event-emitter-testmetest@3.0.0
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe declared entrypoint contains a large opaque data blob with no observed use or exported behavior. This supports a warning for an inert payload carrier, not a block for confirmed malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
Loading the package entrypoint.
Impact
No execution or other effect from the data was established; its unexplained presence warrants caution.
Mechanism
The entrypoint assigns the opaque data to a constant and exports an empty object.
AI rationale
The declared entrypoint contains a large opaque data blob with no observed use or exported behavior. This supports a warning for an inert payload carrier, not a block for confirmed malicious behavior.
Evidence
index.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- package.json names index.js as the package entrypoint.
- index.js contains a very large hexadecimal string assigned to DATA.
- The entrypoint ends by exporting an empty object; no activation of the opaque data was identified.
Evidence against
Behavioral surface
MinifiedTrivial
NoLicense
Source & flagged code
3 flagged · loading sourcepackage.jsonView file
1{"name":"event-emitter-testmetest","version":"3.0.0","main":"index.js"}
Medium
Ai Review Evidence
package.json names index.js as the package entrypoint.
package.jsonView on unpkg · L1index.jsView file
1const DATA="[redacted]
Medium
Ai Review Evidence
index.js contains a very large hexadecimal string assigned to DATA.
index.jsView on unpkg · L11c3";
module.exports={};
Medium
Ai Review Evidence
The entrypoint ends by exporting an empty object; no activation of the opaque data was identified.
index.jsView on unpkg · L1Findings
3 Medium1 Low
MediumAi Review Evidencepackage.json
MediumAi Review Evidenceindex.js
MediumAi Review Evidenceindex.js
LowNo License
Affected versions and remediation
This report applies to event-emitter-testmetest@3.0.0.
See all versions of event-emitter-testmetest for other recorded verdicts.
- Review the evidence and your use of event-emitter-testmetest@3.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.