zireku-ls@1.0.5
Zireku License Shield & Environment Security Core
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe shipped entrypoint is substantially obfuscated and includes HTTP/HTTPS imports alongside verification and security exports, leaving runtime behavior unresolved. The manifest shows no install-time hook, and the inspected excerpts do not establish a concrete attack.
Decision evidence
public snapshot- The package entrypoint is a 278 KB single-line obfuscated module that imports Node HTTP and HTTPS modules.
- The entrypoint exports update-check and security-middleware functions, but their behavior is obscured.
- The entrypoint initializes verification state and builds IP source values through obfuscated calls.
- The manifest has no install, preinstall, or postinstall hook; its prepublishOnly hook runs the build script.
- The package describes itself as a license and environment security core, consistent with its verification and middleware exports.
Source & flagged code
6 flaggedSource contains an obfuscated payload loader that reconstructs and executes hidden code.
lib/index.jsView on unpkg · L1The package entrypoint is a 278 KB single-line obfuscated module that imports Node HTTP and HTTPS modules.
lib/index.jsView on unpkg · L1The entrypoint exports update-check and security-middleware functions, but their behavior is obscured.
lib/index.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to zireku-ls@1.0.5.
See all versions of zireku-ls for other recorded verdicts.
- Review the evidence and your use of zireku-ls@1.0.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.