registry / @univerjs-pro/collaboration-client / 1.0.0
@univerjs-pro/collaboration-client@1.0.0
⚠ Under reviewClient-side collaboration plugin for Univer Pro.
Static Scan Results
scanned 1mo ago · by rust-scannerStatic analysis completed at 0.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.
Static reason
Automated AI review exhausted its retry budget. This package remains unresolved and must not warn or block users.
Decision evidence
public snapshotBehavioral surface
HighEntropyStringsMinifiedObfuscated
NoLicense
Source & flagged code
2 flaggedlib/locale/pl-PL.jsView file
1const _0x48dad6=_0x904d;(function(_0x5e4859,_0x51bde6){const _0x2c4c95=_0x904d,_0x1fa043=_0x5e4859();while(!![]){try{const _0x37e58d=parseInt(_0x2c4c95(0x181))/0x1*(parseInt(_0x2c4...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
lib/locale/pl-PL.jsView on unpkg · L1lib/cjs/index.jsView file
1package = @univerjs-pro/collaboration-client; repositoryIdentity = univer-pro; dependency = @univerjs-pro/collaboration
L1: const _0x1a65c6=_0x53a0;(function(_0x11bab0,_0x538456){const _0x2dc562=_0x53a0,_0x4a96ea=_0x11bab0();while(!![]){try{const _0x3d3291=-parseInt(_0x2dc562(0x255))/0x1*(parseInt(_0x2d...
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
lib/cjs/index.jsView on unpkg · L1Findings
3 High1 Medium3 Low
HighObfuscated Payload Loaderlib/locale/pl-PL.js
HighCopied Package Dependency Bridgelib/cjs/index.js
HighObfuscated
MediumStructural Risk Force Deep Review
LowScripts Present
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @univerjs-pro/collaboration-client@1.0.0.
See all versions of @univerjs-pro/collaboration-client for other recorded verdicts.
- Review the evidence and your use of @univerjs-pro/collaboration-client@1.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.