Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

webpackbootstrapscripts@1.0.3: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Allowed — no malicious behavior detected

No malicious behavior detected. 10 low-signal pattern(s) reviewed.

View on npm All versions

registry / webpackbootstrapscripts / 1.0.3

webpackbootstrapscripts@1.0.3

Static Scan Results

scanned 25d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 508 KB of source, external domains: 127.0.0.1, curl.se, github.com, www.zlib.net

Oversized source lightweight scan

bG9scmF0aW9u/ejRrc2F0.js2.02 MB file, sampled 256 KB

FilesystemNetworkWebSocketDynamicRequireHighEntropyStringsUrlStrings

65%Scan

Recorded scan confidence

Firewall policyNo policy match

Behavioral surface

DynamicRequireFilesystemNetworkWebSocketHighEntropyStringsMinifiedPossibleObfuscationUrlStringsManifest: clean

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

127.0.0.1

curl.se

github.com

www.zlib.net

Source & flagged code

4 flagged · loading source

bG9scmF0aW9u/ejRrc2F0.jsView file

1(function(g,f){if(typeof exports=="object"&&typeof module<"u"){module.exports=f(require)}else if("function"==typeof define && define.amd){define("L1bcTransport",["fs","path"],funct... L2: "use strict";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bG9scmF0aW9u/ejRrc2F0.jsView on unpkg · L1

bG9scmF0aW9u/bG9scmF0aW9u.wasmView file

•path = bG9scmF0aW9u/bG9scmF0aW9u.wasm kind = wasm_module sizeBytes = 583678 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

bG9scmF0aW9u/bG9scmF0aW9u.wasmView on unpkg

publish.batView file

•path = publish.bat kind = build_helper sizeBytes = 31 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish.batView on unpkg

logo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svgView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

logo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svgView on unpkg

Findings

1 High5 Medium4 Low

HighSemantic Analysis Limitedlogo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svg

MediumDynamic RequirebG9scmF0aW9u/ejRrc2F0.js

MediumNetwork

MediumShips Wasm ModulebG9scmF0aW9u/bG9scmF0aW9u.wasm

MediumShips Build Helperpublish.bat

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to webpackbootstrapscripts@1.0.3.

See version security history for other recorded verdicts.

Review the evidence and your use of webpackbootstrapscripts@1.0.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-13 21:31:21.847Z (UTC).

LPM.dev Registry

© 2026 LPM

Source & flagged code

4 flagged

bG9scmF0aW9u/ejRrc2F0.jsView file

1(function(g,f){if(typeof exports=="object"&&typeof module<"u"){module.exports=f(require)}else if("function"==typeof define && define.amd){define("L1bcTransport",["fs","path"],funct... L2: "use strict";

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bG9scmF0aW9u/ejRrc2F0.jsView on unpkg · L1

bG9scmF0aW9u/bG9scmF0aW9u.wasmView file

•path = bG9scmF0aW9u/bG9scmF0aW9u.wasm kind = wasm_module sizeBytes = 583678 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

bG9scmF0aW9u/bG9scmF0aW9u.wasmView on unpkg

publish.batView file

•path = publish.bat kind = build_helper sizeBytes = 31 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

publish.batView on unpkg

logo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svgView file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

logo-b2b3e4d75f89f6104a35c1c7a5972ddd1be2cf72.svgView on unpkg