Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

oddsockets-nodejs@1.0.2: Suspicious npm security report (Warn) | LPM Firewall

Threat feed How it works Policy

Threat feed How it works Policy

Flagged — allowed with a warning

Allowed by default policy, but 9 finding(s) warrant review before installing.

View on npm All versions

registry / oddsockets-nodejs / 1.0.2

oddsockets-nodejs@1.0.2

Official Node.js SDK for OddSockets real-time messaging platform

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequire

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

NoLicense

scanned 9 file(s), 460 KB of source, external domains: cdn.example.com

Source & flagged code

2 flagged · loading source

dist/Channel.jsView file

1function a0_0x371337(_0x1c09e5,_0x45eb2e){return a0_0x2299(_0x45eb2e- -0x1aa,_0x1c09e5);}(function(_0x44f5e3,_0x1ce0b4){function _0x221cf0(_0x5d2017,_0x2b0d0b){return a0_0x2299(_0x...

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/Channel.jsView on unpkg · L1

1function a0_0x371337(_0x1c09e5,_0x45eb2e){return a0_0x2299(_0x45eb2e- -0x1aa,_0x1c09e5);}(function(_0x44f5e3,_0x1ce0b4){function _0x221cf0(_0x5d2017,_0x2b0d0b){return a0_0x2299(_0x...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/Channel.jsView on unpkg · L1

Findings

2 High2 Medium5 Low

HighObfuscated Payload Loaderdist/Channel.js

HighObfuscated

MediumDynamic Requiredist/Channel.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowHigh Entropy Strings

LowUrl Strings

LowNo License

72%Warn

Verdict confidence

Firewall policyMatched warn-list

Package metadata

npm

AuthorJoe Wee

Maintainersjyswee

Version1.0.2

PublishedJul 17, 2026

LicenseSEE LICENSE IN LICENSE

Dependencies6

Integrityverified

Package size127 KB

Files13

Keywordsoddsocketswebsocketrealtimemessagingpubsubpubnubpushersocket.io

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → dist/index.js

Runtimenode >=14.0.0

Artifact498 KB · 13 files1 signature(s)

Install lifecycleprepublishOnly

Behavioral surface

DynamicRequireHighEntropyStringsMinifiedObfuscatedUrlStringsNoLicense

LPM CLI

Source & flagged code

2 flagged

dist/Channel.jsView file

Lines 1-1javascript

1function a0_0x371337(_0x1c09e5,_0x45eb2e){return a0_0x2299(_0x45eb2e- -0x1aa,_0x1c09e5);}(function(_0x44f5e3,_0x1ce0b4){function

_0x221cf0

(

_0x5d2017

,

_0x2b0d0b

){

return

a0_0x2299

(_0x5d2017

-

0x2bf

,_0x2b0d0b);}

function

_0x33a6a0

(

_0xdd84b3

,

_0x3d4337

){

return

a0_0x2299

(_0xdd84b3

-

0x1a0

,_0x3d4337);}

const

_0x2887c3

=

_0x44f5e3

();

while

(

!!

[]){

try

{

const

_0x4a0085

=-

parseInt

(

_0x33a6a0

(

0x388

,

'

\x51\x79\x4c\x6b

'

))

/

(

-

0xbd0

+

0x13d7

*

0x1

+-

0x806

)

*

(

parseInt

(

_0x33a6a0

(

0x387

,

'

\x28\x2a\x77\x45

'

))

/

(

-

0x468

+-

0xe

*

0x11e

+-

0x12e

*-

0x11

))

+

parseInt

(

_0x221cf0

(

0x5ad

,

'

\x38\x69\x4b\x4c

'

))

/

(

-

0xd77

+-

0x19df

+-

0x59f

*-

0x7

)

*

(

-

parseInt

(_0x33a6a0

...

High

Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/Channel.jsView on unpkg · L1

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/Channel.jsView on unpkg · L1

Long lines were clipped for display.