registry / pushy-server / 2026.7.5-48b7993f

pushy-server@2026.7.5-48b7993f

⚠ Under review

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 21 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

Manifest

NoLicense

scanned 17 file(s), 4.28 MB of source, external domains: accounts.google.com, api.nodemailer.com, cdn.jsdelivr.net, cresc.dev, ely.sia, ethereal.email, github.com, jimmy.warting.se, jira.mariadb.org, json-schema.org, mail.google.com, mths.be, nodemailer.com, openapi.alipay.com, pris.ly, pushy.reactnative.cn, registry.npmjs.org, s.io, sts.aliyuncs.com, www.apple.com, www.prisma.io, www.w3.org

Oversized source lightweight scan

lib/chunk-wpxk81hk.js4.61 MB file, sampled 256 KB

HighEntropyStringsMinified

Source & flagged code

12 flagged

lib/chunk-ay15an5e.jsView file

Lines 1-27javascript

1// @bun

2import{mb as $a}from"./chunk-emyp8hgb.js";import{nb as m,ob as v,qb as m0}from"./chunk-x666hrws.js";var f2=v((JF)=>{Object.defineProperty(JF,"__esModule",{value:!0});JF.VERSION=void 0;JF.VERSION="1.9.1"});var VF=v((zF)=>{Object.defineProperty(zF,"__esModule",{value:!0});zF.isCompatible=zF._makeCompatibilityCheck=void 0;var Nv=f2(),WF=/^(\d+)\.(\d+)\.(\d+)(-(.+))?$/;function KF($){let Z=new Set([$]),X=new Set,Q=$.match(WF);if(!Q)return()=>!1;let J={major:+Q[1],minor:+Q[2],patch:+Q[3],prerelease:Q[4]};if(J.prerelease!=null)return function(z){return z===$};function Y(K){return X.add(K),!1}functio ...

3`);for(let K=Q;K<W.length;K++){let z=W[K];if(z.length>1024)z=z.slice(0,1024);let H=_3.test(z)?z.replace(_3,"$1"):z;if(H.includes("Error: "))continue;for(let V of Z){let G=V(H);if(G){Y.push(G);break}}if(Y.length>=50+J)break}return N3(Y.slice(J))}}function CQ($){if(Array.isArray($))return A4(...$);return $}function N3($){if(!$.length)return[];let Z=Array.from($);if(/sentryWrapped/.test(f4(Z).function||""))Z.pop();if(Z.reverse(),R3.test(f4(Z).function||"")){if(Z.pop(),R3.test(f4(Z).function||""))Z.pop()}return Z.slice(0,50).map((X)=>({...X,filename:X.filename||f4(Z).filename,function:X.function|| ...

4 ${H.join(`

5 `)}`)}function o9($){if(!D)return;let{description:Z="< unknown name >",op:X="< unknown op >"}=S($),{spanId:Q}=$.spanContext(),Y=Y0($)===$,W=`[Tracing] Finishing "${X}" ${Y?"root "

6${JSON.stringify(W)}

7`),typeof K==="string"||K instanceof Uint8Array)J(K);else{let z;try{z=JSON.stringify(K)}catch{z=JSON.stringify(h0(K))}J(z)}}return typeof Q==="string"?Q:pT(Q)}function pT($){let Z=$.reduce((J,Y)=>J+Y.length,0),X=new Uint8Array(Z),Q=0;for(let J of $)X.set(J,Q),Q+=J.length;return X}function KJ($){return[{type:"span"},$]}function zJ($){let Z=typeof $.data==="string"?YJ($.data):$.data;return[{type:"attachment",length:Z.length,filename:$.filename,content_type:$.contentType,attachment_type:$.attachmentType},Z]}var WH={sessions:"session",event:"error",client_report:"internal",user_report:"default",pr ...

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/chunk-ay15an5e.jsView on unpkg · L7

8Event: ${a6($)}`),!0;if(rE($))return D&&w.warn(`Event dropped due to not having an error message, error type or stacktrace.

9Event: ${a6($)}`),!0;if(pE($,Z.denyUrls))return D&&w.warn(`Event dropped due to being matched by \`denyUrls\` option.

10Event: ${a6($)}.

11Url: ${l4($)}`),!0;if(!iE($,Z.allowUrls))return D&&w.warn(`Event dropped due to not being matched by \`allowUrls\` option.

12Event: ${a6($)}.

13Url: ${l4($)}`),!0}else if($.type==="transaction"){if(lE($,Z.ignoreTransactions))return D&&w.warn(`Event dropped due to being matched by \`ignoreTransactions\` option.

14Event: ${a6($)}`),!0}return!1}function uE($,Z){if(!Z?.length)return!1;return u4($).some((X)=>M1(X,Z))}function lE($,Z){if

15Type: ${$}

16Name: ${b9(Q)}

17Error:`,J)}}var i4=new Set([]);function o4($){let X=vJ("console",$);return BZ("console",Bh),X}function nH($){for(let Z of $)i4.add(Z);return()=>{for(let Z of $)i4.delete(Z)}}function Bh(){if(!("console"in g))return;L6.forEach(function($){if(!($ in g.console))return;E9(g.console,$,function(Z){return E1[$]=Z,function(...X){let Q=X[0],J=E1[$],Y=i4.size&&typeof Q==="string"&&M1(Q,i4);if(!Y)R7("console",{args:X,level:$});if(!Y||D&&w.isEnabled())J?.apply(g.console,X)}})})}function FZ($){return $==="warn"?"warning":["fatal","error","warning","log","info","debug"].includes($)?$:"log"}function Fh($,Z){ ...

18Reason: ${B}`)})}_process($,Z){this._numProcessing++,this._promiseBuffer.add($).then((X)=>{return this._numProcessing--,X},(X)=>{if(this._numProcessing--,X===YZ)this.recordDroppedEvent("queue_overflow",Z);

19`),X=[];for(let Q of Z)try{let J=Q.indexOf(":");if(J===-1)continue;let Y=Q.slice(0,J).trim(),W=Q.slice(

20`).concat(`\r

21`)}function YW($,Z){let X=-1;for(let Q=0;Q<$.length;Q+=2){if($[Q]!==Z)continue;if(X===-1){X=Q;continue}

22`).some((X)=>X.indexOf("(https.js:")!==-1||X.indexOf("node:https:")!==-1)}createSocket($,Z,X){let Q={...Z,secureEndpoint:this.isSecureEndpoint(Z)};Promise.resolve().then(()=>this.connect($,Q)).then((J)=>{if(J instanceof uW.Agent)return J.addRequest($,Q);this[w6].currentSocket=J,super.createSocket($,Z,X)},X)}createConnection(){let $=this[w6].currentSocket;if(this[w6].currentSocket=void 0,!$)throw Error("No socket was returned in the `connect()` function");return $}get defaultPort(){return this[w6].defaultPort??(this.protocol==="https:"?443:80)}set defaultPort($){if(this[w6])this[w6].defaultPort ...

23\r

24`);if(B===-1){MX("have not received end of HTTP headers yet..."),Y();return}let F=G.subarray(0,B).toString("ascii").split(`\r

25`),j=F.shift();if(!j)return $.destroy(),X(Error("No header received from proxy CONNECT response"));let U=j.split(" "),q=+(U[1]||0),M=U.slice(2).

26`;if(X.username||X.password){let G=`${decodeURIComponent(X.username)}:${decodeURIComponent(X.password)}`;J["Proxy-Authorization"]=`Basic ${Buffer.from(G).toString("base64")}`}if(J.Host=`${Y}:${Z.port}`,!J["Proxy-Connection"])J["Proxy-Connection"]=this.keepAlive?"Keep-Alive":"close";for(let G of Object.keys(J))W+=`${G}: ${J[

27`;let K=sR(Q);Q.write(`${W}\r

Long lines were clipped for display.

lib/chunk-nv1c3xeq.jsView file

Lines 1-21javascript

1// @bun

2import{spawnSync as k}from"child_process";import{accessSync as j,constants as M,existsSync as l,readdirSync as A,readFileSync as E,writeFileSync as y}from"fs";import m from"os";import o from"path";var x=

lib/chunk-b9fredyc.jsView file

24L25: `);return L.split(",")}switch(H){case"hoist-pattern":case"public-hoist-pattern":return A(T)}return T}zG.exports=FG});var vG=F((yG)=>{var jG=g("os"),MA=g("path"),fG=jG.tmpdir(),TN=p... L26: `,aabOpenApksFailed:"Failed to open generated .apks file",aabReadUniversalApkFailed:"Failed to read universal.apk",aabUniversalApkNotFound:"universal.apk not found in generated .ap...

High

Shell

Package source references shell execution.

lib/chunk-b9fredyc.jsView on unpkg · L24

11`,hD=(H,T)=>{let A=[],L="";if(typeof T==="string")T={section:T,whitespace:!1};else T=T||Object.create(null),T.whitespace=T.whitespace===!0;let _=T.whitespace?" = ":"=";for(let E of... L12: `;else if(I&&typeof I==="object")A.push(E);else L+=JL(E)+_+JL(I)+kD}if(T.section&&L.length)L="["+JL(T.section)+"]"+kD+L;for(let E of A){let I=x0(E).join("\\."),C=(T.section?T.secti... L13: `:` ... L16: `],["r","\r"],["t","\t"],["b","\b"],["f","\f"],["v","\v"],["0","\x00"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function kS(H){let T=H[0]==="u",A=H[1]==="{";if(T&&!A&&H.length===5||... L17: `);if(E!==-1)T=$J(T,_,L,E);return L+T+_},WD,xS=(H,...T)=>{let[A]=T;if(!nE(A)||!nE(A.raw))return T.join(" ");let L=T.slice(1),_=[A.raw[0]];for(let E=1;E<A.length;E++)_.push(String(L... L18: GFS4: `),console.error(H)};if(!WH[sH]){if(uD=global[sH]||[],_G(WH,uD),WH.close=function(H){function T(A,L){return H.call(WH,A,function(_){if(!_)LG();if(typeof L==="function")L.appl... ... L24: L25: `);return L.split(",")}switch(H){case"hoist-pattern":case"public-hoist-pattern":return A(T)}return T}zG.exports=FG});var vG=F((yG)=>{var jG=g("os"),MA=g("path"),fG=jG.tmpdir(),TN=p... L26: `,aabOpenApksFailed:"Failed to open ge

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/chunk-b9fredyc.jsView on unpkg · L11

lib/index.jsView file

274`),console.warn($G.valibot);break;case"effect":if(n4.effect)break;n4.effect=!0,console.warn("[@elysiajs/openapi] Effect Schema doesn't provide JSON Schema method on the schema"),co... L275: `),console.warn($G.effect);break}if(G==="arktype")return x4($?.toJsonSchema?.());return x4($.toJSONSchema?.()??$?.toJsonSchema?.())}catch(w){console.warn(w)}},x4=($)=>{if(!$||typeo... L276:

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/index.jsView on unpkg · L274

3causes have become circular...`;let G=zX($);if(G)return q.add($),Y+` L4: caused by: `+nW(G,q);else return Y},MM=($)=>nW($,new Set),xW=($,q,Y)=>{if(!dq($))return"";let G=Y?"":$.message||"";if(q.has($))return G+": ...";let w=zX($);if(w){q.add($);let X=typ... L5: ${J}`,E=`, ... L21: ${v}${o} L22: ${J}`;return T.pop(),`{${o}}`}case"number":return isFinite(z)?String(z):q?q(z):"null";case"boolean":return z===!0?"true":"false";case"undefined":return;case"bigint":if(G)return Str... L23: `:` ... L25: Supported algorithms are: L26: "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "PS256", "PS384", "PS512", "ES256", "ES384", "ES512" and "none".`,Qq="secret must be a string or buffer",Gq="key must be a str... L27: * mime-types ... L42: `);if(I.push(f,J,z),typeof J.size==="number")Z+=f.byteLength+J.size+z.byteLength;else T=!0}let c=nw.encode(`--${j}--\r L43: `);if(I.push(c),Z+=c.byteLength,T)Z=null;X=$,w=async function*(){for(let v of I)if(v.stream)yield*v.stream();else yield v},K=`multipart/form-data; boundary=${j}`}else if(U8.is.Blob... L44: `).map((G)=>G.trim()).filter((G)=>G!==""&&!G.startsWith("#"));while(Y.length>0)q.push(UF(Y));if(q.length===0)throw Error("PEM: no block");return

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/index.jsView on unpkg · L3

lib/node-hdiffpatch-q8ah3hfz.nodeView file

•path = lib/node-hdiffpatch-q8ah3hfz.node kind = native_binary sizeBytes = 463096 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

lib/node-hdiffpatch-q8ah3hfz.nodeView on unpkg

lib/chunk-wpxk81hk.jsView file

•path = lib/chunk-wpxk81hk.js kind = oversized_source_file sizeBytes = 4837698 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/chunk-wpxk81hk.jsView on unpkg

lib/chunk-8qx9a08j.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = pushy-server@2026.7.4-3330c756 matchedIdentity = npm:cHVzaHktc2VydmVy:2026.7.4-3330c756 similarity = 0.765 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/chunk-8qx9a08j.jsView on unpkg

Source & flagged code

12 flagged · loading source

lib/chunk-ay15an5e.jsView file

7patternName = generic_password severity = medium line = 7 matchedText = `),typeo...ion.

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/chunk-ay15an5e.jsView on unpkg · L7

lib/chunk-nv1c3xeq.jsView file

1// @bun L2: import{spawnSync as k}from"child_process";import{accessSync as j,constants as M,existsSync as l,readdirSync as A,readFileSync as E,writeFileSync as y}from"fs";import m from"os";imp... L3:

High

Child Process

Package source references child process execution.

lib/chunk-nv1c3xeq.jsView on unpkg · L1

lib/chunk-b9fredyc.jsView file

High

Shell

Package source references shell execution.

lib/chunk-b9fredyc.jsView on unpkg · L24

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/chunk-b9fredyc.jsView on unpkg · L11

11`,hD=(H,T)=>{let A=[],L="";if(typeof T==="string")T={section:T,whitespace:!1};else T=T||Object.create(null),T.whitespace=T.whitespace===!0;let _=T.whitespace?" = ":"=";for(let E of... L12: `;else if(I&&typeof I==="object")A.push(E);else L+=JL(E)+_+JL(I)+kD}if(T.section&&L.length)L="["+JL(T.section)+"]"+kD+L;for(let E of A){let I=x0(E).join("\\."),C=(T.section?T.secti... L13: `:` ... L15: `,_)}while(L!==-1);return E+=H.substr(_),E};RS.exports={stringReplaceAll:RJ,stringEncaseCRLFWithFirstIndex:CJ}});var KS=F((Pw,hS)=>{var SJ=/(?:\\(u(?:[a-f\d]{4}|\{[a-f\d]{1,6}\})|x... L16: `],["r","\r"],["t","\t"],["b","\b"],["f","\f"],["v","\v"],["0","\x00"],["\\","\\"],["e","\x1B"],["a","\x07"]]);function kS(H){let T=H[0]==="u",A=H[1]==="{";if(T&&!A&&H.length===5||... L17: `);if(E!==-1)T=$J(T,_,L,E);return L+T+_},WD,xS=(H,...T)=>{let[A]=T;if(!nE(A)||!nE(A.raw))return T.join(" ");let L=T.slice(1),_=[A.raw[0]];for(let E=1;E<A.length;E++)_.push(String(L... L18: GFS4: `),console.error(H)};if(!WH[sH]){if(uD=global[sH]||[],_G(WH,uD),WH.close=function(H){function T(A,L){return H.call(WH,A,function(_){if(!_)LG();if(typeof L==="function")L.appl... ... L24: L25: `);return L.split(",")}switch(H){case"

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

lib/chunk-b9fredyc.jsView on unpkg · L11

1Cross-file remote execution chain: lib/chunk-b9fredyc.js spawns lib/chunk-8qx9a08j.js; helper contains network access plus dynamic code execution. L1: // @bun L2: import{$ as dc,I as KN,R as MN,S as yc,T as vc,U as uc,V as gc,W as bc,X as uR,Z as mc,_ as mR}from"./chunk-h7qfeewy.js";import{$a as gR,Na as uH,Xa as Oc,Ya as pc,ha as j9,na as Z... L3: loaded from: `+H+` L4: `);function C(R){var S=m9(kA.join(R,"prebuilds")).map(I8),G=S.filter(D8(g9,u9)).sort(B8)[0];if(!G)return;var D=kA.join(R,"prebuilds",G.name),B=m9(D).map(R8),k=B.filter(C8(v9,tR)),h... L5: ... L11: `,hD=(H,T)=>{let A=[],L="";if(typeof T==="string")T={section:T,whitespace:!1};else T=T||Object.create(null),T.whitespace=T.whitespace===!0;let _=T.whitespace?" = ":"=";for(let E of... L12: `;else if(I&&typeof I==="object")A.push(E);else L+=JL(E)+_+JL(I)+kD}if(T.section&&L.length)L="["+JL(T.section)+"]"+kD+L;for(let E of A){let I=x0(E).join("\\."),C=(T.section?T.secti... L13: `:` ... L15: `,_)}while(L!==-1);return E+=H.substr(_),E};RS.exports={stringReplaceAll:RJ,stringEncaseCRLFWithFirstIndex:CJ}});var KS=F((Pw,hS)=>{var SJ=/(?:\\(u(?:[a-f\d]{4}|\{[a-f\d]{1,6}\})|x... L16: `],["r","\r"],["t","\t"],["b","\b"],["f","\f"],…

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/chunk-b9fredyc.jsView on unpkg · L1

59@#[line:`+H.lineNumber+",col:"+H.columnNumber+"]"}function GK(H,T,A){if(typeof H=="string")return H.substr(T,A);else{if(H.length>=T+A||T)return new java.lang.String(H,T,A)+"";retur... L60: `,$.offset=(z=N.offset)!=null?z:0,$.width=(X=N.width)!=null?X:0,$.dontPrettyTextNodes=(K=(M=N.dontPrettyTextNodes)!=null?M:N.dontprettytextnodes)!=null?K:0,$.spaceBeforeSlash=(U=(V... L61: `+A.join(`

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lib/chunk-b9fredyc.jsView on unpkg · L59

lib/index.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/index.jsView on unpkg · L274

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/index.jsView on unpkg · L3

lib/node-hdiffpatch-q8ah3hfz.nodeView file

•path = lib/node-hdiffpatch-q8ah3hfz.node kind = native_binary sizeBytes = 463096 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

lib/node-hdiffpatch-q8ah3hfz.nodeView on unpkg

lib/chunk-wpxk81hk.jsView file

•path = lib/chunk-wpxk81hk.js kind = oversized_source_file sizeBytes = 4837698 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/chunk-wpxk81hk.jsView on unpkg

lib/chunk-8qx9a08j.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/chunk-8qx9a08j.jsView on unpkg

Findings

1 Critical7 High7 Medium6 Low

CriticalPrevious Version Dangerous Deltalib/chunk-8qx9a08j.js

HighChild Processlib/chunk-nv1c3xeq.js

HighShelllib/chunk-b9fredyc.js

HighSame File Env Network Executionlib/chunk-b9fredyc.js

HighCommand Output Exfiltrationlib/chunk-b9fredyc.js

HighCross File Remote Execution Contextlib/chunk-b9fredyc.js

HighObfuscated

HighOversized Source Filelib/chunk-wpxk81hk.js

MediumSecret Patternlib/chunk-ay15an5e.js

MediumDynamic Requirelib/chunk-b9fredyc.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Native Binarylib/node-hdiffpatch-q8ah3hfz.node

MediumStructural Risk Force Deep Review

LowEvallib/index.js

LowWeak Cryptolib/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

12 flagged

lib/chunk-ay15an5e.jsView file

Lines 1-27javascript

1// @bun

4 ${H.join(`

5 `)}`)}function o9($){if(!D)return;let{description:Z="< unknown name >",op:X="< unknown op >"}=S($),{spanId:Q}=$.spanContext(),Y=Y0($)===$,W=`[Tracing] Finishing "${X}" ${Y?"root "

6${JSON.stringify(W)}

Medium

Secret Pattern

Package contains a possible secret pattern.

lib/chunk-ay15an5e.jsView on unpkg · L7

8Event: ${a6($)}`),!0;if(rE($))return D&&w.warn(`Event dropped due to not having an error message, error type or stacktrace.

9Event: ${a6($)}`),!0;if(pE($,Z.denyUrls))return D&&w.warn(`Event dropped due to being matched by \`denyUrls\` option.

10Event: ${a6($)}.

11Url: ${l4($)}`),!0;if(!iE($,Z.allowUrls))return D&&w.warn(`Event dropped due to not being matched by \`allowUrls\` option.

12Event: ${a6($)}.

13Url: ${l4($)}`),!0}else if($.type==="transaction"){if(lE($,Z.ignoreTransactions))return D&&w.warn(`Event dropped due to being matched by \`ignoreTransactions\` option.

14Event: ${a6($)}`),!0}return!1}function uE($,Z){if(!Z?.length)return!1;return u4($).some((X)=>M1(X,Z))}function lE($,Z){if

15Type: ${$}

16Name: ${b9(Q)}

19`),X=[];for(let Q of Z)try{let J=Q.indexOf(":");if(J===-1)continue;let Y=Q.slice(0,J).trim(),W=Q.slice(

20`).concat(`\r

21`)}function YW($,Z){let X=-1;for(let Q=0;Q<$.length;Q+=2){if($[Q]!==Z)continue;if(X===-1){X=Q;continue}

23\r

24`);if(B===-1){MX("have not received end of HTTP headers yet..."),Y();return}let F=G.subarray(0,B).toString("ascii").split(`\r

25`),j=F.shift();if(!j)return $.destroy(),X(Error("No header received from proxy CONNECT response"));let U=j.split(" "),q=+(U[1]||0),M=U.slice(2).

27`;let K=sR(Q);Q.write(`${W}\r

Long lines were clipped for display.

lib/chunk-nv1c3xeq.jsView file

Lines 1-21javascript

1// @bun

lib/chunk-b9fredyc.jsView file

High

Shell

Package source references shell execution.

lib/chunk-b9fredyc.jsView on unpkg · L24

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

lib/chunk-b9fredyc.jsView on unpkg · L11

lib/index.jsView file

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/index.jsView on unpkg · L274

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/index.jsView on unpkg · L3

lib/node-hdiffpatch-q8ah3hfz.nodeView file

•path = lib/node-hdiffpatch-q8ah3hfz.node kind = native_binary sizeBytes = 463096 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

lib/node-hdiffpatch-q8ah3hfz.nodeView on unpkg

lib/chunk-wpxk81hk.jsView file

•path = lib/chunk-wpxk81hk.js kind = oversized_source_file sizeBytes = 4837698 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

lib/chunk-wpxk81hk.jsView on unpkg

lib/chunk-8qx9a08j.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/chunk-8qx9a08j.jsView on unpkg