{
  "llm": {
    "conf": 0.91887397,
    "grade": "hostile",
    "model": "Qwen/Qwen3.8-27B",
    "outcome": "suspicious",
    "interpretation": "obfuscator and network dependencies"
  },
  "ml": {
    "v": "7",
    "eng": "2.8.0",
    "lvl": 279,
    "conf": 80,
    "mods": [
      {
        "cls": 0,
        "raw": 0.8789164,
        "rte": "az",
        "prob": 0.8789164
      },
      {
        "cls": 0,
        "raw": 0.9557829,
        "rte": "az/npm",
        "prob": 0.9557829
      }
    ],
    "prob": 0.91887397,
    "files": [
      {
        "id": 0,
        "lvl": 279,
        "conf": 80,
        "prob": 0.9188739657402039,
        "type": "npm"
      },
      {
        "id": 2,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000033875305689434754,
        "type": "javascript"
      },
      {
        "id": 3,
        "lvl": -1,
        "conf": 0,
        "prob": 0.0000317990779876709,
        "type": "package.json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-05T17:54:48Z"
  },
  "path": "bn-math-1.0.1.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy8000000@}T/l2kje6.TLG%m1yey%YaUvMOvkfC([zYLDg%\u003cD\u0026$Keua!gqCc#^UQ}l19Qt0XWd}lsZvfKm?G%ZS74Nz/\u003ccqDERpG+GLHCdsMzVhfI\u0026Sy0MGs7%jzc8*Jb$q8nlx)p)0Gu%vEaa*hI(LwjaSy\u0026sgViC*Qd1h@?]O-@\u003chzS8#t3]ntyP-CkyeFik0#{HO1\u003cif9p}",
            "ln": 0
          }
        ],
        "mol": "O(S₂)Md(Pa₃)",
        "sha": "291e9d6261ee9db508efb9d3ba58c626b60b05c5fe0fe9da2ffd1cd1ddcf15a9",
        "path": "bn-math-1.0.1.tgz",
        "risk": 39,
        "size": 452,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 452,
              "entropy": 7.54
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 452,
              "peak_region_entropy": 7.54
            },
            "consistency": {
              "self_dependency": 0,
              "unused_runtime_deps": 11
            }
          }
        },
        "ident": {
          "name": {
            "value": "bn-math",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "version": {
            "value": "1.0.1",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "bn-math",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/scripts/develop::npm-init-default-test",
            "conf": 0.95,
            "crit": 1,
            "desc": "Default npm-init placeholder test script"
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-dependency-fanout",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package has at least eight runtime deps"
          },
          {
            "id": "metadata/package/dependencies/named::npm-dep-https-core-name",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "npm dependency named after core module https"
          },
          {
            "id": "metadata/package/dependencies/named::npm-dep-os-core-name",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "npm dependency named after core module os"
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-dep-axios",
            "conf": 0.9,
            "crit": 3,
            "desc": "npm dependency on axios"
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.7,
            "crit": 2,
            "desc": "Major version is 1 or higher"
          },
          {
            "id": "metadata/package/quality/empty::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package name"
          },
          {
            "id": "metadata/package/versioning::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version"
          },
          {
            "id": "metadata/package/dependencies/named::npm-dep-child-process",
            "atk": "T1195.002",
            "conf": 0.82,
            "crit": 3,
            "desc": "npm dependency on child_process stub"
          },
          {
            "id": "metadata/package/manifest/freeform::pkg-skeleton-small",
            "conf": 0.7,
            "crit": 3,
            "desc": "Tiny package.json manifest",
            "from": [
              {
                "file": 3
              }
            ]
          },
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field"
          },
          {
            "id": "objectives/supply-chain/impersonation/npm-clone::n8n-obfuscator-dependency",
            "atk": "T1195.002",
            "mbc": "E1195.002",
            "conf": 0.9,
            "crit": 4,
            "desc": "n8n package depends on javascript-obfuscator"
          },
          {
            "id": "metadata/package/quality/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-author",
            "conf": 0.75,
            "crit": 2,
            "desc": "package.json author field is empty"
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-description",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json description field is empty"
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/placeholder::mature-hollow-index-package",
            "atk": "T1195.002",
            "mbc": "B0024",
            "conf": 0.9,
            "crit": 3,
            "desc": "Mature hollow package advertises default index entry",
            "from": [
              {
                "off": 0,
                "file": 3,
                "line": 1
              }
            ],
            "uses": [
              0,
              5,
              9,
              12,
              13,
              14
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-phantom-runtime-dependency",
            "conf": 0.82,
            "crit": 3,
            "desc": "Declared runtime dependency lacks module import",
            "spans": [
              [
                0,
                39
              ]
            ]
          }
        ]
      },
      {
        "depth": 1,
        "facts": {
          "imp": [
            [
              "",
              "config"
            ],
            [
              "",
              "require"
            ],
            [
              "",
              "./config"
            ]
          ],
          "tgt": [
            "require"
          ],
          "metrics": {
            "ast": {
              "max_depth": 6,
              "call_count": 1,
              "node_count": 15
            },
            "file": {
              "size": 38,
              "entropy": 4.25
            },
            "text": {
              "lines": 2,
              "top_char": 111,
              "max_ws_run": 1,
              "space_count": 3,
              "char_entropy": 4.25,
              "unique_chars": 21,
              "top_char_null": 0,
              "string_density": 0.5,
              "top_char_ratio": 0.08,
              "avg_line_length": 17,
              "max_line_length": 34,
              "empty_line_ratio": 0.5,
              "last_line_length": 34,
              "whitespace_ratio": 0.18,
              "identifier_density": 1,
              "line_length_stddev": 17,
              "normalized_string_count": 0.71,
              "normalized_unique_identifiers": 2
            },
            "binds": {
              "count": 1
            },
            "binary": {
              "peak_region_bytes": 38,
              "peak_region_entropy": 4.25
            },
            "imports": {
              "count": 1,
              "relative": 1,
              "relative_ratio": 1,
              "third_party_count": 1,
              "third_party_ratio": 1
            },
            "strings": {
              "bytes": 8,
              "count": 1,
              "avg_length": 8,
              "max_length": 8,
              "path_count": 1,
              "avg_entropy": 3
            },
            "identifiers": {
              "count": 2,
              "unique": 2,
              "avg_length": 6.5,
              "max_length": 7,
              "min_length": 6,
              "avg_entropy": 2.41,
              "reuse_ratio": 1,
              "length_stddev": 0.5,
              "all_lowercase_ratio": 1
            }
          }
        },
        "id": 2,
        "path": "bn-math-1.0.1.tgz!!package/index.js",
        "pid": 0,
        "refs": [
          {
            "to": "./config",
            "off": 24,
            "file": 1,
            "kind": "local"
          }
        ],
        "risk": 1,
        "sha": "cbdeb54620f5187efdfd6cea6eaaf391b6ee1d6a5f44a33c98f2bfedd38be64c",
        "size": 38,
        "traits": [
          {
            "id": "metadata/file/extension/identity::javascript-source-extension",
            "conf": 1.0,
            "crit": 1,
            "desc": "JavaScript source filename extension",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/source::js-ts-source-basename",
            "conf": 0.95,
            "crit": 2,
            "desc": "JavaScript or TypeScript source filename",
            "spans": [
              [
                0,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/entrypoint::npm-root-javascript-source-member",
            "conf": 0.95,
            "crit": 2,
            "desc": "Decoded npm package ships root JavaScript file",
            "spans": [
              [
                0,
                0
              ]
            ]
          }
        ],
        "type": "javascript"
      },
      {
        "ctx": [
          {
            "b": "DKQr8ar\u003eYizdK[Lar\u003eojeP1{rxD!#p3lQDnC4CYnx(v(kiV]R3e?![ja$KfgarR\u003eswPIv4x(Ffdz/c:War\u00260X4gjj2b5y$6wO#N2b03?\u003cnMd#2edz}ear\u003elpBzbPkb03?\u003ca$KfgarR\u003eID2NssiV]RRz/6ufzFBkpedz}ear\u003eVhx(kaQar\u003eJqwmZ0ryi7NI4gjj2b6dmmx(Ffnb03\u0026[4gjj2arR\u003eIwPI@qiV]RTv}Y^6tP#QSA=k$Vaz#9uBy/JnaAIHkv}/K?wN]3\u0026asnATwQ4{hatC5H3lQEtedz}ear\u003eucAaJ]$wO#0(wPG4RaBsL8arR^Hb0YQCvR6vexjU%(A::6dAW0K!b3)hXgc3%wa$KfgarR^Hb0YQCvR6veAa9^dwPw$Qar\u003ebJe\u00262BtfD@4S3lQDlar\u003c6WvpA!:flzkyC4CYnwG\u003ceTb3)hXgc3%va$KfgarR^Hb0YQCvR6veBA}?pB0rT/b3)hXgc3%va$KfgarR^Hb4k.gz/W9-ar\u003ebDe?]dmh6KNX3lQDlar\u003erex(4r!Ab](bwPI]piV]RMf!Ldjg9OmU3lQDlar\u003eGvBz#pBiV]RMf!LdjfD@4S3lQDlar\u003eMeC42D4A+PGmePk9gB-R53Bz(gziV]RMh7*WqfD@4S3lQDlar\u003e-Bb03?\u003cun9#^e\u00261R44gjj2arR\u003eEvrufbiV]RMfFk7ne\u0026K$94gjj2arR\u003eEA+fumx\u003eqreiV]RMgCgTtf^m5larV7w3vI",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "imp": [
            [
              "^1.0.0",
              "https"
            ],
            [
              "^1.0.2",
              "child_process"
            ],
            [
              "^3.8.1",
              "prettier"
            ],
            [
              "^1.13.5",
              "axios"
            ],
            [
              "^7.29.1",
              "@babel/generator"
            ],
            [
              "^7.29.0",
              "@babel/types"
            ],
            [
              "^7.29.0",
              "@babel/parser"
            ],
            [
              "^7.29.0",
              "@babel/traverse"
            ],
            [
              "^5.3.0",
              "javascript-obfuscator"
            ],
            [
              "^0.12.7",
              "path"
            ],
            [
              "^0.1.2",
              "os"
            ]
          ],
          "metrics": {
            "file": {
              "size": 590,
              "entropy": 4.67
            },
            "binary": {
              "peak_region_bytes": 590,
              "peak_region_entropy": 4.67
            }
          }
        },
        "id": 3,
        "mol": "O(S₂)Md(Pa₃)",
        "path": "bn-math-1.0.1.tgz!!package/package.json",
        "pid": 0,
        "refs": [
          {
            "to": "pkg:npm/%40babel/generator",
            "off": 261,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/%40babel/parser",
            "off": 297,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/%40babel/traverse",
            "off": 330,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/%40babel/types",
            "off": 365,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/axios",
            "off": 397,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/child_process",
            "off": 422,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/https",
            "off": 454,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/javascript-obfuscator",
            "off": 478,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/os",
            "off": 400,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/path",
            "off": 539,
            "kind": "dependency"
          },
          {
            "to": "pkg:npm/prettier",
            "off": 563,
            "kind": "dependency"
          },
          {
            "to": "index.js",
            "off": 142,
            "file": 2,
            "kind": "local"
          }
        ],
        "risk": 39,
        "sha": "34954dc30c5306a58988e7b64e521c31245c68c61035754fe816ca151ff8452b",
        "size": 590,
        "traits": [
          {
            "id": "supply-chain/missing-author",
            "conf": 0.5,
            "crit": 3,
            "desc": "Package has empty or missing author field",
            "spans": [
              [
                0,
                21
              ]
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-dep-axios",
            "conf": 0.9,
            "crit": 3,
            "desc": "npm dependency on axios",
            "spans": [
              [
                396,
                7
              ]
            ]
          },
          {
            "id": "metadata/package/dependencies/manifest::npm-dependency-fanout",
            "conf": 0.85,
            "crit": 3,
            "desc": "Package has at least eight runtime deps",
            "spans": [
              [
                237,
                220
              ]
            ]
          },
          {
            "id": "metadata/package/dependencies/named::npm-dep-child-process",
            "atk": "T1195.002",
            "conf": 0.82,
            "crit": 3,
            "desc": "npm dependency on child_process stub",
            "spans": [
              [
                421,
                6
              ]
            ]
          },
          {
            "id": "metadata/package/dependencies/named::npm-dep-https-core-name",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "npm dependency named after core module https",
            "spans": [
              [
                453,
                6
              ]
            ]
          },
          {
            "id": "metadata/package/dependencies/named::npm-dep-os-core-name",
            "atk": "T1195.002",
            "conf": 0.85,
            "crit": 3,
            "desc": "npm dependency named after core module os",
            "spans": [
              [
                517,
                6
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-description",
            "conf": 0.85,
            "crit": 2,
            "desc": "package.json description field is empty",
            "spans": [
              [
                50,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-has-name",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package name",
            "spans": [
              [
                5,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/scripts/develop::npm-init-default-test",
            "conf": 0.95,
            "crit": 1,
            "desc": "Default npm-init placeholder test script",
            "spans": [
              [
                174,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/versioning::npm-has-version",
            "conf": 1.0,
            "crit": 2,
            "desc": "package.json defines a package version",
            "spans": [
              [
                27,
                0
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/npm-clone::n8n-obfuscator-dependency",
            "atk": "T1195.002",
            "mbc": "E1195.002",
            "conf": 0.9,
            "crit": 4,
            "desc": "n8n package depends on javascript-obfuscator",
            "spans": [
              [
                477,
                6
              ]
            ]
          },
          {
            "id": "metadata/package/manifest/freeform::pkg-skeleton-small",
            "conf": 0.7,
            "crit": 3,
            "desc": "Tiny package.json manifest",
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-empty-author",
            "conf": 0.75,
            "crit": 2,
            "desc": "package.json author field is empty",
            "spans": [
              [
                93,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/quality/empty::npm-no-keywords",
            "conf": 0.5,
            "crit": 2,
            "desc": "package.json has no keywords"
          },
          {
            "id": "metadata/package/versioning::mature-version",
            "conf": 0.7,
            "crit": 2,
            "desc": "Major version is 1 or higher",
            "spans": [
              [
                27,
                0
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/placeholder::mature-hollow-index-package",
            "atk": "T1195.002",
            "mbc": "B0024",
            "conf": 0.9,
            "crit": 3,
            "desc": "Mature hollow package advertises default index entry",
            "uses": [
              6,
              8,
              11,
              12,
              13,
              14
            ],
            "spans": [
              [
                0,
                20
              ],
              [
                27,
                5
              ],
              [
                50,
                0
              ],
              [
                133,
                8
              ],
              [
                174,
                41
              ]
            ]
          }
        ],
        "type": "package.json"
      }
    ],
    "rev": "479f3",
    "v": "8"
  }
}