1import{createRequire as oe}from"node:module";var ie=Object.create;var{getPrototypeOf:he,defineProperty:zV,getOwnPropertyNames:ue}=Object;var me=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function ee(A,Q,B){return new Promise((I,E)=>{let g=SV(A,Q,{sign...
HighChild Process
Package source references child process execution.
dist/index.mjsView on unpkg · L1 1import{createRequire as oe}from"node:module";var ie=Object.create;var{getPrototypeOf:he,defineProperty:zV,getOwnPropertyNames:ue}=Object;var me=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function ee(A,Q,B){return new Promise((I,E)=>{let g=SV(A,Q,{sign...
L3: `).slice(1)){let I=B.trim();if(!I)continue;let[E,g,...C]=I.split(/\s+/);if(!E||!g)continue;let D=Object.fromEntries(C.map((U)=>U.split(":")).filter((U)=>U.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await yV(B,"const.product.model")??B,model:await yV(B,"const.p...
L5: `).join(`\r
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.mjsView on unpkg · L1 1import{createRequire as oe}from"node:module";var ie=Object.create;var{getPrototypeOf:he,defineProperty:zV,getOwnPropertyNames:ue}=Object;var me=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function ee(A,Q,B){return new Promise((I,E)=>{let g=SV(A,Q,{sign...
L3: `).slice(1)){let I=B.trim();if(!I)continue;let[E,g,...C]=I.split(/\s+/);if(!E||!g)continue;let D=Object.fromEntries(C.map((U)=>U.split(":")).filter((U)=>U.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await yV(B,"const.product.model")??B,model:await yV(B,"const.p...
L5: `).join(`\r
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/index.mjsView on unpkg · L1 1import{createRequire as oe}from"node:module";var ie=Object.create;var{getPrototypeOf:he,defineProperty:zV,getOwnPropertyNames:ue}=Object;var me=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function ee(A,Q,B){return new Promise((I,E)=>{let g=SV(A,Q,{sign...
L3: `).slice(1)){let I=B.trim();if(!I)continue;let[E,g,...C]=I.split(/\s+/);if(!E||!g)continue;let D=Object.fromEntries(C.map((U)=>U.split(":")).filter((U)=>U.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await yV(B,"const.product.model")??B,model:await yV(B,"const.p...
L5: `).join(`\r
...
L11: `).some((g)=>g.includes
HighObfuscated Payload Loader
Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.
dist/index.mjsView on unpkg · L1 7879- 多子应用工作区：命令支持 \`--project <子应用根>\` 指定目标工程。
L7880: `}var o8="<!-- mobkit:begin -->",DM="<!-- mobkit:end -->";var a8=L(()=>{ug()});var TA,im,l,Hg=(A)=>{switch(typeof A){case"undefined":return l.undefined;case"string":return l.string...
L7881: `)}var Dl=(A,Q)=>{A.name="$ZodError",Object.defineProperty(A,"_zod",{value:A._zod,enumerable:!1}),Object.defineProperty(A,"issues",{value:Q,enumerable:!1}),A.message=JSON.stringify...
LowEval
Package source references a known benign dynamic code generation pattern.
dist/index.mjsView on unpkg · L7879 1import{createRequire as oe}from"node:module";var ie=Object.create;var{getPrototypeOf:he,defineProperty:zV,getOwnPropertyNames:ue}=Object;var me=Object.prototype.hasOwnProperty;func...
L2: `);$=Y.pop()??"";for(let N of Y)if(N.trim())B(N)}),D.on("error",C),D.on("close",()=>{if($.trim())B($);g()})})}async function ee(A,Q,B){return new Promise((I,E)=>{let g=SV(A,Q,{sign...
L3: `).slice(1)){let I=B.trim();if(!I)continue;let[E,g,...C]=I.split(/\s+/);if(!E||!g)continue;let D=Object.fromEntries(C.map((U)=>U.split(":")).filter((U)=>U.length===2)),$=g==="devic...
L4: `).map((B)=>B.trim()).filter((B)=>B&&B!=="[Empty]");return Promise.all(Q.map(async(B)=>({id:B,platform:"harmony",name:await yV(B,"const.product.model")??B,model:await yV(B,"const.p...
L5: `).join(`\r
...
L11: `).some((g)=>g.includes
LowWeak Crypto
Package source references weak cryptographic algorithms.
dist/index.mjsView on unpkg · L1