zj-plugin-intelligent@1.2.24: Suspicious npm security report | LPM Firewall

Loading npm security reports…

zj-plugin-intelligent@1.2.24: Suspicious npm security report | LPM Firewall

Source & flagged code

6 flagged · loading source

lib/ZjPluginKnowledgeBase.umd.jsView file

14var i={version:"0.18.5"},a=1200,o=1252,s=[874,932,936,949,950,1250,1251,1252,1253,1254,1255,1256,1257,1258,1e4],c={0:1252,1:65001,2:65001,77:1e4,128:932,129:949,130:1361,134:936,13... L15: /*! sheetjs (C) 2013-present SheetJS -- http://sheetjs.com */function Tu(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Eu(e){return"undefined"!=typeof TextDec... L16: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */function me(){return pe||(pe=1,function(e){var t=function(){if(ue)return he;ue=1,he.byteLen...

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/ZjPluginKnowledgeBase.umd.jsView on unpkg · L14

lib/.gzView file

•path = lib/.gz kind = high_entropy_blob sizeBytes = 1130795 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/.gzView on unpkg

•path = lib/.gz kind = payload_in_excluded_dir sizeBytes = 1130795 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/.gzView on unpkg

•path = lib/.gz kind = compressed_blob sizeBytes = 1130795 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/.gzView on unpkg

lib/ZjPluginIntelligent.umd.min.jsView file

•path = lib/ZjPluginIntelligent.umd.min.js kind = trigger_reachable_excluded_payload sizeBytes = 4134009 triggerReachableSource = lib/ZjPluginIntelligent.umd.min.js excludedPayload = lib/.gz

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

lib/ZjPluginIntelligent.umd.min.jsView on unpkg

lib/ZjPluginIntelligent.common.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/ZjPluginIntelligent.common.jsView on unpkg

Source & flagged code

6 flagged

lib/ZjPluginKnowledgeBase.umd.jsView file

14var i={version:"0.18.5"},a=1200,o=1252,s=[874,932,936,949,950,1250,1251,1252,1253,1254,1255,1256,1257,1258,1e4],c={0:1252,1:65001,2:65001,77:1e4,128:932,129:949,130:1361,134:936,13... L15: /*! sheetjs (C) 2013-present SheetJS -- http://sheetjs.com */function Tu(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function Eu(e){return"undefined"!=typeof TextDec... L16: /*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> */function me(){return pe||(pe=1,function(e){var t=function(){if(ue)return he;ue=1,he.byteLen...

Low

Eval

Package source references a known benign dynamic code generation pattern.

lib/ZjPluginKnowledgeBase.umd.jsView on unpkg · L14

lib/.gzView file

•path = lib/.gz kind = high_entropy_blob sizeBytes = 1130795 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/.gzView on unpkg

•path = lib/.gz kind = payload_in_excluded_dir sizeBytes = 1130795 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/.gzView on unpkg

•path = lib/.gz kind = compressed_blob sizeBytes = 1130795 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/.gzView on unpkg

lib/ZjPluginIntelligent.umd.min.jsView file

•path = lib/ZjPluginIntelligent.umd.min.js kind = trigger_reachable_excluded_payload sizeBytes = 4134009 triggerReachableSource = lib/ZjPluginIntelligent.umd.min.js excludedPayload = lib/.gz

Critical

Trigger Reachable Excluded Directory Payload

A package entrypoint or install-reachable source explicitly loads and activates an executable-looking payload from a test, fixture, or hidden path.

lib/ZjPluginIntelligent.umd.min.jsView on unpkg

lib/ZjPluginIntelligent.common.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 9

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/ZjPluginIntelligent.common.jsView on unpkg