1#!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidde
CriticalSpawned Remote Code Execution
Source spawns a local helper that fetches and dynamically executes remote code.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidde
CriticalRemote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L1 1Trigger-reachable chain: manifest.main -> dist/index.js
L1: #!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefaul
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg · L1 10(Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma...
HighChild Process
Package source references child process execution.
dist/index.jsView on unpkg · L10 32|| (${s} === "string" && ${o} && ${o} == +${o} && !(${o} % 1))`).assign(a,(0,ae._)`+${o}`);return;case"boolean":n.elseIf((0,ae._)`${o} === "false" || ${o} === 0 || ${o} === null`)....
L33: || ${s} === "boolean" || ${o} === null`).assign(a,(0,ae._)`[${o}]`)}}}function hM({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,ae._)`${e} !== undefined`,()=>t.assign((0,ae....
L34: missingProperty: ${n},
10(Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma...
...
L22: Expecting one of '${n.join("', '")}'`);let o=`${e}Help`;return this.on(o,i=>{let s;typeof r=="function"?s=r({error:i.error,command:i.command}):s=r,s&&i.write(`${s}
L23: `)}),this}_outputHelpIfRequested(e){let r=this._getHelpOption();r&&e.find(o=>r.is(o))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function rb(t){r...
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L10 10(Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma...
...
L22: Expecting one of '${n.join("', '")}'`);let o=`${e}Help`;return this.on(o,i=>{let s;typeof r=="function"?s=r({error:i.error,command:i.command}):s=r,s&&i.write(`${s}
L23: `)}),this}_outputHelpIfRequested(e){let r=this._getHelpOption();r&&e.find(o=>r.is(o))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function rb(t){r...
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.jsView on unpkg · L10 1#!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidde
HighObfuscated Payload Loader
Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/index.jsView on unpkg · L1 28package = bridge-agent; repositoryIdentity = jerico; dependency = node-pty
L28: \r
L29: `+r)}function uo(t,e,r,n,o,i){if(t.listenerCount("wsClientError")){let s=new Error(o);Error.captureStackTrace(s,uo),t.emit("wsClientError",s,r,e)}else ys(r,n,o,i)}});var bk=T(Je=>{...
L30: `:""},this._extScope=e,this._scope=new Sr.Scope({parent:e}),this._nodes=[new $y]}toString(){return this._root.render(this.opts)}name(e){return this._scope.name(e)}scopeName(e){retu...
HighCopied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/index.jsView on unpkg · L28 1Cross-file remote execution chain: dist/index.js spawns dist/bridge-mcp.cjs; helper contains network access plus dynamic code execution.
L1: #!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - spe
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/index.jsView on unpkg · L1 467Type "yes" to continue: `);let e="";process.stdin.setEncoding("utf-8"),process.stdin.resume(),process.stdin.on("data",r=>{e+=r,e.includes(`
L468: `)&&(process.stdin.pause(),t(e.trim().toLowerCase()==="yes"))})})}var Gv=A(require("path")),gO=require("node:os");et();var fZ=Gv.default.join((0,gO.homedir)(),"Library","LaunchAgen...
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
dist/index.jsView on unpkg · L467 1#!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidde
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/index.jsView on unpkg · L1 1#!/usr/bin/env node
L2: "use strict";var $O=Object.create;var Yd=Object.defineProperty;var IO=Object.getOwnPropertyDescriptor;var EO=Object.getOwnPropertyNames;var TO=Object.getPrototypeOf,PO=Object.proto...
L3: `).replace(/^/gm," ".repeat(i))}let l=[`Usage: ${r.commandUsage(e)}`,""],u=r.commandDescription(e);u.length>0&&(l=l.concat([r.wrap(u,o,0),""]));let d=r.visibleArguments(e).map(m=>a...
...
L10: (Did you mean one of ${n.join(", ")}?)`:n.length===1?`
L11: (Did you mean ${n[0]}?)`:""}Xv.suggestSimilar=MO});var ob=T(nb=>{var UO=require("node:events").EventEmitter,cp=require("node:child_process"),Jr=require("node:path"),lp=require("nod...
L12: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidde
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/index.jsView on unpkg · L1