talos-resource@0.0.146: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

talos-resource@0.0.146: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

6 flagged · loading source

Marketing/skills/document/bin/docx-annotate.cjsView file

2607if (typeof callback !== "function") { L2608: callback = new Function("" + callback); L2609: }

Low

Eval

Package source references a known benign dynamic code generation pattern.

Marketing/skills/document/bin/docx-annotate.cjsView on unpkg · L2607

Marketing/skills/document/bin/ocr.cjsView file

8var __hasOwnProp = Object.prototype.hasOwnProperty; L9: var __commonJS = (cb, mod) => function __require() { L10: return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

Marketing/skills/document/bin/ocr.cjsView on unpkg · L8

General/skills/xlsx/scripts/office/pack.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 4991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

General/skills/xlsx/scripts/office/pack.pyView on unpkg

Marketing/skills/document/bin/doc-gen.cjsView file

•path = [redacted]-gen.cjs kind = oversized_source_file sizeBytes = 6268107 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

Marketing/skills/document/bin/doc-gen.cjsView on unpkg

•path = [redacted]-gen.cjs kind = oversized_cli_entrypoint sizeBytes = 6268107 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

Marketing/skills/document/bin/doc-gen.cjsView on unpkg

Coder/skills/document/bin/pdf-render.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = talos-resource@0.0.141 matchedIdentity = npm:dGFsb3MtcmVzb3VyY2U:0.0.141 similarity = 1.364 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

Coder/skills/document/bin/pdf-render.cjsView on unpkg

Source & flagged code

6 flagged

Marketing/skills/document/bin/docx-annotate.cjsView file

Lines 2587-2627javascript

2587 module2.exports = {

2588 Promise: ES6Promise

2589 };

2590 }

2591});

2592

2593// node_modules/setimmediate/setImmediate.js

2594var require_setImmediate = __commonJS({

2595 "node_modules/setimmediate/setImmediate.js"(exports2) {

2596 (function(global2, undefined2) {

2597 "use strict";

2598 if (global2.setImmediate) {

2599 return;

2600 }

2601 var nextHandle = 1;

2602 var tasksByHandle = {};

2603 var currentlyRunningATask = false;

2604 var doc = global2.document;

2605 var registerImmediate;

2606 function setImmediate2(callback) {

2607 if (typeof callback !== "function") {

2608 callback = new Function("" + callback);

2609 }

Low

Eval

Package source references a known benign dynamic code generation pattern.

Marketing/skills/document/bin/docx-annotate.cjsView on unpkg · L2607

2610 var args = new Array(arguments.length - 1);

2611 for (var i = 0; i < args.length; i++) {

2612 args[i] = arguments[i + 1];

2613 }

2614 var task = { callback, args };

2615 tasksByHandle[nextHandle] = task;

2616 registerImmediate(nextHandle);

2617 return nextHandle++;

2618 }

2619 function clearImmediate(handle) {

2620 delete tasksByHandle[handle];

2621 }

2622 function run(task) {

2623 var callback = task.callback;

2624 var args = task.args;

2625 switch (args.length) {

2626 case 0:

2627 callback();

Marketing/skills/document/bin/ocr.cjsView file

Lines 1-28javascript

1#!/usr/bin/env node

2"use strict";

3var __create = Object.create;

4var __defProp = Object.defineProperty;

5var __getOwnPropDesc = Object.getOwnPropertyDescriptor;

6var __getOwnPropNames = Object.getOwnPropertyNames;

General/skills/xlsx/scripts/office/pack.pyView file

•path = [redacted].py kind = build_helper sizeBytes = 4991 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

General/skills/xlsx/scripts/office/pack.pyView on unpkg

Marketing/skills/document/bin/doc-gen.cjsView file

•path = [redacted]-gen.cjs kind = oversized_source_file sizeBytes = 6268107 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

Marketing/skills/document/bin/doc-gen.cjsView on unpkg

•path = [redacted]-gen.cjs kind = oversized_cli_entrypoint sizeBytes = 6268107 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

Marketing/skills/document/bin/doc-gen.cjsView on unpkg

Coder/skills/document/bin/pdf-render.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = talos-resource@0.0.141 matchedIdentity = npm:dGFsb3MtcmVzb3VyY2U:0.0.141 similarity = 1.364 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

Coder/skills/document/bin/pdf-render.cjsView on unpkg