4var q2t=Object.create;var vW=Object.defineProperty;var z2t=Object.getOwnPropertyDescriptor;var V2t=Object.getOwnPropertyNames;var K2t=Object.getPrototypeOf,$2t=Object.prototype.has...
L5: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC7\xFC\xE9\xE2\xE4\xE0\xE5\xE7\xEA\xEB\xE8\xEF\xEE...
L6: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC7\xFC\xE9\xE2\xE4\xE0\u0105\xE7\xEA\xEB\xE8\xEF\x...
...
L35: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC4\xC5\xC7\xC9\xD1\xD6\xDC\xE1\xE0\xE2\xE4\xE3\xE5...
L36: \v\f\r\x1B !"#$%&'()*
CriticalClipboard Crypto Hijack
Source reads and rewrites clipboard contents matching cryptocurrency wallet addresses.
dist/perch.mjsView on unpkg · L4 316Trigger-reachable chain: manifest.bin -> bin/perch -> dist/perch.mjs
L316: `)}
L317: `}function Mqt(e){let t=X8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Y8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",...
L318: `).trim()}var vO,uHe,gHe=ue(()=>{"use strict";vO=Ji(wW()),uHe=Ji(lHe())});async function kue(e){let t=await dHe(e);return await Oqt(t.html,t.pdf)||fHe(t.pdf,e),t}async function Oqt...
L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=Yqt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa...
L320: `,"utf8")}function ade(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function XHe(e){return`${e.from}|${e.to}|${e.type}`
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/perch.mjsView on unpkg · L316 318`).trim()}var vO,uHe,gHe=ue(()=>{"use strict";vO=Ji(wW()),uHe=Ji(lHe())});async function kue(e){let t=await dHe(e);return await Oqt(t.html,t.pdf)||fHe(t.pdf,e),t}async function Oqt...
L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=Yqt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa...
L320: `,"utf8")}function ade(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function XHe(e){return`${e.from}|${e.to}|${e.type}`}function JHe(e){return e?{low:1,me...
317`}function Mqt(e){let t=X8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Y8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",...
L318: `).trim()}var vO,uHe,gHe=ue(()=>{"use strict";vO=Ji(wW()),uHe=Ji(lHe())});async function kue(e){let t=await dHe(e);return await Oqt(t.html,t.pdf)||fHe(t.pdf,e),t}async function Oqt...
L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=Yqt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa...
...
L326: `),r=!1;return t.map(n=>/^\s*```/.test(n)?(r=!r,n):r||/^\s*>/.test(n)?n:KVt(n)).join(`
L327: `)}function KVt(e){let t="",r=!1,n=!1,o=!1;for(let i=0;i<e.length;i+=1){let a=e[i],s=i>0?e[i-1]:"";if(a==="`"){o=!o,t+=a;contin
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/perch.mjsView on unpkg · L317 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/perch.mjs:
var q2t=Object.create;var vW=Object.defineProperty;var z2t=Object.getOwnPropertyDescriptor;var V2t=Object.getOwnPropertyNames;var K2t=Object.getPrototypeOf,$2t=Object.prototype.has...
\v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C...
`)}function H2t(ft){var Nt={};return Qt(Nt,ft),Nt}function sie(ft,Nt,xt,Tt){var Ut=Tt&&Tt.unsafe;Ut||Qt(ft);var Ht=!Ut&&Co.find(ft,Nt);if(!Ht){var Gr=ft.FullPaths[0];Nt.slice(0,Gr....
`),U.bookType=="fods"?ce.push("</office:document>"):ce.push("</office:docum
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/perch.mjsView on unpkg •Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior.
dist/perch.mjs:
var q2t=Object.create;var vW=Object.defineProperty;var z2t=Object.getOwnPropertyDescriptor;var V2t=Object.getOwnPropertyNames;var K2t=Object.getPrototypeOf,$2t=Object.prototype.has...
\v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C...
`)}function H2t(ft){var Nt={};return Qt(Nt,ft),Nt}function sie(ft,Nt,xt,Tt){var Ut=Tt&&Tt.unsafe;Ut||Qt(ft);var Ht=!Ut&&Co.find(ft,Nt);if(!Ht){var Gr=ft.FullPaths[0];Nt.slice(0,Gr....
`),U.bookType=="fods"?ce.push("</office:document>"):ce.push("</office:document-content>"),ce.joi
HighEntrypoint Foreign Package Code Overwrite
Manifest-reachable source overwrites another installed package with package-defined remote behavior.
dist/perch.mjsView on unpkg 316`)}
L317: `}function Mqt(e){let t=X8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Y8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",...
L318: `).trim()}var vO,uHe,gHe=ue(()=>{"use strict";vO=Ji(wW()),uHe=Ji(lHe())});async function kue(e){let t=await dHe(e);return await Oqt(t.html,t.pdf)||fHe(t.pdf,e),t}async function Oqt...
L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=Yqt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa...
L320: `,"utf8")}function ade(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function XHe(e){return`${e.from}|${e.to}|${e.type}`}function JHe(e){return e?{low:1,me...
...
L326: `),r=!1;return t.map
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/perch.mjsView on unpkg · L316 35\v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\xC4\xC5\xC7\xC9\xD1\xD6\xDC\xE1\xE0\xE2\xE4\xE3\xE5...
L36: \v\f\r\x1B !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_\`abcdefghijklmnopqrstuvwxyz{|}~\x7F\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8A\x8B\x8C...
L37: `)+`\r
...
L318: `).trim()}var vO,uHe,gHe=ue(()=>{"use strict";vO=Ji(wW()),uHe=Ji(lHe())});async function kue(e){let t=await dHe(e);return await Oqt(t.html,t.pdf)||fHe(t.pdf,e),t}async function Oqt...
L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=Yqt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa...
L320: `,"utf8")}function a
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
dist/perch.mjsView on unpkg · L35 316Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/perch -> dist/perch.mjs
L316: `)}
L317: `}function Mqt(e){let t=X8(String(e??""));return/[",\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}function Y8(e){return new Intl.NumberFormat("en-US",{style:"currency",currency:"USD",...
L318: `).trim()}var vO,uHe,gHe=ue(()=>{"use strict";vO=Ji(wW()),uHe=Ji(lHe())});async function kue(e){let t=await dHe(e);return await Oqt(t.html,t.pdf)||fHe(t.pdf,e),t}async function Oqt...
L319: `).trim();if(!r)return{rows:[]};let n=t.find(i=>i.text.trim())??t[0],o=Yqt({fileName:e.fileName,role:e.role,text:r,firstPageText:n?.text??r,pageNumber:n?.pageNumber,pageTotal:n?.pa...
L320: `,"utf8")}function ade(e,t){return!Number.isFinite(e)||!e||e<=0?t:Math.min(500,Math.floor(e))}function XHe(e){return`
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
dist/perch.mjsView on unpkg · L316 •stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
HighSemantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/perch.mjsView on unpkg •path = dist/perch.mjs
kind = oversized_source_file
sizeBytes = 7539488
magicHex = [redacted]
MediumOversized Source File
Package contains source files above the normal full-analysis size ceiling.
dist/perch.mjsView on unpkg •path = dist/perch.mjs
kind = oversized_cli_entrypoint
sizeBytes = 7539488
magicHex = [redacted]
MediumOversized Cli Entrypoint
Package contains an oversized executable-looking CLI entrypoint.
dist/perch.mjsView on unpkg