{ "ml": { "v": "7", "id": 1721, "lvl": -1, "conf": 0, "prob": 0.000011275212273176294, "type": "javascript", "version": "v18.18", "analyzed_at": "2026-09-22T22:59:24Z" }, "path": "package/build/library.bundled.js.map##unicode-escape@8896640", "raw": { "rev": "a041b", "files": [ { "id": 2005, "mol": "K(Li)O₆(As₅C₃CaCoDyS₂)H₇(Cm₁₂Cr₃Db₂₂F₃Os₂Po₅U)Md₃(Bk₂Pa₂)", "pid": 12, "rel": "fetched", "sha": "092f1766e03df608524e4fc883d44957061caeff1cb93dc1f19f014eaccc563c", "via": "https://registry.npmjs.org/truffle/-/truffle-5.1.39.tgz", "path": "pkg:npm/truffle@5.1.39!!package/build/library.bundled.js.map!!package/build/library.bundled.js.map##unicode-escape@8896640", "refs": [ { "to": "./glob.js", "off": 66262, "kind": "local" }, { "to": "./common.js", "off": 66436, "kind": "local" }, { "to": "../", "off": 69093, "kind": "local" }, { "to": "./_Symbol", "off": 81861, "kind": "local" }, { "to": "./pubsuffix-psl", "off": 87838, "kind": "local" }, { "to": "./store", "off": 87879, "kind": "local" }, { "to": "./memstore", "off": 87930, "kind": "local" }, { "to": "./pathMatch", "off": 87988, "kind": "local" }, { "to": "./version", "off": 88037, "kind": "local" }, { "to": "./permuteDomain", "off": 128501, "kind": "local" }, { "to": "./_is-object", "off": 143763, "kind": "local" }, { "to": "./_global", "off": 143804, "kind": "local" }, { "to": "./_cof", "off": 144127, "kind": "local" }, { "to": "./_to-integer", "off": 144381, "kind": "local" }, { "to": "./_shared", "off": 144752, "kind": "local" }, { "to": "./_uid", "off": 144793, "kind": "local" }, { "to": "./es6.array.iterator", "off": 145103, "kind": "local" }, { "to": "./_hide", "off": 145184, "kind": "local" }, { "to": "./_iterators", "off": 145221, "kind": "local" }, { "to": "./_wks", "off": 145267, "kind": "local" }, { "to": "./_library", "off": 146123, "kind": "local" }, { "to": "./_export", "off": 146161, "kind": "local" }, { "to": "./_redefine", "off": 146199, "kind": "local" }, { "to": "./_iter-create", "off": 146316, "kind": "local" }, { "to": "./_set-to-string-tag", "off": 146365, "kind": "local" }, { "to": "./_object-gpo", "off": 146420, "kind": "local" }, { "to": "./_string-at", "off": 148970, "kind": "local" }, { "to": "./constants", "off": 210890, "kind": "local" }, { "to": "../../../errors", "off": 219380, "kind": "local" }, { "to": "../common/html", "off": 222452, "kind": "local" }, { "to": "./html", "off": 227974, "kind": "local" }, { "to": "./_defineProperty", "off": 233811, "kind": "local" }, { "to": "./_baseRest", "off": 234458, "kind": "local" }, { "to": "./_isIterateeCall", "off": 234504, "kind": "local" }, { "to": "./identity", "off": 235540, "kind": "local" }, { "to": "./_overRest", "off": 235579, "kind": "local" }, { "to": "./_setToString", "off": 235622, "kind": "local" }, { "to": "./_baseSetToString", "off": 236864, "kind": "local" }, { "to": "./_shortOut", "off": 236911, "kind": "local" }, { "to": "./eq", "off": 237260, "kind": "local" }, { "to": "./isArrayLike", "off": 237296, "kind": "local" }, { "to": "./_isIndex", "off": 237337, "kind": "local" }, { "to": "./isObject", "off": 237376, "kind": "local" }, { "to": "./_baseTimes", "off": 238177, "kind": "local" }, { "to": "./isArguments", "off": 238221, "kind": "local" }, { "to": "./isArray", "off": 238262, "kind": "local" }, { "to": "./isBuffer", "off": 238300, "kind": "local" }, { "to": "./isTypedArray", "off": 238381, "kind": "local" }, { "to": "./_freeGlobal", "off": 240357, "kind": "local" }, { "to": "./_createWrap", "off": 241825, "kind": "local" }, { "to": "./_getHolder", "off": 241868, "kind": "local" }, { "to": "./_replaceHolders", "off": 241915, "kind": "local" }, { "to": "./_baseCreate", "off": 243541, "kind": "local" }, { "to": "./_baseLodash", "off": 243585, "kind": "local" }, { "to": "./options", "off": 245478, "kind": "local" }, { "to": "./parse", "off": 245610, "kind": "local" }, { "to": "./cheerio", "off": 245836, "kind": "local" }, { "to": "./_getNative", "off": 262285, "kind": "local" }, { "to": "./_root", "off": 262322, "kind": "local" }, { "to": "./_mapCacheClear", "off": 262494, "kind": "local" }, { "to": "./_mapCacheDelete", "off": 262545, "kind": "local" }, { "to": "./_mapCacheGet", "off": 262594, "kind": "local" }, { "to": "./_mapCacheHas", "off": 262640, "kind": "local" }, { "to": "./_mapCacheSet", "off": 262686, "kind": "local" }, { "to": "./_DataView", "off": 264053, "kind": "local" }, { "to": "./_Map", "off": 264088, "kind": "local" }, { "to": "./_Promise", "off": 264122, "kind": "local" }, { "to": "./_Set", "off": 264156, "kind": "local" }, { "to": "./_WeakMap", "off": 264190, "kind": "local" }, { "to": "./_baseGetTag", "off": 264231, "kind": "local" }, { "to": "./_toSource", "off": 264273, "kind": "local" }, { "to": "./_castPath", "off": 265952, "kind": "local" }, { "to": "./_toKey", "off": 265989, "kind": "local" }, { "to": "./isSymbol", "off": 266632, "kind": "local" }, { "to": "./lib/websocket", "off": 269094, "kind": "local" }, { "to": "./internal/breakLoop", "off": 285523, "kind": "local" }, { "to": "./eachOfLimit", "off": 285635, "kind": "local" }, { "to": "./internal/doLimit", "off": 285740, "kind": "local" }, { "to": "./internal/once", "off": 285925, "kind": "local" }, { "to": "./internal/onlyOnce", "off": 286019, "kind": "local" }, { "to": "./internal/wrapAsync", "off": 286126, "kind": "local" }, { "to": "./implementation", "off": 291996, "kind": "local" }, { "to": "./_a-function", "off": 300415, "kind": "local" }, { "to": "./helpers", "off": 308429, "kind": "local" } ], "risk": 40, "size": 329494, "type": "javascript", "depth": 4, "facts": { "imp": [ [ "", "b.hasOwnProperty" ], [ "", "extendStatics" ], [ "", "Object.create" ], [ "", "__" ], [ "", "Object.hasOwnProperty.call" ] ], "mbr": [ "Object.create", "Object.defineProperty", "Object.hasOwnProperty", "Object.hasOwnProperty.call", "Object.setPrototypeOf", "__.prototype", "b.hasOwnProperty", "b.prototype", "d.__proto__", "d.prototype", "mod.__esModule", "times.Why" ], "tgt": [ "Object.create", "Object.hasOwnProperty.call", "__", "b.hasOwnProperty", "extendStatics" ], "funcs": [ [ "anonymous", 15312 ], [ "anonymous", 15424 ], [ "anonymous", 15474 ], [ "anonymous", 15562 ], [ "__", 15619 ], [ "anonymous", 15820 ] ], "metrics": { "ast": { "op.eq": 2, "op.ne": 1, "op.lor": 4, "op.land": 4, "max_depth": 19, "call_count": 6, "node_count": 23143, "member_count": 12, "op_density.eq": 0, "op_density.ne": 0, "op_density.lor": 0, "sequence_count": 1, "op_density.land": 0, "member_depth_max": 3 }, "file": { "size": 329494, "entropy": 4.83 }, "text": { "lines": 1, "top_char": 110, "tab_count": 1, "max_ws_run": 28, "digit_ratio": 0.01, "space_count": 70603, "char_entropy": 4.83, "unique_chars": 104, "top_char_null": 0, "escape_density": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 89, "top_char_ratio": 0.07, "avg_line_length": 329494, "lines_over_1000": 1, "max_line_length": 329494, "non_ascii_ratio": 0, "null_byte_count": 1, "last_line_length": 329494, "long_token_count": 9, "whitespace_ratio": 0.21, "identifier_density": 90, "octal_escape_count": 14, "non_printable_ratio": 0, "normalized_string_count": 89, "repeated_char_sequences": 1311, "suspicious_string_ratio": 1.73, "suspicious_identifier_ratio": 0.12 }, "binds": { "count": 8 }, "binary": { "peak_region_bytes": 16384, "peak_region_entropy": 5.55 }, "source": { "function_count": 1 }, "strings": { "sql": 30, "bytes": 313806, "count": 89, "shell": 38, "very_long": 47, "avg_length": 3525.91, "max_length": 41208, "path_count": 14, "avg_entropy": 4.76, "email_count": 7, "entropy_stddev": 0.23, "high_entropy_count": 13, "embedded_code_candidates": 86 }, "functions": { "count": 1, "nested": 2, "density": 600, "anonymous": 5, "avg_params": 1.17, "code_ratio": 6, "max_params": 2, "one_liners": 6, "avg_name_length": 2, "no_params_count": 2, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 0.83, "max_nesting_depth": 2, "single_char_params": 6, "avg_param_name_length": 1.29 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 90, "unique": 41, "avg_length": 6.17, "max_length": 16, "min_length": 1, "avg_entropy": 1.95, "reuse_ratio": 0.46, "length_stddev": 4.2, "sequential_names": 5, "single_char_count": 5, "single_char_ratio": 0.12, "high_entropy_count": 2, "high_entropy_ratio": 0.05, "all_lowercase_ratio": 0.71, "all_uppercase_ratio": 0.02, "double_underscore_count": 1, "underscore_prefix_count": 5 } } }, "traits": [ { "id": "metadata/build/bundler/asset::has-sourcemap", "conf": 0.9, "crit": 2, "desc": "Code has source map reference", "spans": [ [ 161887, 0 ] ] }, { "id": "metadata/build/bundler/wrapper::js-tsc-reexport-getter", "conf": 0.97, "crit": 2, "desc": "Transpiled re-export getter (tsc/babel barrel)", "spans": [ [ 160781, 0 ] ] }, { "id": "metadata/build/bundler/wrapper::js-tslib-reexport-helper", "conf": 0.97, "crit": 2, "desc": "Calls a tslib/TypeScript re-export helper", "spans": [ [ 160616, 0 ] ] }, { "id": "metadata/build/bundler/wrapper::js-umd-wrapper", "conf": 0.9, "crit": 2, "desc": "Universal Module Definition (UMD) wrapper", "spans": [ [ 240435, 0 ] ] }, { "id": "metadata/build/bundler/wrapper::js-umd-wrapper-amd", "conf": 0.9, "crit": 2, "desc": "Contains a UMD wrapper's AMD branch", "spans": [ [ 327391, 0 ] ] }, { "id": "metadata/build/bundler/wrapper::umd-pattern", "conf": 0.85, "crit": 3, "desc": "Universal Module Definition pattern", "spans": [ [ 327296, 59 ] ] }, { "id": "metadata/build/minifier::js-min-or-map-basename", "conf": 0.9, "crit": 3, "desc": "JavaScript minified or map basename" }, { "id": "metadata/build/minifier::void-zero", "conf": 0.6, "crit": 2, "desc": "Uses minifier-style void 0 for undefined", "spans": [ [ 160595, 0 ] ] }, { "id": "metadata/file/encoded::embedded-code-candidates-6", "conf": 0.8, "crit": 3, "desc": "Source has 6+ code-like string candidates" }, { "id": "metadata/file/string/credential::uppercase-password-identifier", "conf": 0.45, "crit": 3, "desc": "Uppercase identifier contains PASSWORD or PASS", "spans": [ [ 7607, 16 ] ] }, { "id": "metadata/file/string/identity::android-data-app-path", "conf": 0.9, "crit": 3, "desc": "Android application data path", "spans": [ [ 228091, 6 ] ] }, { "id": "metadata/lang/javascript-features::es6-class", "conf": 0.9, "crit": 2, "desc": "ES6 class declaration", "spans": [ [ 277810, 0 ] ] }, { "id": "metadata/lang/javascript-features::use-strict-directive", "conf": 0.6, "crit": 2, "desc": "Contains a JavaScript use strict directive", "spans": [ [ 64816, 0 ] ] }, { "id": "metadata/lang/locale::language-label-code-de", "conf": 0.97, "crit": 2, "desc": "German UI language code", "spans": [ [ 79592, 0 ] ] }, { "id": "metadata/lang/locale::language-label-code-en", "conf": 0.97, "crit": 2, "desc": "English UI language code", "spans": [ [ 228226, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 1673, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 1729, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 5994, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 13120, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 15492, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 4939, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 10106, 0 ] ] }, { "id": "metadata/package/completeness::has-buffer-encoding-1", "conf": 1.0, "crit": 3, "desc": "Code uses Buffer (utf8/ascii)", "spans": [ [ 273047, 22 ] ] }, { "id": "metadata/package/completeness::has-config-arg", "conf": 0.75, "crit": 3, "desc": "func parameter likely used as config/options", "spans": [ [ 80171, 18 ], [ 80179, 128 ], [ 157760, 27 ], [ 246054, 128 ], [ 247380, 22 ], [ 281801, 26 ], [ 281841, 83 ], [ 282237, 17 ] ] }, { "id": "metadata/package/completeness::has-config-assignment", "conf": 0.75, "crit": 3, "desc": "Code uses assigned configuration objects", "spans": [ [ 99269, 11 ], [ 219985, 8 ] ] }, { "id": "metadata/package/completeness::has-logging-usage-1", "conf": 1.0, "crit": 2, "desc": "Code uses logging APIs (info/warn)", "spans": [ [ 130008, 0 ] ] }, { "id": "metadata/package/config::excludes-identifier", "conf": 0.7, "crit": 3, "desc": "Uses an excludes identifier", "spans": [ [ 88270, 8 ] ] }, { "id": "micro-behaviors/communications/dns/lookup/name-service::ens-compatible-domain-literal", "atk": "T1102", "mbc": "C0011", "conf": 0.9, "crit": 3, "desc": "ENS-compatible domain literal", "spans": [ [ 275526, 8 ] ] }, { "id": "micro-behaviors/communications/http/cookies::domain-attribute", "conf": 0.5, "crit": 3, "desc": "Cookie Domain attribute", "spans": [ [ 111949, 8 ] ] }, { "id": "micro-behaviors/communications/http/request/beacon::embedded-node-recurring-timer", "atk": "T1071.001", "conf": 0.94, "crit": 3, "desc": "Embeds recurring Node timer callback", "spans": [ [ 8591, 25 ], [ 8886, 24 ] ] }, { "id": "micro-behaviors/communications/http/url/build::network-destination-function-binding", "mbc": "C0002", "conf": 0.94, "crit": 3, "desc": "Network destination assigned from call", "spans": [ [ 87750, 19 ], [ 106487, 16 ], [ 115304, 23 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 16135, 19 ] ] }, { "id": "micro-behaviors/communications/http/url/rpc::eth-call-method-field", "conf": 0.9, "crit": 3, "desc": "JSON-RPC eth_call method field", "spans": [ [ 326909, 18 ] ] }, { "id": "micro-behaviors/communications/http/url/rpc::eth-call-method-literal", "conf": 0.94, "crit": 3, "desc": "Ethereum eth_call method literal", "spans": [ [ 276259, 8 ] ] }, { "id": "micro-behaviors/communications/http/url/rpc::ethereum-call-result-processing", "conf": 0.9, "crit": 3, "desc": "Processes an Ethereum eth_call result", "spans": [ [ 274529, 65 ], [ 275967, 67 ], [ 276259, 183 ], [ 325769, 227 ], [ 326918, 181 ] ] }, { "id": "micro-behaviors/communications/ipc/agent-hook::agent-hook-stdin-read", "conf": 0.9, "crit": 3, "desc": "Reads a JSON event payload from stdin", "spans": [ [ 8203, 13 ], [ 9202, 13 ] ] }, { "id": "micro-behaviors/communications/rpc::jsonrpc-2-protocol-object", "conf": 0.9, "crit": 3, "desc": "JSON-RPC 2.0 protocol object", "spans": [ [ 276224, 14 ], [ 326886, 13 ] ] }, { "id": "micro-behaviors/communications/socket/framing::node-be32-frame-length-read", "mbc": "C0001", "conf": 0.95, "crit": 3, "desc": "Reads BE32 frame length at offset zero", "spans": [ [ 212756, 15 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::digest-method-call", "conf": 0.8, "crit": 3, "desc": "Calls a digest() method", "spans": [ [ 273245, 8 ] ] }, { "id": "micro-behaviors/crypto/hash/digest::javascript-sha256-operation", "mbc": "C0029", "conf": 0.88, "crit": 3, "desc": "Performs JavaScript SHA-256 operation", "spans": [ [ 273646, 19 ] ] }, { "id": "micro-behaviors/crypto/library/blockchain/client::ethereum-jsonrpc-method", "conf": 0.9, "crit": 3, "desc": "Ethereum JSON-RPC method field", "spans": [ [ 326909, 17 ] ] }, { "id": "micro-behaviors/crypto/library/blockchain/transaction::send-transaction-call", "conf": 0.94, "crit": 3, "desc": "Blockchain transaction send call", "spans": [ [ 317882, 17 ] ] }, { "id": "micro-behaviors/crypto/library/blockchain/transaction::unlimited-approval-amount", "conf": 0.92, "crit": 3, "desc": "Uses an unlimited token-approval amount", "spans": [ [ 29072, 10 ] ] }, { "id": "micro-behaviors/crypto/library/provider::require-crypto", "conf": 0.6, "crit": 2, "desc": "require('crypto') call", "spans": [ [ 270113, 0 ] ] }, { "id": "micro-behaviors/data/buffer/alloc::buffer-from-call", "conf": 0.4, "crit": 3, "desc": "Calls Buffer.from at least three times", "spans": [ [ 272383, 128 ], [ 273035, 35 ] ] }, { "id": "micro-behaviors/data/buffer/alloc::uint8array-constructor", "conf": 0.9, "crit": 2, "desc": "Constructs a Uint8Array buffer", "spans": [ [ 32606, 0 ] ] }, { "id": "micro-behaviors/data/buffer/integer-codec::source-right-shift-16-bits", "conf": 0.9, "crit": 2, "desc": "Source right-shifts by 16 bits", "spans": [ [ 212997, 0 ] ] }, { "id": "micro-behaviors/data/buffer/integer-codec::source-right-shift-8-bits", "conf": 0.9, "crit": 2, "desc": "Source right-shifts by 8 bits", "spans": [ [ 212997, 0 ] ] }, { "id": "micro-behaviors/data/buffer/integer-codec::uint16-be-buffer-write", "conf": 0.85, "crit": 3, "desc": "Writes 16-bit big-endian buffer value", "spans": [ [ 214311, 15 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 696, 21 ], [ 17211, 15 ], [ 22842, 32 ], [ 23425, 20 ], [ 23813, 20 ], [ 24860, 60 ], [ 61986, 22 ], [ 62355, 17 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::object-type-dispatch-switch", "conf": 0.93, "crit": 3, "desc": "Switch dispatches on an object type field", "spans": [ [ 174064, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/loop::js-length-loop-compound-add", "conf": 0.85, "crit": 3, "desc": "Length-bounded loop uses compound addition", "spans": [ [ 81344, 47 ], [ 85244, 46 ], [ 85801, 46 ] ] }, { "id": "micro-behaviors/data/control-flow/loop::js-object-key-in-loop", "conf": 0.9, "crit": 3, "desc": "JavaScript iterates enumerable object keys", "spans": [ [ 15492, 16 ], [ 15925, 18 ], [ 67862, 23 ], [ 83703, 22 ], [ 161233, 16 ], [ 196409, 46 ], [ 200714, 43 ], [ 239271, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::commonjs-module-reexport", "conf": 0.92, "crit": 3, "desc": "CommonJS module re-exports required package", "spans": [ [ 219150, 32 ], [ 269068, 43 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-close", "conf": 0.86, "crit": 3, "desc": "Calls a parenthesized function expression", "spans": [ [ 15763, 4 ] ] }, { "id": "micro-behaviors/data/decode/url::js-unescape-call-text", "atk": "T1140", "conf": 0.9, "crit": 3, "desc": "Calls JavaScript unescape in source text", "spans": [ [ 299381, 10 ] ] }, { "id": "micro-behaviors/data/embedded/script::embedded-php-command-exec-call", "conf": 0.96, "crit": 3, "desc": "Embedded PHP command execution call", "spans": [ [ 54113, 5 ] ] }, { "id": "micro-behaviors/data/encode/charcode::charcode-at", "conf": 0.7, "crit": 3, "desc": "charCodeAt() method call", "spans": [ [ 59861, 12 ] ] }, { "id": "micro-behaviors/data/manipulation::log-redaction-option", "conf": 0.85, "crit": 3, "desc": "Log redaction option or call", "spans": [ [ 29083, 6 ] ] }, { "id": "micro-behaviors/data/serialize/binary::buffer-call-numeric-offset-pair", "conf": 0.85, "crit": 1, "desc": "Numeric offset pair in call parentheses", "spans": [ [ 26440, 0 ] ] }, { "id": "micro-behaviors/data/serialize/binary::buffer-slice-call-name", "conf": 0.9, "crit": 1, "desc": "slice method call name", "spans": [ [ 3121, 0 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::result-assignment-key", "conf": 0.4, "crit": 1, "desc": "Result field or assignment key", "spans": [ [ 15890, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::result-field-key", "conf": 0.9, "crit": 1, "desc": "JSON-like object result field", "spans": [ [ 178415, 0 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::user-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like user identity field", "spans": [ [ 242908, 7 ] ] }, { "id": "micro-behaviors/data/source/arithmetic::lsb-bit-mask-source", "conf": 1.0, "crit": 3, "desc": "Source contains low-bit mask syntax", "spans": [ [ 146804, 3 ] ] }, { "id": "micro-behaviors/data/source/property/assignment::request-like-property-assignment", "conf": 0.8, "crit": 3, "desc": "Request-like .to property assignment", "spans": [ [ 315691, 98 ], [ 317229, 53 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-call-cluster", "conf": 0.86, "crit": 3, "desc": "Dense computed-property call cluster (3+)", "spans": [ [ 81451, 75 ], [ 149015, 22 ], [ 261787, 14 ], [ 277059, 21 ] ] }, { "id": "micro-behaviors/data/source/property/read::result-dot-member-read", "conf": 0.9, "crit": 3, "desc": "Reads result through dot or arrow access", "spans": [ [ 275048, 10 ] ] }, { "id": "micro-behaviors/data/source/prototype::return-this-body", "conf": 0.7, "crit": 3, "desc": "Function body returns this", "spans": [ [ 146670, 26 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::indexed-array-element-copy", "conf": 0.8, "crit": 2, "desc": "Copies one indexed array element to another", "spans": [ [ 15534, 0 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 25977, 10 ], [ 60244, 10 ], [ 60284, 10 ], [ 60365, 10 ], [ 63932, 10 ], [ 68709, 10 ], [ 121570, 11 ], [ 149703, 10 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call", "conf": 0.72, "crit": 3, "desc": "Sorts a JavaScript array", "spans": [ [ 120945, 6 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read", "conf": 0.8, "crit": 2, "desc": "Reads an array element into a variable", "spans": [ [ 272, 0 ] ] }, { "id": "micro-behaviors/data/source/syntax/assignment::indexed-call-assignment", "conf": 0.85, "crit": 3, "desc": "Indexed call assignment target", "spans": [ [ 232376, 22 ], [ 254252, 22 ] ] }, { "id": "micro-behaviors/data/source/syntax/assignment::nested-call-assignment", "conf": 0.85, "crit": 3, "desc": "Nested function call assignment target", "spans": [ [ 256308, 36 ] ] }, { "id": "micro-behaviors/data/source/unsafe::urlpattern-nested-capture-literal", "conf": 0.9, "crit": 3, "desc": "URLPattern named group has nested capture", "spans": [ [ 259344, 58 ] ] }, { "id": "micro-behaviors/data/string/conversion::js-fromcharcode-alias", "conf": 0.9, "crit": 3, "desc": "Aliases String.fromCharCode conversion function", "spans": [ [ 63691, 23 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 11972, 8 ] ] }, { "id": "micro-behaviors/data/string/search::compiled-js-pattern-set", "conf": 0.9, "crit": 3, "desc": "Compiles a set of JavaScript regex patterns", "spans": [ [ 16553, 11 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::node-dirent-isdirectory", "conf": 0.72, "crit": 2, "desc": "Checks whether Node.js entries are directories", "spans": [ [ 2660, 0 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::fs-readdir", "conf": 0.6, "crit": 3, "desc": "Calls Node.js readdir at least twice", "spans": [ [ 73510, 15 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::node-readdir-sync-call", "conf": 0.84, "crit": 3, "desc": "Calls Node.js synchronous directory enumeration", "spans": [ [ 73510, 15 ] ] }, { "id": "micro-behaviors/fs/path/self::cwd-reference", "conf": 0.84, "crit": 3, "desc": "References the Node.js current working directory", "spans": [ [ 283547, 13 ] ] }, { "id": "micro-behaviors/fs/read/file/target::read-package-relative-file", "conf": 0.88, "crit": 2, "desc": "Reads a package-relative file", "spans": [ [ 288057, 0 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-require-in-try", "conf": 0.9, "crit": 3, "desc": "CommonJS require inside a try block", "spans": [ [ 88068, 28 ], [ 240977, 120 ], [ 269777, 31 ], [ 306322, 51 ] ] }, { "id": "micro-behaviors/os/sysinfo/machine-id::createhash-call", "conf": 0.55, "crit": 3, "desc": "JavaScript references crypto.createHash", "spans": [ [ 272383, 128 ], [ 272509, 40 ], [ 273635, 31 ], [ 273959, 35 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::js-platform-win32-check", "conf": 0.6, "crit": 2, "desc": "Checks whether Node.js runs on Windows", "spans": [ [ 51745, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::process-platform-content", "conf": 0.7, "crit": 2, "desc": "References the Node.js process.platform value", "spans": [ [ 51745, 0 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-keyword-literal", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "child_process module name literal", "spans": [ [ 7163, 13 ] ] }, { "id": "micro-behaviors/process/fd/stdio::js-stdin-write", "conf": 0.8, "crit": 3, "desc": "Writes to Node process stdin", "spans": [ [ 8211, 11 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stderr-string", "conf": 0.3, "crit": 2, "desc": "References the stderr stream name", "spans": [ [ 304, 0 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stdin-string", "conf": 0.3, "crit": 2, "desc": "References standard input name (stdin)", "spans": [ [ 304, 0 ] ] }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.3, "crit": 2, "desc": "References the stdout stream name", "spans": [ [ 304, 0 ] ] }, { "id": "micro-behaviors/process/io/stream::node-stream-data-event", "conf": 0.88, "crit": 3, "desc": "Registers a Node stream data handler", "spans": [ [ 8458, 16 ], [ 8518, 16 ] ] }, { "id": "micro-behaviors/process/io/stream::node-stream-end-event", "conf": 0.88, "crit": 3, "desc": "Registers a Node stream end handler", "spans": [ [ 221612, 15 ] ] }, { "id": "micro-behaviors/process/io/stream::process-stdout-data-listener", "conf": 0.9, "crit": 3, "desc": "Registers a process stdout data listener", "spans": [ [ 8458, 16 ] ] }, { "id": "micro-behaviors/time/query::js-triple-date-now", "conf": 0.4, "crit": 3, "desc": "3+ Date.now() calls", "spans": [ [ 108499, 9 ] ] }, { "id": "micro-behaviors/time/query::js-triple-new-date", "conf": 0.4, "crit": 3, "desc": "3+ new Date() calls", "spans": [ [ 94930, 9 ] ] }, { "id": "micro-behaviors/ui/window/dom/create::browser-create-method-reference", "conf": 0.85, "crit": 3, "desc": "References a DOM element creation method", "spans": [ [ 143846, 13 ] ] }, { "id": "micro-behaviors/ui/window/dom/create::browser-insert-mutate-method-reference", "conf": 0.85, "crit": 3, "desc": "References a DOM insertion or mutation method", "spans": [ [ 223396, 11 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/command-network-surface::js-many-shell-command-strings", "atk": "T1027", "mbc": "B0032", "conf": 0.86, "crit": 3, "desc": "Many shell command strings in JavaScript" }, { "id": "objectives/anti-static/obfuscation/encoding/hex::hex-byte-token-ff", "mbc": "B0032", "conf": 0.5, "crit": 3, "desc": "0xff hex byte token", "spans": [ [ 213048, 4 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/browser::html-createelement-object", "atk": "T1027,T1059.007", "conf": 0.9, "crit": 3, "desc": "Creates a scripted DOM object", "spans": [ [ 143837, 65 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::plain-push-shift-self-rotation", "conf": 0.82, "crit": 3, "desc": "Plain array self-rotation with push and shift", "spans": [ [ 186122, 49 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-string-split", "conf": 0.6, "crit": 3, "desc": "Split to empty-delimiter char array", "spans": [ [ 144303, 10 ] ] }, { "id": "objectives/collection/keylog/capture::input-textarea-field-selector", "atk": "T1056.001", "mbc": "E1056", "conf": 0.9, "crit": 3, "desc": "Selector targeting input and textarea", "spans": [ [ 260428, 15 ] ] }, { "id": "objectives/command-and-control/channel/deaddrop/blockchain::evm-eth-call-method", "atk": "T1102", "conf": 0.95, "crit": 3, "desc": "EVM eth_call method field", "spans": [ [ 276249, 20 ], [ 326909, 18 ] ] }, { "id": "objectives/command-and-control/dropper/execution/loader::random-named-sidecar-require", "atk": "T1027,T1059.007", "mbc": "B0023", "conf": 0.85, "crit": 3, "desc": "Requires a random-named sidecar module", "spans": [ [ 291987, 27 ] ] }, { "id": "objectives/command-and-control/infrastructure/tracking::domain-field", "conf": 0.7, "crit": 3, "desc": "Domain tracking field", "spans": [ [ 102087, 9 ] ] }, { "id": "objectives/credential-access/phishing/mfa-relay::browser-command-index", "atk": "T1056.002,T1111,T1041,T1566.002", "mbc": "B0030", "conf": 0.94, "crit": 3, "desc": "Indexes a browser command variable", "spans": [ [ 2118, 16 ] ] }, { "id": "objectives/credential-access/theft/keywords::password-upper", "conf": 0.45, "crit": 3, "desc": "PASSWORD credential label", "spans": [ [ 7607, 16 ], [ 7691, 20 ] ] }, { "id": "objectives/credential-access/wallet/keywords::private-key-word", "conf": 0.5, "crit": 3, "desc": "privateKey credential field reference", "spans": [ [ 304, 128 ], [ 7513, 45 ], [ 7826, 128 ] ] }, { "id": "objectives/discovery/system/profile::js-host-profile-domain-field", "conf": 0.9, "crit": 3, "desc": "JavaScript host domain field", "spans": [ [ 102087, 9 ] ] }, { "id": "objectives/supply-chain/hidden-payload/extensions/session::management-id-comparison--rx-8", "conf": 0.9, "crit": 3, "desc": ".indexOf() call against extension/id ID", "spans": [ [ 232184, 11 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/hook-file::install-hook-unauthorized-code-package-reference", "atk": "T1195.002", "conf": 0.86, "crit": 3, "desc": "Banner names package near unauthorized code", "spans": [ [ 61432, 11 ] ] }, { "id": "well-known/lib/stdlib/lodash::lodash-internal-module-require-a", "conf": 0.86, "crit": 3, "desc": "Lodash internal module require", "spans": [ [ 234449, 17 ], [ 236855, 17 ], [ 238168, 17 ], [ 241816, 19 ], [ 243532, 17 ], [ 243576, 17 ], [ 264222, 17 ] ] }, { "id": "well-known/lib/stdlib/lodash::lodash-internal-module-require-b", "conf": 0.86, "crit": 3, "desc": "Lodash internal module require", "spans": [ [ 240348, 17 ] ] }, { "id": "well-known/lib/stdlib/lodash::lodash-module-memberof", "conf": 0.9, "crit": 3, "desc": "Lodash modular source member marker", "spans": [ [ 242485, 11 ] ] }, { "id": "metadata/build/minifier::js-large-minified-bundle", "conf": 0.92, "crit": 2, "desc": "Large minified JavaScript bundle", "spans": [ [ 0, 329494 ] ] }, { "id": "metadata/build/minifier::js-medium-minified-line", "conf": 0.9, "crit": 2, "desc": "JavaScript contains a long minified line", "spans": [ [ 0, 329494 ] ] }, { "id": "metadata/lang/javascript-features::arrow-function", "conf": 0.9, "crit": 2, "desc": "ES6 arrow function syntax", "spans": [ [ 49259, 0 ] ] }, { "id": "metadata/lang/javascript-features::async-await", "conf": 0.9, "crit": 2, "desc": "ES2017 async/await syntax", "spans": [ [ 129587, 0 ] ] }, { "id": "metadata/lang/javascript-features::const-let", "conf": 0.9, "crit": 2, "desc": "ES6 const/let declarations", "spans": [ [ 101933, 0 ] ] }, { "id": "metadata/lang/javascript-features::destructuring", "conf": 0.9, "crit": 2, "desc": "ES6 destructuring assignment", "spans": [ [ 129231, 0 ] ] }, { "id": "metadata/lang/javascript-features::spread-operator", "conf": 0.9, "crit": 2, "desc": "ES6 spread operator (in array/object context)", "spans": [ [ 132921, 0 ] ] }, { "id": "metadata/lang/javascript-features::template-literal", "conf": 0.9, "crit": 2, "desc": "ES6 template literal syntax", "spans": [ [ 137381, 0 ] ] }, { "id": "metadata/package/error-handling::catch-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a catch error handler", "spans": [ [ 838, 0 ] ] }, { "id": "metadata/package/error-handling::finally-keyword", "conf": 0.5, "crit": 2, "desc": "Contains a finally cleanup handler", "spans": [ [ 79500, 0 ] ] }, { "id": "metadata/package/error-handling::try-block-open", "conf": 0.5, "crit": 2, "desc": "Contains the opening of a try block", "spans": [ [ 304, 0 ] ] }, { "id": "micro-behaviors/communications/http/cookies::cookie-field-in-request-object", "conf": 0.9, "crit": 3, "desc": "Places cookie data in request object", "spans": [ [ 88147, 11 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-insecure-remote-http-url", "conf": 0.9, "crit": 3, "desc": "Contains a hardcoded insecure HTTP URL", "spans": [ [ 82111, 29 ], [ 214593, 21 ], [ 228073, 18 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "spans": [ [ 16135, 18 ], [ 82111, 29 ], [ 137639, 28 ], [ 214593, 21 ], [ 228073, 18 ], [ 258903, 28 ] ] }, { "id": "micro-behaviors/communications/http/url/path::loopback-http-url-reference", "conf": 0.9, "crit": 3, "desc": "References a loopback HTTP URL", "spans": [ [ 10463, 16 ] ] }, { "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal", "atk": "T1071.001", "mbc": "C0002", "conf": 0.9, "crit": 3, "desc": "Code embeds cleartext HTTP URL literal", "spans": [ [ 82111, 43 ], [ 214593, 45 ], [ 228073, 60 ] ] }, { "id": "micro-behaviors/communications/http/websocket::websocket-lower", "atk": "T1071.001", "mbc": "C0002", "conf": 0.5, "crit": 3, "desc": "References the lowercase websocket keyword", "spans": [ [ 269100, 9 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 82770, 12 ] ] }, { "id": "micro-behaviors/data/parse/vocabulary::password-key-value-pair", "conf": 0.8, "crit": 3, "desc": "password/passwd key with inline value", "spans": [ [ 6694, 17 ], [ 7400, 30 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-readdir-walk-find", "conf": 0.85, "crit": 2, "desc": "Traverses directories using common APIs", "spans": [ [ 73510, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/full::readfilesync-call", "conf": 0.9, "crit": 3, "desc": "Calls readFileSync", "spans": [ [ 278480, 21 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::node-platform-win32-branch", "conf": 0.7, "crit": 2, "desc": "Branches on Windows platform value", "spans": [ [ 51753, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::node-platform-method-call", "conf": 0.75, "crit": 3, "desc": "Calls a Node OS platform method", "spans": [ [ 6240, 13 ] ] }, { "id": "micro-behaviors/process/create/variable-spawn::spawn-variable-program", "conf": 0.82, "crit": 3, "desc": "Node spawns a variable program path", "spans": [ [ 7851, 24 ] ] }, { "id": "micro-behaviors/process/terminate/kill::js-sigkill-process", "conf": 0.86, "crit": 3, "desc": "Node sends SIGKILL to process", "spans": [ [ 9339, 112 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/loader::nested-decoder-function-build", "atk": "T1027", "mbc": "B0032", "conf": 0.86, "crit": 3, "desc": "Nested decoder builds function", "spans": [ [ 243259, 55 ] ] }, { "id": "objectives/anti-static/obfuscation/syntax::js-prototype-extension", "conf": 0.8, "crit": 3, "desc": "String.prototype extension", "spans": [ [ 37744, 34 ], [ 38131, 34 ] ] }, { "id": "metadata/build/bundler/asset::js-any-bundle-output", "conf": 0.95, "crit": 2, "desc": "Contains bundled or minified JavaScript", "uses": [ 3, 4, 118, 119 ], "spans": [ [ 0, 329494 ], [ 327391, 0 ] ] }, { "id": "metadata/lang/locale::language-label-table-codes-a", "conf": 0.9, "crit": 2, "desc": "Common UI language-code pair", "uses": [ 14 ], "spans": [ [ 228226, 0 ] ] }, { "id": "metadata/lang/locale::language-label-table-codes-b", "conf": 0.9, "crit": 2, "desc": "European UI language-code pair", "uses": [ 13 ], "spans": [ [ 79592, 0 ] ] }, { "id": "metadata/package/completeness::has-logging-usage", "conf": 1.0, "crit": 2, "desc": "Code uses logging APIs", "uses": [ 25 ], "spans": [ [ 130008, 0 ] ] }, { "id": "micro-behaviors/crypto/library/blockchain/client::ethereum-jsonrpc-method-query", "conf": 0.9, "crit": 3, "desc": "Ethereum JSON-RPC method query", "uses": [ 36, 40 ], "spans": [ [ 276224, 14 ], [ 326886, 13 ], [ 326909, 17 ] ] }, { "id": "well-known/lib/stdlib/lodash::modular-source", "conf": 0.9, "crit": 3, "desc": "Lodash modular source file", "uses": [ 115, 116, 117 ], "spans": [ [ 234449, 17 ], [ 236855, 17 ], [ 238168, 17 ], [ 240348, 17 ], [ 241816, 19 ], [ 242485, 11 ], [ 243532, 17 ], [ 243576, 17 ] ] } ] } ] } }