jscrambler@8.22.2

⚠ Under review

Jscrambler Code Integrity API client.

Static Scan Results

scanned 22d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 13 file(s), 121 KB of source, external domains: app.jscrambler.com

Source & flagged code

4 flagged

dist/client.jsView file

Lines 1-22javascript

1"use strict";

3require("core-js/modules/es.regexp.exec.js");

4require("core-js/modules/es.string.replace.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/client.jsView on unpkg · L2

5require("core-js/modules/es.string.trim.js");

6require("core-js/modules/web.dom-collections.iterator.js");

7var _lodash = _interopRequireDefault(require("lodash.defaults"));

8var _fs = _interopRequireDefault(require("fs"));

9var _lodash2 = _interopRequireDefault(require("lodash.keys"));

10var _axios = _interopRequireDefault(require("axios"));

11var _zlib = require("zlib");

12var _url = _interopRequireDefault(require("url"));

13var _https = _interopRequireDefault(require("https"));

14var _http = _interopRequireDefault(require("http"));

15var _httpsProxyAgent = require("https-proxy-agent");

16var _httpProxyAgent = require("http-proxy-agent");

17var _config = _interopRequireDefault(require("./config"));

18var _generateSignedParams = _interopRequireDefault(require("./generate-signed-params"));

19var _constants = require("./constants");

20var _package = require("../package.json");

21function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }

22const debug = !!process.env.DEBUG;

•matchType = normalized_sha256 matchedPackage = jscrambler@8.14.0 matchedPath = dist/client.js matchedIdentity = npm:anNjcmFtYmxlcg:8.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client.jsView on unpkg

dist/bin/jscrambler.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/bin/jscrambler.js#virtual:string-array:round1View on unpkg

dist/index.jsView file

•matchType = normalized_sha256 matchedPackage = jscrambler@8.14.0 matchedPath = dist/index.js matchedIdentity = npm:anNjcmFtYmxlcg:8.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/client.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/client.jsView on unpkg

2L3: require("core-js/modules/es.regexp.exec.js"); L4: require("core-js/modules/es.string.replace.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/client.jsView on unpkg · L2

dist/bin/jscrambler.js#virtual:string-array:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

Findings

3 High3 Medium4 Low

HighSemantic Analysis Limiteddist/bin/jscrambler.js#virtual:string-array:round1

HighKnown Malware Source Similaritydist/client.js

HighKnown Malware Source Similaritydist/index.js

MediumDynamic Requiredist/client.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to jscrambler@8.22.2.

See all versions of jscrambler for other recorded verdicts.

Review the evidence and your use of jscrambler@8.22.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-01 17:47:33.831Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.