registry / @vouchfor/embeds / 8.6.0
@vouchfor/embeds@8.6.0
⚠ Under reviewStatic Scan Results
scanned 21d ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
EvalNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
1 flaggeddist/iife/embeds.iife.jsView file
68`+R.split(/\n/)[Y-1]+`
L69: `+Array(ie).join(" ")+"^")}r.prototype=Object.create(Error.prototype,{name:{value:"Squirrelly Error",enumerable:!1}});var s=new Function("return this")().Promise,o=!1;try{o=new Fun...
L70: `).replace(/^\s+|\s+$/gm,"")),u.lastIndex=0,A.lastIndex=0,h.lastIndex=0;var F=R.prefixes,j=[F.h,F.b,F.i,F.r,F.c,F.e].reduce(function(pe,Me){return pe&&Me?pe+"|"+f(Me):Me?f(Me):pe},...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/iife/embeds.iife.jsView on unpkg · L68Findings
1 Medium6 Low
MediumNetwork
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/iife/embeds.iife.js
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @vouchfor/embeds@8.6.0.
See all versions of @vouchfor/embeds for other recorded verdicts.
- Review the evidence and your use of @vouchfor/embeds@8.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.