1import{createRequire as Ye}from"node:module";var Be=Object.create;var{getPrototypeOf:Ie,defineProperty:QV,getOwnPropertyNames:Ee}=Object;var ge=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function we(A,Q,B){return new Promise((E,I)=>{let g=EV(A,Q,{sign...
HighChild Process
Package source references child process execution.
dist/index.mjsView on unpkg · L1 1import{createRequire as Ye}from"node:module";var Be=Object.create;var{getPrototypeOf:Ie,defineProperty:QV,getOwnPropertyNames:Ee}=Object;var ge=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function we(A,Q,B){return new Promise((E,I)=>{let g=EV(A,Q,{sign...
L3: `).slice(1)){let E=B.trim();if(!E)continue;let[I,g,...C]=E.split(/\s+/);if(!I||!g)continue;let D=Object.fromEntries(C.map((F)=>F.split(":")).filter((F)=>F.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await JV(B,"const.product.model")??B,model:await JV(B,"const.p...
L5: `).join(`\r
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L1 1import{createRequire as Ye}from"node:module";var Be=Object.create;var{getPrototypeOf:Ie,defineProperty:QV,getOwnPropertyNames:Ee}=Object;var ge=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function we(A,Q,B){return new Promise((E,I)=>{let g=EV(A,Q,{sign...
L3: `).slice(1)){let E=B.trim();if(!E)continue;let[I,g,...C]=E.split(/\s+/);if(!I||!g)continue;let D=Object.fromEntries(C.map((F)=>F.split(":")).filter((F)=>F.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await JV(B,"const.product.model")??B,model:await JV(B,"const.p...
L5: `).join(`\r
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsView on unpkg · L1 1import{createRequire as Ye}from"node:module";var Be=Object.create;var{getPrototypeOf:Ie,defineProperty:QV,getOwnPropertyNames:Ee}=Object;var ge=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function we(A,Q,B){return new Promise((E,I)=>{let g=EV(A,Q,{sign...
L3: `).slice(1)){let E=B.trim();if(!E)continue;let[I,g,...C]=E.split(/\s+/);if(!I||!g)continue;let D=Object.fromEntries(C.map((F)=>F.split(":")).filter((F)=>F.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await JV(B,"const.product.model")??B,model:await JV(B,"const.p...
L5: `).join(`\r
...
L11: `).some((g)=>g.includes
HighObfuscated Payload Loader
Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/index.mjsView on unpkg · L1 6439- 多子应用工作区：命令支持 \`--project <子应用根>\` 指定目标工程。
L6440: `}var ZR="<!-- mobkit:begin -->",xw="<!-- mobkit:end -->";var SR=L(()=>{ig()});var TA,Im,l,Vg=(A)=>{switch(typeof A){case"undefined":return l.undefined;case"string":return l.string...
L6441: `)}var vm=(A,Q)=>{A.name="$ZodError",Object.defineProperty(A,"_zod",{value:A._zod,enumerable:!1}),Object.defineProperty(A,"issues",{value:Q,enumerable:!1}),A.message=JSON.stringify...
LowEval
Package source references a known benign dynamic code generation pattern.
dist/index.mjsView on unpkg · L6439 1import{createRequire as Ye}from"node:module";var Be=Object.create;var{getPrototypeOf:Ie,defineProperty:QV,getOwnPropertyNames:Ee}=Object;var ge=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function we(A,Q,B){return new Promise((E,I)=>{let g=EV(A,Q,{sign...
L3: `).slice(1)){let E=B.trim();if(!E)continue;let[I,g,...C]=E.split(/\s+/);if(!I||!g)continue;let D=Object.fromEntries(C.map((F)=>F.split(":")).filter((F)=>F.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await JV(B,"const.product.model")??B,model:await JV(B,"const.p...
L5: `).join(`\r
...
L11: `).some((g)=>g.includes
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/index.mjsView on unpkg · L1