"\r",t:" ",f:"\f","\\":"\\",'"':'"'}}),qh=y(function(e){Object.defineProperty(e,"__esModule",{value:!0});var t=dl();function r(a,n,i,o,u,s){var l=a.length,c="";function d(g,D){... L7: `||c==="\r"||c==="\f";)g=!0,n++,c=a.charAt(n);return g}function m(){var g=h();if(n<l)throw Error('Rule expected but "'+a.charAt(n)+'" found.');return g}function h(){var g=v();if(!g... L8: Consider to rely on 'then' or 'done' mode instead.`);k&&(delete c[p],d[p]=R,l.emit("setasync",p,k))},g=function(){v=!0,c[p]&&(delete c[p],delete f[p],l.delete(p))},D=s;if(D||(D="th...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/axe-BCVQpbcP.jsView on unpkg · L6

dist/vite-inject-mocker-entry.jsView file

Lines 1-3javascript

1import{_ as ve}from"./assets/preload-helper-PPVm8Dsz.js";var se=class{registryByUrl=new Map;registryById=new Map;clear(){this.registryByUrl.clear(),this.registryById.clear()}keys(){return this.registryByUrl.keys()}add(e){this.registryByUrl.set(e.url,e),this.registryById.set(e.id,e)}register(e,r,t,n,i){let a=typeof e=="object"?e.type:e;if(typeof e=="object"){let o=e;if(o instanceof B||o instanceof X||o instanceof V||o instanceof q)throw new TypeError(`[vitest] Cannot register a mock that is already defined. Expected a JSON representation from \`MockedModule.toJSON\`, instead got "${o.type}". Us ...

dist/nunito-sans-bold-italic.woff2View file

•path = dist/nunito-sans-bold-italic.woff2 kind = high_entropy_blob sizeBytes = 49460 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/nunito-sans-bold-italic.woff2View on unpkg

dist/assets/DocsRenderer-JROSPFPF-CK4KoVSj.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sis-cc/dotstatsuite-visions@14.4.1 matchedIdentity = npm:[redacted]:14.4.1 similarity = 0.875 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/assets/DocsRenderer-JROSPFPF-CK4KoVSj.jsView on unpkg