registry / chromatic
chromatic
⚠ Under reviewAutomate visual testing across browsers. Gather UI feedback. Versioned documentation.
This report shows the evidence for chromatic@18.14.1. 0 of 32 known versions are blocked or flagged. See all versions.
Static Scan Results
scanned 3h ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
GitDependency
Source & flagged code
8 flaggeddist/execa-CoW7oosm.cjsView file
2!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)...
L3: const e=require(`./chunk-gGpyby2o.cjs`);let t=require(`node:util`),n=require(`node:child_process`),r=require(`node:fs`),i=require(`node:os`),a=require(`node:path`);a=e.a(a,1);let o...
L4: `?(--i,a+=1):e===`u`&&t[a+2]===`{`?a=t.indexOf(`}`,a+3):a+=De[e]??1}}let a=r===e.length;return a||n.push(e.slice(r)),{nextTokens:n,leadingWhitespaces:i,trailingWhitespaces:a}},Ee=n...
High
Child Process
Package source references child process execution.
dist/execa-CoW7oosm.cjsView on unpkg · L22!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error)...
L3: const e=require(`./chunk-gGpyby2o.cjs`);let t=require(`node:util`),n=require(`node:child_process`),r=require(`node:fs`),i=require(`node:os`),a=require(`node:path`);a=e.a(a,1);let o...
L4: `?(--i,a+=1):e===`u`&&t[a+2]===`{`?a=t.indexOf(`}`,a+3):a+=De[e]??1}}let a=r===e.length;return a||n.push(e.slice(r)),{nextTokens:n,leadingWhitespaces:i,trailingWhitespaces:a}},Ee=n...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/execa-CoW7oosm.cjsView on unpkg · L2Findings
3 Critical4 High5 Medium5 Low
CriticalTrojan Source Unicodedist/v1-CrSWFliR.cjs
CriticalManifest Confusionpackage.json
CriticalPrevious Version Dangerous Deltadist/projectFiles-Qdj-gAlb.cjs
HighChild Processdist/execa-CoW7oosm.cjs
HighShell
HighCross File Remote Execution Contextdist/node-src-CQqWvfS-.cjs
HighSemantic Analysis Limiteddist/v1-CrSWFliR.cjs
MediumDynamic Requiredist/execa-CoW7oosm.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumGit Dependency
LowEval
LowWeak Cryptodist/v1-CrSWFliR.cjs
Affected versions and remediation
This report applies to chromatic@18.14.1.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of chromatic@18.14.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.