xskullx-website@1.0.0: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

xskullx-website@1.0.0: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

12 flagged · loading source

local_games/sandspiel/86.ee66bafffaa4414447c5.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (self.we...}]);

High

High Secret

Package contains a high-severity secret pattern.

local_games/sandspiel/86.ee66bafffaa4414447c5.jsView on unpkg · L1

1patternName = google_api_key severity = high line = 1 matchedText = (self.we...}]);

High

Secret Pattern

Google API key in local_games/sandspiel/86.ee66bafffaa4414447c5.js

local_games/sandspiel/86.ee66bafffaa4414447c5.jsView on unpkg · L1

local_games/cookie-clicker/loc/PL.jsView file

2564"[Upgrade name 603]Game.Loop": "Gra.pętla", L2565: "[Upgrade name 604]eval()": "eval()", L2566: "[Upgrade name 605]Script grannies": "Skryptujące babcie",

Low

Eval

Package source references a known benign dynamic code generation pattern.

local_games/cookie-clicker/loc/PL.jsView on unpkg · L2564

corsify-proxy/server.jsView file

1var http = require("http"); L2: var https = require("https");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

corsify-proxy/server.jsView on unpkg · L1

local_games/level-devil/poki-sdk.jsView file

85})(); L86: eval(atob('[redacted]...

High

Base64 Obscured Url

Source decodes a Base64-obscured HTTP endpoint at runtime.

local_games/level-devil/poki-sdk.jsView on unpkg · L85

local_games/cookie-clicker/update.shView file

•path = local_games/cookie-clicker/update.sh kind = build_helper sizeBytes = 1355 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

local_games/cookie-clicker/update.shView on unpkg

local_games/tanuki-sunset/tanuki_sunset.wasm.code.unitywebView file

•path = local_games/tanuki-sunset/tanuki_sunset.wasm.code.unityweb kind = high_entropy_blob sizeBytes = 5302672 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

local_games/tanuki-sunset/tanuki_sunset.wasm.code.unitywebView on unpkg

•path = local_games/tanuki-sunset/tanuki_sunset.wasm.code.unityweb kind = compressed_blob sizeBytes = 5302672 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

local_games/tanuki-sunset/tanuki_sunset.wasm.code.unitywebView on unpkg

local_games/cookie-clicker/main.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

local_games/cookie-clicker/main.jsView on unpkg

local_games/sandspiel/728.9f96bdc52b5e36a5d122.jsView file

2patternName = generic_password severity = medium line = 2 matchedText = (self.we...}]);

Medium

Secret Pattern

Hardcoded password in local_games/sandspiel/728.9f96bdc52b5e36a5d122.js

local_games/sandspiel/728.9f96bdc52b5e36a5d122.jsView on unpkg · L2

local_games/little-alchemy-2/js/app-legacy.4d0cf951.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...}});

High

Secret Pattern

Google API key in local_games/little-alchemy-2/js/app-legacy.4d0cf951.js

local_games/little-alchemy-2/js/app-legacy.4d0cf951.jsView on unpkg · L1

local_games/little-alchemy-2/js/app.64a51313.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = (functio...}});

High

Secret Pattern

Google API key in local_games/little-alchemy-2/js/app.64a51313.js

local_games/little-alchemy-2/js/app.64a51313.jsView on unpkg · L1

Source & flagged code

12 flagged

local_games/sandspiel/86.ee66bafffaa4414447c5.jsView file

Lines 1-2javascript

1(self.webpackChunksandtable=self.webpackChunksandtable||[]).push([[86],{44(e,t,n){"use strict";n.d(t,{A:()=>a});var r=n(9291),i=n(5441);const a=function(e){var t=e.close,n=e.children;return r.createElement("div",{className:"menu-scrim"},r.createElement("div",{className:"menu"},n,r.createElement(i.N_,{to:"/",className:"x",onClick:t},r.createElement("button",null," x"))))}},397(e){e.exports="precision highp float;\nprecision mediump sampler2D;\n#define GLSLIFY 1\nvarying vec2 vUv;\nvarying vec2 vL;\nvarying vec2 vR;\nvarying vec2 vT;\nvarying vec2 vB;\nuniform sampler2D uPressure;\nuniform sampl ...

High

High Secret

Package contains a high-severity secret pattern.

local_games/sandspiel/86.ee66bafffaa4414447c5.jsView on unpkg · L1

High

Secret Pattern

Google API key in local_games/sandspiel/86.ee66bafffaa4414447c5.js

local_games/sandspiel/86.ee66bafffaa4414447c5.jsView on unpkg · L1

2//# sourceMappingURL=86.ee66bafffaa4414447c5.js.map

Long lines were clipped for display.

local_games/cookie-clicker/loc/PL.jsView file

Lines 2544-2584javascript

2544 "[Upgrade name 583]Nanaimo bars": "Batony nanaimo ",

2545 "[Upgrade name 584]Berger cookies": "Ciastka Bergera",

2546 "[Upgrade name 585]Chinsuko": "Japońskie ciastka chinsuko",

2547 "[Upgrade name 586]Panda koala biscuits": "Ciastka pando-koalowe",

2548

corsify-proxy/server.jsView file

Lines 1-21javascript

1var http = require("http");

2var https = require("https");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

corsify-proxy/server.jsView on unpkg · L1

3var url = require

local_games/level-devil/poki-sdk.jsView file

Lines 65-86javascript

65 destroyAd: t.throwNotLoaded,

66 getLeaderboard: t.handleAutoResolvePromise,

67 getSharableURL: function() {

68 return new Promise((function(e, n

local_games/cookie-clicker/update.shView file

•path = local_games/cookie-clicker/update.sh kind = build_helper sizeBytes = 1355 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

local_games/cookie-clicker/update.shView on unpkg

local_games/tanuki-sunset/tanuki_sunset.wasm.code.unitywebView file

•path = local_games/tanuki-sunset/tanuki_sunset.wasm.code.unityweb kind = high_entropy_blob sizeBytes = 5302672 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

local_games/tanuki-sunset/tanuki_sunset.wasm.code.unitywebView on unpkg

•path = local_games/tanuki-sunset/tanuki_sunset.wasm.code.unityweb kind = compressed_blob sizeBytes = 5302672 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

local_games/tanuki-sunset/tanuki_sunset.wasm.code.unitywebView on unpkg

local_games/cookie-clicker/main.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

local_games/cookie-clicker/main.jsView on unpkg

local_games/sandspiel/728.9f96bdc52b5e36a5d122.jsView file

2patternName = generic_password severity = medium line = 2 matchedText = (self.we...}]);

Medium

Secret Pattern

Hardcoded password in local_games/sandspiel/728.9f96bdc52b5e36a5d122.js

local_games/sandspiel/728.9f96bdc52b5e36a5d122.jsView on unpkg · L2

local_games/little-alchemy-2/js/app-legacy.4d0cf951.jsView file

Lines 1-2javascript

1(function(t){function e(e){for(var i,n,o=e[0],c=e[1],l=e[2],h=

local_games/little-alchemy-2/js/app.64a51313.jsView file

Lines 1-2javascript

1(function(t){function e(e){for(var i,n,o=e[0],c=e[1],l=e[2],h=