{ "ml": { "v": "7", "eng": "2.2.0-beta.2", "lvl": 0, "conf": 100, "mods": [ { "cls": 0, "raw": 0.9998824, "rte": "az", "prob": 0.9998824 }, { "cls": 2, "raw": 0.9983327, "rte": "az/npm", "prob": 0.9983327 } ], "prob": 0.9983327, "files": [ { "id": 0, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.9999130964279175, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.9988492727279663, "type": "package.json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.9990100860595703, "type": "javascript" }, { "id": 4, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 5, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 6, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "npm" }, { "id": 7, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.9988492727279663, "type": "package.json" }, { "id": 9, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "registry" }, { "id": 10, "lvl": 0, "conf": 100, "prob": 0.9974552392959595, "type": "npm" }, { "id": 11, "lvl": 5000, "conf": 54, "prob": 0.9824005365371704, "type": "javascript" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.9988492727279663, "type": "package.json" }, { "id": 13, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 14, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "registry" }, { "id": 15, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "registry" }, { "id": 16, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "registry" }, { "id": 17, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "registry" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.30848681926727295, "type": "npm" }, { "id": 19, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 20, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 21, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.9988492727279663, "type": "package.json" }, { "id": 23, "lvl": 5000, "conf": 54, "prob": 0.9824005365371704, "type": "javascript" }, { "id": 24, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 25, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 26, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 27, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 28, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 29, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 30, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 31, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 32, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 33, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 34, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 35, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 36, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 37, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 38, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 39, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 40, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 41, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 42, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 43, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 44, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 45, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 46, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 47, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 48, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 49, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 50, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 51, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 52, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 53, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 54, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 55, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 56, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 57, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 58, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 59, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 60, "lvl": -1, "conf": 0, "prob": 0.18677598237991333, "type": "javascript" }, { "id": 61, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 62, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 63, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 64, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 65, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 66, "lvl": -1, "conf": 0, "prob": 0.19951796531677246, "type": "javascript" }, { "id": 67, "lvl": -1, "conf": 0, "prob": 0.2401142120361328, "type": "javascript" }, { "id": 68, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 69, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 70, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 71, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 72, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 73, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 74, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 75, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 76, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 77, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 78, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 79, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 80, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 81, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 82, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 83, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 84, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 85, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 86, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 87, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 88, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 89, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 90, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 91, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 92, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 93, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 94, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 95, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 96, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 97, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 98, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 99, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 100, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 101, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 102, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 103, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "text" }, { "id": 104, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 105, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "npm" }, { "id": 106, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 107, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 108, "lvl": -1, "conf": 0, "prob": 0.9988492727279663, "type": "package.json" }, { "id": 109, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 110, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 111, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "markdown" }, { "id": 112, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "javascript" }, { "id": 113, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "text" }, { "id": 114, "lvl": 0, "conf": 100, "prob": 0.998332679271698, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-06-30T19:13:21Z" }, "path": "thirdwebb-0.0.8.tgz", "raw": { "fetched": [ { "size": 397, "cached": true, "status": 200, "headers": [ [ "date", "Tue, 30 Jun 2026 15:50:16 GMT" ], [ "content-type", "application/octet-stream" ], [ "content-length", "397" ], [ "connection", "keep-alive" ], [ "set-cookie", "_cfuvid=UT4pA42T5oudCNl5IMJUnWKUUAzQM9SPscbRfhwIJBY-1782834616.3199105-1.0.1.1-7EhjyQ_MI4BlFE4PHkuNrRygtLYXmkMtZyW9B2DhD_8; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org" ], [ "cf-ray", "a13e535ffd8dd6eb-IAD" ], [ "cf-cache-status", "MISS" ], [ "accept-ranges", "bytes" ], [ "access-control-allow-origin", "*" ], [ "cache-control", "public, immutable, max-age=31557600" ], [ "etag", "\"4287a61b0b52eb11ff77ee3f93374f52\"" ], [ "last-modified", "Thu, 18 Jun 2026 15:17:21 GMT" ], [ "server", "cloudflare" ], [ "vary", "Accept-Encoding" ] ], "locator": "pkg:npm/parket-slot@0.0.1-security", "outcome": "ok", "final_url": "https://registry.npmjs.org/parket-slot/-/parket-slot-0.0.1-security.tgz", "fetched_at": 1782834616, "resolved_url": "https://registry.npmjs.org/parket-slot/-/parket-slot-0.0.1-security.tgz", "source_offset": 14953, "source_sha256": "cc4f38d2c43eae53227a80cb79358fe6373f067d82d5b4b9e1cc135a0fbfbcc3", "content_sha256": "483dc4321fc59cd41a80dc5d2013e11226f42cee1f1798c419d1917c517d7a51" }, { "size": 5760, "cached": true, "status": 200, "headers": [ [ "date", "Tue, 30 Jun 2026 15:50:22 GMT" ], [ "content-type", "application/octet-stream" ], [ "content-length", "5760" ], [ "connection", "keep-alive" ], [ "set-cookie", "_cfuvid=F.YxrTDKrBSShvceAelkrIrvPNONf9.7R6ua8HHEbSY-1782834622.4268875-1.0.1.1-WGySQFnYG8kCUaGPt8a3kj0bnWhM5v2kNh2oD5iqxls; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org" ], [ "cf-ray", "a13e53862defd6eb-IAD" ], [ "cf-cache-status", "HIT" ], [ "accept-ranges", "bytes" ], [ "access-control-allow-origin", "*" ], [ "cache-control", "public, immutable, max-age=31557600" ], [ "etag", "\"d5cf81c9d43f53b756cbe4f90b1f452f\"" ], [ "last-modified", "Fri, 19 Jun 2026 07:54:44 GMT" ], [ "server", "cloudflare" ], [ "vary", "Accept-Encoding" ] ], "locator": "pkg:npm/log-taker@0.1.0", "outcome": "ok", "final_url": "https://registry.npmjs.org/log-taker/-/log-taker-0.1.0.tgz", "fetched_at": 1782834622, "resolved_url": "https://registry.npmjs.org/log-taker/-/log-taker-0.1.0.tgz", "source_offset": 1175, "source_sha256": "9139f23a168729177baa494249ca9fd3f487d731b66c65d53a642af05c3c119e", "content_sha256": "fddcf755de5b9dc67f6926a4e0f48526108734403ee90b8ba4e948dafa26504a" }, { "size": 496115, "cached": true, "status": 200, "headers": [ [ "date", "Tue, 30 Jun 2026 09:10:01 GMT" ], [ "content-type", "application/octet-stream" ], [ "content-length", "496115" ], [ "connection", "keep-alive" ], [ "set-cookie", "_cfuvid=u.xvcGco5mTLNF_ULsq.bte6oYLKNsbJq.RTmRNvvYE-1782810601.8303397-1.0.1.1-DI8Xje8UyxhZyN93AsAnavpl7ysnkF2OKPJUpEFCKrY; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org" ], [ "cf-ray", "a13c09156c7674e2-IAD" ], [ "cf-cache-status", "HIT" ], [ "accept-ranges", "bytes" ], [ "access-control-allow-origin", "*" ], [ "age", "657701" ], [ "cache-control", "public, immutable, max-age=31557600" ], [ "etag", "\"3285b7794bd97dea9fcb83c64d04046f\"" ], [ "last-modified", "Mon, 22 Jun 2026 18:28:20 GMT" ], [ "server", "cloudflare" ], [ "vary", "Accept-Encoding" ] ], "locator": "pkg:npm/axios@1.18.1", "outcome": "ok", "final_url": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz", "fetched_at": 1782810601, "resolved_url": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz", "source_offset": 260, "source_sha256": "4949e546dc46e5ab7da839cfc10c379fa53e94d440c11c24ba59f0e7eef3505a", "content_sha256": "0c9c4ae1c7d2c65168676039b7d7d80912a4644459b4885036088201b2b3e21a" }, { "size": 24198, "cached": true, "status": 200, "headers": [ [ "date", "Tue, 30 Jun 2026 09:09:00 GMT" ], [ "content-type", "application/octet-stream" ], [ "content-length", "24198" ], [ "connection", "keep-alive" ], [ "set-cookie", "_cfuvid=1_3tSZtauMr1E9O_iitCaObMbg3A_z_utVnfd9yoSNA-1782810540.8747892-1.0.1.1-sCqy1ejq3StfPbaCF9XeyL3jVp0AsZbH5oxOE2o8m3s; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org" ], [ "cf-ray", "a13c07987fbd78b1-IAD" ], [ "cf-cache-status", "HIT" ], [ "accept-ranges", "bytes" ], [ "access-control-allow-origin", "*" ], [ "age", "1524665" ], [ "cache-control", "public, immutable, max-age=31557600" ], [ "etag", "\"51f19894f9906cb968d307d7d3c4d33d\"" ], [ "last-modified", "Fri, 12 Jun 2026 17:37:55 GMT" ], [ "server", "cloudflare" ], [ "vary", "Accept-Encoding" ] ], "locator": "pkg:npm/form-data@4.0.6", "outcome": "ok", "final_url": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", "fetched_at": 1782810540, "resolved_url": "https://registry.npmjs.org/form-data/-/form-data-4.0.6.tgz", "source_offset": 324, "source_sha256": "4949e546dc46e5ab7da839cfc10c379fa53e94d440c11c24ba59f0e7eef3505a", "content_sha256": "fc4d94e9b629f5378367ba46da7d96115696c01e25c99cd57c2c9a3d098bb557" } ], "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000@}Uo)rmkPA{iI@iEV:?K#iMd07?DL=Q:uo/]*0jsry50CE1p1JZosblime{03#W9=DgZ]jIVx8}Zq", "n": [ { "c": 3, "d": "Declares a runtime dep no module imports", "i": "objectives/supply-chain/metadata-anomaly::npm-phantom-runtime-dependency", "o": 0, "z": 38, "cf": 0.6000000238418579 } ], "ln": 0 } ], "mol": "O(S₂)Md(Pa₃)", "sha": "2fe6fd13a0b9fb96d7d3e8d7ef53fe653b00d2f6561ddfe715c5ea8b617d184a", "path": "/data/samples/bad/foraged/javascript/npmjs.org/ossf-malicious-packages/thirdwebb/thirdwebb-0.0.8.tgz", "refs": [ { "to": "pkg:github/mikemcl/big.js", "off": 0, "kind": "repository" } ], "risk": 243, "size": 16627, "type": "npm", "facts": { "metrics": { "file": { "size": 16627.0, "entropy": 7.98, "size_bytes": 16627.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.98, "peak_region_bytes": 16384.0, "peak_region_entropy": 7.82 }, "consistency": { "unused_runtime_deps": 1.0 } } }, "ident": { "name": { "value": "thirdwebb", "source": "npm.name", "verified": false }, "urls": [ { "url": "https://github.com/MikeMcl/big.js.git", "kind": "repository", "source": "npm.repository.url" } ], "trust": "unsigned", "emails": [ "M8ch88l@gmail.com" ], "authors": [ { "name": "Michael Mclaughlin", "role": "author", "email": "M8ch88l@gmail.com", "source": "npm.author" } ], "version": { "value": "0.0.8", "source": "npm.version", "verified": false }, "identifier": { "value": "thirdwebb", "source": "npm.name", "verified": false } }, "traits": [ { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.949999988079071, "crit": 4, "desc": "Impersonates MikeMcl/big.js repository" }, { "id": "metadata/library/structure::js-any-bundle-output", "conf": 0.949999988079071, "crit": 2, "desc": "Any JS bundle or minified asset output", "from": [ { "file": 1 }, { "file": 3 } ] }, { "id": "metadata/file/format::vocab-string", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary string", "from": [ { "file": 1 } ] }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "npm package has version field" }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::require-slot-loader", "atk": "T1195.002", "conf": 0.9950000047683716, "crit": 4, "desc": "Requires slot loader module", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/entrypoint::pkg-exports-field-entry", "conf": 0.6000000238418579, "crit": 2, "desc": "\"exports\": field in package.json", "from": [ { "file": 2 } ] }, { "id": "metadata/library/structure::js-umd-wrapper-amd", "conf": 0.8999999761581421, "crit": 2, "desc": "UMD AMD branch marker", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::vocab-invalid", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary invalid", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::i18n-lang-code-module-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "Module JavaScript language code basename", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::from-str-loader-call", "atk": "T1195.002", "conf": 0.9800000190734863, "crit": 1, "desc": "Calls from_str loader method", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::fallback-try-require", "atk": "T1195.002", "conf": 0.8999999761581421, "crit": 1, "desc": "try block probes dependency with require", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/description::has-description", "conf": 0.75, "crit": 3, "desc": "Package has meaningful description" }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation-clone", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.9900000095367432, "crit": 5, "desc": "Impersonation of the popular big.js library", "from": [ { "file": 2 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::swallowed-loader-errors", "atk": "T1195.002", "conf": 0.9700000286102295, "crit": 1, "desc": "Empty catch hides loader errors", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::i18n-lang-code-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "Two- or three-letter language code basename", "from": [ { "file": 1 }, { "file": 3 } ], "spans": [ [ 0, 6 ] ] }, { "id": "metadata/package/manifest/publishing::has-funding", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has funding information" }, { "id": "objectives/supply-chain/impersonation/npm-clone::author-retained-original", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.699999988079071, "crit": 1, "desc": "author retained original" }, { "id": "metadata/package/quality/source::has-multiple-entries", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has multiple entry points", "from": [ { "file": 2 } ] }, { "id": "metadata/file/format::i18n-validation-vocab", "conf": 0.9700000286102295, "crit": 1, "desc": "Form-validation vocabulary in dense non-ASCII file", "from": [ { "file": 1 }, { "file": 3 } ] }, { "id": "objectives/supply-chain/install-hook/init::top-level-require-method-call", "atk": "T1195.002", "mbc": "B0024", "conf": 0.8999999761581421, "crit": 1, "desc": "Top-level method call on require() result", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::slot-loader-stub", "atk": "T1195.002,T1059.007", "conf": 0.9980000257492065, "crit": 5, "desc": "Slot loader runs during import", "from": [ { "off": 14953, "file": 1, "line": 606 }, { "off": 14953, "file": 3, "line": 606 } ], "spans": [ [ 14996, 31 ] ] }, { "id": "metadata/file/format::i18n-locale-file", "conf": 0.9700000286102295, "crit": 2, "desc": "JavaScript/TypeScript i18n locale string catalog", "from": [ { "off": 3293, "file": 1, "line": 103 }, { "off": 3293, "file": 3, "line": 103 } ], "spans": [ [ 0, 6 ] ] }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.8999999761581421, "crit": 2, "desc": "Repository uses common git host" }, { "id": "metadata/package/manifest/entrypoint::pkg-module-field", "conf": 0.6000000238418579, "crit": 2, "desc": "\"module\": field in package.json", "from": [ { "file": 2 } ] }, { "id": "metadata/library/structure::js-umd-wrapper-any", "conf": 0.8999999761581421, "crit": 2, "desc": "Universal Module Definition (UMD) wrapper", "from": [ { "file": 1 }, { "file": 3 } ] }, { "id": "metadata/file/format::vocab-number", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary number", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::i18n-lang-code-locale-module", "conf": 0.8999999761581421, "crit": 2, "desc": "Language-code-named locale module with i18n content", "from": [ { "file": 1 }, { "file": 3 } ], "spans": [ [ 0, 6 ] ] }, { "id": "metadata/file/format::i18n-lang-code-js-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "JavaScript language code basename", "from": [ { "file": 3 } ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.8999999761581421, "crit": 2, "desc": "Package has repository field" }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::noop-loader-promises", "atk": "T1195.002", "conf": 0.9700000286102295, "crit": 4, "desc": "Loader chain swallows promise results", "from": [ { "file": 3 } ] }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm package has name field" }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"build\": script in package.json" }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.8500000238418579, "crit": 2, "desc": "Package has repository URL" }, { "id": "objectives/supply-chain/metadata-anomaly::npm-phantom-runtime-dependency", "atk": "T1195.002", "conf": 0.6000000238418579, "crit": 3, "desc": "Declares a runtime dep no module imports", "spans": [ [ 0, 38 ] ] } ] }, { "ctx": [ { "b": "aA/W@fFk6?3lQ/vavdb\u003ezddl%efFLkB95@QwNPU9eP+[.B-Rapy?Wv0vrcSow]zYjvrb*\u003eBAg/gC}A#QwN/B}x(v(iwmYm+zddl6vrc77xL?s5x\u003e5+83lQ/vavy6^D2^RixMLvBv\u003c@JQfFUHdo\u003e!9Jvp:l$o\u003ee0FB.tx7x(jv!asXGRxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1ZiUlQ::qmj@B/4gjjcfawmIasH\u0026AzEW^5z/cWCm[=YBk$\u0026ZIDKQr8aszqMwGV5oA+P39cP.+AarU\u0026oAV^X.xdKG04giKKarR^HfdFC3dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([\u003cmmoZDk%!mlavFT/k#*PTqY)LtdK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK(]34giKK4gjj2arSr\u003caxi2=ay]4}vrDydaA?gfB.bRpvR6v]Coy:BB95KlwGUY8By/8@A=SvEx([35zxK4mwGV5ovru6\u003eaAy[dxjVcp4giKKarR^HfdEzrarR^HasXHkxK@r6vr=H6B.@ms", "ln": 14, "col": 11, "line": 2 }, { "b": "B0bykaA8jgA::67z/fRsx(n9jy\u003c6Jgxcp-0C4(2iz/dPB3lQDlarScRwncifvqYP#B8=kxefFwswft\u0026fCoz9zBz8!mwOkB[x)a5gwQ5fjzE)ZcB1N[earR^HasY2N3lQDlavG3GjS(HlefD5TarR^HarR^Hatkw\u003cfD+EQawCd7uQNZ13jNs+arR^WdH=.carR^HdJ?Y7wGV2iB-4", "ln": 520, "col": 63, "line": 18 }, { "b": "3lQDlatkhN3lQDlarScRra]?=zE)D?Bzk]faz2!pz/fc7Brz#bmjxu/BrC1fwftt)zE)l#xDRIjx\u003e7*0Bz\u003e91A+PA7aAz4nB-Iwvaz2!pz/fc7Bzkf1az#atvruj4zy#w9arR^HasXGZn)#)Kq!6\u0026ZAc9juB.$P0A=Tn:eJk9/3lQDlarScReIO}kfFCgmazC)tBzbkdze0)4zfoXrA+e:0zeA\u003c4wmYo]wQ5fjzE)ZcaA?gfB.8Xlw/$I8", "ln": 1315, "col": 2, "line": 38 }, { "b": "vr=H6B.@mwwN/T}zdNP}wN(]{CYmOswO#PjC42ifwGU]6ayMxVx\u003eF$tvS==nBzbxfaz++ex(\u003eFiB0bvsBrCdjw]zZ1wN)z53lQDlarSc!4gjj2arTGHauZ\u00265f!sB\u0026arR^HarR^HarSr\u003cats{WzY*+*fFCgmfBXu#3lQDlatkhN3lQDlarScRs7(e.", "ln": 1731, "col": 24, "line": 49 }, { "b": "dK([$dK([$dK([$dK([$dK([$dK)7X3jNsK3lQDlatkw\u003cmriA!AV/jgB8$=5wPGEk3lQDlawLi%miB-ocTg4]xd^}ut{7HC4gjj2arTlJrZxzJl)aSnpc?Pyas!MZnP5YWy?WA5cObYlarR^HnLSqLoI4SVl@k0?aw2sek$\u003c\u003cras!MZwmYm+zddl6Abn@)wPGjI4gjj2arTlJrZxzJl%\u0026?^auZ\u0026spf6UOnKKWKaszhFB-7-7zF78ez!9Abedz{", "ln": 2255, "col": 82, "line": 61 }, { "b": "y\u0026%qw4gjj2arR^RfawmharR!sB-7Yhx(v(iltp6XzyDYP4gjj2arR^HC42zlCPYc(Bzbxfi$hJa3lQDlarR^WfcAY3vpB4:ay/tcB98CBv@#TfaA.:lxjSifx([3bB-X:zwP]:o3lQDlarR!vw/@GBd0M\u003eGzGx]dzEWl@w/%AOxdknLDKQr8arR^HarR!EwPS6nzxJ*tjV$}JrzC}JmOcuzl)9*6ayPq6B.$YcBAo6JwO#d5xDPD3jS(B3koKr1x\u003eH^3diHU]zE[2mltp6XzyETR3lQDlarR!P4giKKarR^HarSr\u003cavHu\u003ey?Wx/By^6l3lQDlarR!vw/@HtazC.mByx5%wP8f6ltp6YaBsL8ao", "ln": 2895, "col": 42, "line": 87 }, { "b": "arU[YB09Q*zz2#(4gjj2arR^HarU[YwGTbUzz2GZ4gjj2arR^HarU[Yv\u003c0]Szz2AKB8kM2wHF#?4gjj2arR^HEir9qB7DFv4gjj2arR^HarUxgasItSAaJ%1az@qBjV%]nB98CpzF7sCaBsL8arR^HarR^HarUxgasGM\u003cxd!mEA+P39au.\u003eJaARTDwGSrDaAR)FwP8f6zxH8=jS(aYx\u003eIc$BseHWDKQr8arR^HarR^HarR!GxMw3naxiS9wKQSWz/Nl$pf6UOnKKWKasztvy\u0026%qpdlv$CarR^HarR^HarQ", "ln": 3189, "col": 7, "line": 99 }, { "b": "y\u0026%qw4gjj2asY2N3lQE6B-7Yhx(v(iAa9^dwHI^Oaz@RJDKQr8arR!Ivr9G4efFTTaz#0S4giKKarR^Hx\u003ewFoaX(3imn=YAe{7VCBsq2QdiJ%D3lQDlarR!GxMw3navQr\u003ez/Nl$pf6UOnKKWKasz5Hzdm6%cN?a^3lQDlaBKXa4gjj2arSr\u003cavG^.wPzT4zE\u003c@ix\u003eIro4gjj2arU[YB09Q*zz2BjvraUQc[)7)jV%]neHIV9asIaIjS[R{B8kM2wHGnZefDJ0diHU]f/]*K4gjj2arSr\u003cavG^Jx(do{aAhmkzGF8L3lQDlazCBgc[5THjS[R{x(mD)CU.{1cOu+}diH!%eIOW%zxI7+zz2%vAbn@)wHF]UcOcw/cN?a^3jNs+arR^WfcAYdAbPS9zGGP3y-)tdA=12I3lQDlazCBgc[5^LjS[R{B7F^2v}WnzwIm:DdiH!%fEXb\u003e4giKKarR^HarSr\u003cavG^.wPzT4zE\u0026", "ln": 4120, "col": 36, "line": 139 }, { "b": "ay#VUazA[D3lQDlarR!ras/O$d@D$Xy?Wx\u003cc$%!OatCrb4gjj2arR^HzxI7+zz30MvSMTix(mMifF1tXdlv$CarR^HEir9qB7DFdw/@HkauQ=2diJ%D3jNs+arR^Hatkw\u003cnP5SYxjV9o4gjj2arR^HwGTbUzz2:pzFa68i$hJtarR!P4giKKarR^HzFQBUaz@/FwO#d5xGDUg4gjj2arSr\u003cavG^.wPzT4zE\u003c@bwNPa-zF78rwPzZge!5dgarR!sz/M%Gx=]LYfGQy\u003eauQ=:y-\u003e5Kaz@/wxKL{EBsp\u0026Lau.\u003egcOM]fdiHb\u003ex/=+h4gjj2arUxgasH}DjV%{9y:*GN4giKKarR^HarSr\u003cax\u0026t%z.qFaarR^HarU[Yv\u003c0]S", "ln": 4538, "col": 17, "line": 158 }, { "b": "3jNs+arR^Hatkw\u003cCW\u003c%0wl*r(B0bNrwGUI$xk8Dgvp\u003cQ)AV/EqwGUI$xk8DgBzb98az\u003eLjayX[8A=l8rwmYo]B-n@x3lQDlarR!zz/PzijQ?-varR^HarR!Ez6g#8jS(E4cmf\u003cWv{s1+t{8r]at\u003eo?D\u003c{A9arR^HarR!Ez6g#8jS(H5cmf\u0026-CW\u003c%0", "ln": 6186, "col": 34, "line": 226 }, { "b": "x\u003ezSsCQ%$Fz:![\u0026z/fc7Bzkf1efFUFph+2@wPzYraBsL8arR^HC42zlwGTbUCRiLU4gjj2arR^HB09Q*CRiFUyhW*7c){w\u003eedz}earR^Haz@q+aAGeKwO#d5xGDUg4gjj2arSr\u003cavQJ]z/fc7Bzkf1az#atvruj4zA!NqarR^Hx\u003ewFown:[YAbPS9zGGP3y:*GN4gjj2arR^HB09Q*B1Q%ovraUQc[)7)d\u003cclTau*]5au{$@e*?+(aAGeRy?Wx\u003cc]0d[iV]^$diHb-c$KI-ats{5asy.FauyR)wH/bSas!NCi$hJa3lQDlarR^WfcB2dA=2l3az#atvruj4zy#w9arR^HEir9qB7DFdw/@HkauQ=2diJ%D3lQDlarR!szV", "ln": 7185, "col": 18, "line": 264 }, { "b": "wO=B0azCBgc$KI-az@RJDKQr8arR^HarR!FauZ\u0026*e]$\u0026yv}v5xefFHMas!MZe*?+(aAGeRy?Wx\u003cc$K??4gjj2arR^HEglJaarR!Paz2wgwGUY0asIaIj%hNeaBsL8arR^HarU.F", "ln": 7629, "col": 9, "line": 280 }, { "b": "zxK4mwGVe8y\u0026%qiz!paUx\u003eFMlefF\u003eK4gjj2asXGRarR^HarSuXx\u003ewGfxK#DixKM6}aARpdaAH$dwGVe8y\u0026%qw4gjj2asY2N3lQD/e[n:qauZ\u0026VB-7Yhx(v(id0Wl:DKQr8arR!Ivr9G8B8CM4edz}earR^HaB21(aARphB1v+carR^HarU]sauZ\u0026(", "ln": 8195, "col": 51, "line": 306 }, { "b": "avy6:Aa9=#az2!pz/fc7BAo5z3lQDlazCBgc#f}GjS[L\u0026aAz4nB-IvxyAL!-y-)4bx(!f6xcozYf^5I1eIPr@3jNs+arR!wauZ?}yAL+.CW\u0026vxwO#d5xEL5^asI4GjS]2We]k9pxlm/oau{#:auySYi$hJa3lQDlatkw\u003clVl*Xvrb{4wnbW\u003cBrC4ray]h0x-", "ln": 8622, "col": 7, "line": 327 }, { "b": "auZ\u00260f/{Hdd}{a*azJ$!aBsL8arR^HarUxgasIFAtwmv=aW3@[v{rUMdiJUxBAIRwaB4y2x\u003cz\u0026BaBdE3x\u003cz\u0026/azC[mwOibIatC01at2rf4gjj2arV7w3jNs+arR^", "ln": 8789, "col": 11, "line": 333 }, { "b": "arR!P4giKKarR^HC42zlvR^OrvSTdzzy=]uze.3GA+N6l3lQDlarR!oDltu[vLh.rx\u003e7Z5dj+]narR^HarU9bauZ\u0026Ry-\u003e\u003e-vLhFdzFa68edz}earR^HayP7ejS[e=y?mG%Bz9im3lQDlarR!EauZ\u0026Qe]$\u0026yv}v5xefFzrdj=O:atkw\u003cA+f8@x(mD)AT-u#arR^HaAzovjS[+$y?mG%Bz9im3lQDlarR!DauZ\u0026)efD5TarR^HarR^HarR^Hatkw\u003cADMhwx\u003eqg74gjj2arR^HABO", "ln": 9669, "col": 2, "line": 368 }, { "b": "3lQDlarR!EwPS6nzxKfRAboVrd0Wm64gjj2arV7w3jNs+arR!Ivr9Gnv\u003c0]SCRiFUB8kM2wHF#U4gjj2arR^HCX50XaB2IIedz}earR^HaBdDtjS]25v\u003en5@arR^HarU@vauZ\u0026)e[E9N3jNs+arR^WfcAX$BzblaaBmQtz:aWrarR^Hx\u003ewFoa:vH3fKk/GD\u0026", "ln": 13039, "col": 17, "line": 508 }, { "b": "auZ\u00264i$hJa3lQDlarR^WfcBe7B9hqvaz(mxBrC47aBmQtz.qFaarR^HarU]sauZ\u0026KD1w9Yatv7.4gjj2arV7w3jNs+arR!Le[l1!aB4xT4gjj2arU}ZwGTbUD1x5D3jNs+arR!EwPS6nzxKi^4gjj2Eld(B4gjj2BAhTHDKQr8arR!pz/fSray]z2auZ\u0026/wPq\u003cbA+cTyAa9^5wPPIBy\u0026sztdlv$CarR^Hwn+%gw].*buVQsfc[bPjarV7Pv{%E?xDOZmA=M8sdiJ%D3lQEt4giKK4gjj2fdEzrarR^Raw#=)B-IvxvixD0Coxj^xcqziz/YFjC42ifwGUYdaARpdaA?gfB.8Xlw/#hex(+y-x\u003eFM9z!a0bzY\u003cdnwGVe8y\u0026%qiz!paUx\u003eFMle!5dgarSc!4gjj2p+DQ6wfs2Tw{503BzkVhasIH:aBsL8arR^HC42zlD1Rkzedz}earR^HaB21(aARphB1v+carR^HarT0+xcotWCRiGAzGx]uBZ]JiAX4UbarR^HarU8njS[#4B1v+carR^HarUbojS(d#auZ\u0026+wP]m-x\u003eF\u0026tdjD(\u003ci$hJa3lQDlazCBgc)r\u003c*v{pS)", "ln": 14802, "col": 10, "line": 593 }, { "b": "aBKXaarR^HarV7w3lQDlarR!EwPS6nzxKi^4gjj2arV7w3jNs+arR!Kv\u003c0]SCW\u0026vEy?Wx\u003cc[dj!3jNs+arR^WfcB8iwPhi#wfuhfA=l1wBz\u0026pkADLYax(^\u0026dwQ5fjzE)ZcB1N[earR^Hfe1Cyz//LKaAz4pwPz\u003c6azb56By/FnBzb92aA.NyxLz72B1N[e", "ln": 16348, "col": 8, "line": 682 }, { "b": "zE)ZccN?a^3lQDlaBKXa4gjj2arUxgasH@BzE)Dfaz@q+at4E)4giKKarR^Hw]zYjc{5LkdiJ%D3lQDlarR!vw/@Htasni=diJ)UjS]25BzkP6B0#nZi$hJtarR^Haz@q=k0p2yi$hJtarR^HazCBgc)rESayYw5vqv}l3lQDlarR!KauZ\u0026(e{7/AwPGnAdf", "ln": 17789, "col": 34, "line": 748 }, { "b": "arU+GjS[=b4gjj2arR^HAV^H/xKLZ?e{7/AwPGnwe]USHB0#n=wncinBswT/i$hJtarR!PaA}Hky?j.qBs}5QB8kM2wHGk-ay##OyhW*7c){w\u003ear-)haAx8Ae]$\u0026yv}v5xefFHMe]2rszyu\u003eWdjEs/3jNs+arR!EwPS6nzxJ$rB-7.rAX5sYltp6+l@k0TjS(Ngas!NPe[DdQatCz\u0026ltp6+qCwP44gjj2Eld(B4giKKarSr!4gjj2asXHiwPS6nzxJvgzE[2mltp6PCw7]owGVe8y\u0026%qix(+zsxK@p", "ln": 20344, "col": 5, "line": 836 }, { "b": "wH[%CA=\u003e}xi$hJtarR!vw/@HzxLzJuv@DmaBAhIlBz(gLB98Cpv@@?RjV%{fA=\u003e}ocmf\u0026UBzbxfe[G2Jzz33Hq/)4]zF7vDdjDx^4gjj2arR^HBzbYkCoxs{A=k$Dpc?Pyas!MZnO@A!wN/B}wGUG3zGYPiB7]MgcN?a^3lQDlaBKXaarR^HA+funA=91qi$hJtaBMrX3jNsK3lQDAdH=.carScRqE%@)A=91daAITBx(mMaA+figwPIB2Bzg", "ln": 24227, "col": 33, "line": 983 }, { "b": "tpi@)w)]*#BsgupjS)79xd=I+xcotWltp6]4giKKarSr\u003ck$%:14gjj2x\u003ewFoBA}?pz!pb5wObT]wGTc0jS(a:B-7Yhx(v(pasnATwmYv!zE\u003eCezdC7rDKQr8arR!qwObT]wHIekzEW^5z/cWCdiJ%WA+funA=90^x\u003eGHIEjmk!3jNs+arR^WfcB2dwmV((zE:(dBzblaavy6:zeTq:q.q*1yH[S1zGY-mz/fA6zGC", "ln": 25841, "col": 6, "line": 1038 }, { "b": "z!a0bwIdLsAbP=sB1N[earV7PwO=B0azCBgd0f-NwP8f6zeS%cy?j.jjV%]nB-7-3w[=c]wg5GDclNezwozZ1e[GoDz/P@vdiJ%D3lQDlaz(4cB.\u003eRwwQ5fjA==vBjS)79xfcLf4gjj2arSr\u003clum0*B7GwA4gjj2Eir9qB7DFv4gjj2arTfFpEmuve\u003c:n+ao", "ln": 26043, "col": 64, "line": 1044 } ], "depth": 1, "facts": { "imp": [ [ "", "_Big_" ], [ "", "Big" ], [ "", "n.c.slice" ], [ "", "TypeError" ], [ "", "String" ], [ "", "parse" ], [ "", "NUMERIC.test" ], [ "", "Error" ], [ "", "n.charAt" ], [ "", "n.slice" ], [ "", "n.indexOf" ], [ "", "n.replace" ], [ "", "n.search" ], [ "", "n.slice" ], [ "", "n.substring" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "Error" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.c.join" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "x.constructor" ], [ "", "Big" ], [ "", "Error" ], [ "", "Error" ], [ "", "b.slice" ], [ "", "a.slice" ], [ "", "bz.unshift" ], [ "", "r.push" ], [ "", "r.shift" ], [ "", "qc.shift" ], [ "", "round" ], [ "", "Big" ], [ "", "x.plus" ], [ "", "x.c.slice" ], [ "", "Big" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.pop" ], [ "", "xc.shift" ], [ "", "require" ], [ "", "doc.from_str" ], [ "", "Big" ], [ "", "Error" ], [ "", "y.cmp" ], [ "", "Big" ], [ "", "x.div" ], [ "", "x.times" ], [ "", "Big" ], [ "", "x.minus" ], [ "", "Big" ], [ "", "xc.slice" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.constructor" ], [ "", "Error" ], [ "", "y.times" ], [ "", "x.times" ], [ "", "one.div" ], [ "", "Error" ], [ "", "round" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "Big" ], [ "", "Error" ], [ "", "Math.sqrt" ], [ "", "stringify" ], [ "", "x.c.join" ], [ "", "Math.sqrt" ], [ "", "Big" ], [ "", "s.toExponential" ], [ "", "s.indexOf" ], [ "", "Big" ], [ "", "half.times" ], [ "", "t.plus" ], [ "", "x.div" ], [ "", "t.c.slice.join" ], [ "", "t.c.slice" ], [ "", "r.c.slice.join" ], [ "", "r.c.slice" ], [ "", "round" ], [ "", "Big" ], [ "", "Array" ], [ "", "c.shift" ], [ "", "c.pop" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "n.toString" ], [ "", "Error" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "stringify" ], [ "", "_Big_" ], [ "", "define" ], [ "", "parket-slot" ] ], "mbr": [ "Big.Big", "Big.DP", "Big.NE", "Big.PE", "Big.RM", "Big.default", "Big.prototype", "Big.roundDown", "Big.roundHalfEven", "Big.roundHalfUp", "Big.roundUp", "Big.strict", "GLOBAL.Big", "Math.sqrt", "NUMERIC.test", "P.abs", "P.add", "P.cmp", "P.div", "P.eq", "P.gt", "P.gte", "P.lt", "P.lte", "P.minus", "P.mod", "P.mul", "P.neg", "P.plus", "P.pow", "P.prec", "P.round", "P.sqrt", "P.sub", "P.times", "P.toExponential", "P.toFixed", "P.toJSON", "P.toNumber", "P.toPrecision", "P.toString", "P.valueOf", "a.length", "a.slice", "arguments.length", "b.length", "b.slice", "bz.unshift", "c.length", "c.pop", "c.shift", "define.amd", "doc.from_str", "half.times", "module.exports", "n.c", "n.c.slice", "n.charAt", "n.e", "n.indexOf", "n.length", "n.replace", "n.s", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "q.c", "q.e", "q.s", "qc.shift", "r.c", "r.c.slice", "r.c.slice.join", "r.e", "r.length", "r.push", "r.shift", "s.charAt", "s.indexOf", "s.length", "s.slice", "s.toExponential", "t.c", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c", "x.c.join", "x.c.length", "x.c.push", "x.c.slice", "x.constructor", "x.constructor.RM", "x.div", "x.e", "x.minus", "x.plus", "x.s", "x.times", "xc.length", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.c", "y.cmp", "y.e", "y.s", "y.times", "yc.length" ], "tgt": [ "Array", "Big", "Error", "Math.sqrt", "NUMERIC.test", "String", "TypeError", "_Big_", "a.slice", "b.slice", "bz.unshift", "c.pop", "c.shift", "define", "doc.from_str", "half.times", "n.c.slice", "n.charAt", "n.indexOf", "n.replace", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "parse", "qc.shift", "r.c.slice", "r.c.slice.join", "r.push", "r.shift", "require", "round", "s.charAt", "s.indexOf", "s.slice", "s.toExponential", "stringify", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c.join", "x.c.push", "x.c.slice", "x.constructor", "x.div", "x.minus", "x.plus", "x.times", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.cmp", "y.times" ], "funcs": [ [ "anonymous", 208 ], [ "_Big_", 2700 ], [ "Big", 2914 ], [ "parse", 4135 ], [ "round", 5516 ], [ "stringify", 7170 ], [ "anonymous", 7968 ], [ "anonymous", 8282 ], [ "anonymous", 9177 ], [ "anonymous", 11913 ], [ "anonymous", 12101 ], [ "anonymous", 12300 ], [ "anonymous", 12478 ], [ "anonymous", 12674 ], [ "anonymous", 12848 ], [ "anonymous", 15138 ], [ "anonymous", 15691 ], [ "anonymous", 15906 ], [ "anonymous", 17587 ], [ "anonymous", 18362 ], [ "anonymous", 19017 ], [ "anonymous", 19449 ], [ "anonymous", 20651 ], [ "anonymous", 22410 ], [ "anonymous", 23235 ], [ "anonymous", 23955 ], [ "anonymous", 24180 ], [ "anonymous", 24885 ], [ "anonymous", 25575 ], [ "anonymous", 25947 ] ], "metrics": { "ast": { "op.eq": 35, "op.ge": 5, "op.gt": 29, "op.le": 5, "op.lt": 42, "op.ne": 31, "op.add": 59, "op.bor": 3, "op.div": 6, "op.lor": 37, "op.mod": 2, "op.mul": 1, "op.shr": 1, "op.sub": 40, "op.xor": 3, "op.band": 4, "op.bnot": 14, "op.land": 26, "op.lnot": 39, "max_depth": 26, "call_count": 133, "node_count": 7152, "member_count": 114, "max_array_len": 1, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0.01, "op_density.ne": 0, "op_density.add": 0.01, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0.01, "op_density.mod": 0, "op_density.mul": 0, "op_density.shr": 0, "op_density.sub": 0.01, "op_density.xor": 0, "sequence_count": 2, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 4, "member_depth_max": 4, "const_return_function_count": 1, "const_return_function_ratio": 0.03 }, "file": { "size": 26220, "entropy": 4.73 }, "text": { "lines": 1052, "top_char": 101, "max_ws_run": 34, "digit_ratio": 0.03, "space_count": 7606, "char_entropy": 4.73, "unique_chars": 91, "top_char_null": 0, "string_density": 0.04, "top_char_ratio": 0.05, "ascii_art_lines": 2, "avg_line_length": 22.92, "max_line_length": 104, "empty_line_ratio": 0.21, "last_line_length": 9, "whitespace_ratio": 0.37, "identifier_density": 1.35, "line_length_stddev": 24.16, "normalized_string_count": 1.45, "repeated_char_sequences": 48, "suspicious_comment_ratio": 0.09, "suspicious_identifier_ratio": 0.14, "normalized_unique_identifiers": 12.25 }, "binds": { "count": 294 }, "binary": { "peak_region_bytes": 21100, "peak_region_entropy": 4.89 }, "source": { "function_count": 5 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 232, "count": 47, "avg_length": 4.94, "max_length": 20, "avg_entropy": 1.61, "empty_count": 7, "entropy_stddev": 1.4 }, "comments": { "chars": 10434, "count": 138, "lines": 280, "base64": 2, "high_entropy": 10, "to_code_ratio": 0.36, "url_in_comments": 1 }, "functions": { "count": 5, "nested": 2, "density": 2.85, "anonymous": 25, "avg_params": 1.1, "code_ratio": 1.74, "max_params": 4, "one_liners": 1, "length_stddev": 185.18, "over_100_lines": 3, "over_500_lines": 1, "avg_name_length": 5.4, "no_params_count": 8, "avg_length_lines": 61.17, "max_length_lines": 1046, "min_length_lines": 1, "avg_nesting_depth": 1, "max_nesting_depth": 2, "single_char_params": 17, "avg_param_name_length": 2.21 }, "identifiers": { "count": 1418, "unique": 123, "avg_length": 4.61, "max_length": 13, "min_length": 1, "avg_entropy": 1.73, "reuse_ratio": 0.09, "length_stddev": 3.07, "sequential_names": 17, "single_char_count": 17, "single_char_ratio": 0.14, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.69, "all_uppercase_ratio": 0.13, "underscore_prefix_count": 1 } } }, "id": 1, "mol": "O₂(SAs)H₃(CmDb₅Os)", "path": "/data/samples/bad/foraged/javascript/npmjs.org/ossf-malicious-packages/thirdwebb/thirdwebb-0.0.8.tgz!!package/big.mjs", "pid": 0, "risk": 126, "sha": "cc4f38d2c43eae53227a80cb79358fe6373f067d82d5b4b9e1cc135a0fbfbcc3", "size": 26220, "traits": [ { "id": "metadata/build/bundler/wrapper::js-umd-wrapper-amd", "conf": 0.9, "crit": 2, "desc": "Contains a UMD wrapper's AMD branch", "spans": [ [ 25889, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 379, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 568, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 6234, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8243, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 62, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 586, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1779, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 154, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 4184, 18 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 7252, 9 ] ] }, { "id": "micro-behaviors/data/string/access::js-charat-lookup", "conf": 0.82, "crit": 2, "desc": "JavaScript string character lookup", "spans": [ [ 4292, 0 ] ] }, { "id": "micro-behaviors/data/string/concat::join-empty-separator-call", "conf": 0.82, "crit": 3, "desc": "Joins values without a separator", "spans": [ [ 7249, 8 ], [ 20408, 14 ], [ 20437, 14 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-method-call", "conf": 0.98, "crit": 3, "desc": "Calls a method named from_str", "spans": [ [ 14982, 12 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-no-argument-call", "conf": 0.98, "crit": 3, "desc": "Calls from_str with no arguments", "spans": [ [ 14985, 11 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "spans": [ [ 24291, 10 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1379, 8 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-require-in-try", "conf": 0.9, "crit": 3, "desc": "CommonJS require inside a try block", "spans": [ [ 14930, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-array-join-symbol", "conf": 0.5, "crit": 1, "desc": "Join using empty string delimiter", "spans": [ [ 7252, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::external-require-from-str-dispatch", "atk": "T1195.002", "conf": 0.97, "crit": 4, "desc": "External require followed by from_str dispatch", "spans": [ [ 14953, 43 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::require-slot-loader", "atk": "T1195.002", "conf": 0.995, "crit": 4, "desc": "Requires slot loader module", "spans": [ [ 14953, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 15002, 20 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::from-str-empty-catch", "conf": 0.97, "crit": 3, "desc": "Empty catch follows from_str call", "spans": [ [ 14986, 36 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.85, "crit": 3, "desc": "JavaScript empty-string accumulator initializer", "spans": [ [ 2319, 11 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-comment-exec-recognized-marker", "conf": 0.9, "crit": 1, "desc": "Recognized comment-heavy JavaScript marker", "uses": [ 0 ], "spans": [ [ 25889, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::slot-loader-stub", "atk": "T1195.002,T1059.007", "conf": 0.998, "crit": 5, "desc": "Slot loader runs during import", "uses": [ 13, 17, 20, 22 ], "spans": [ [ 14930, 31 ], [ 14953, 22 ], [ 14982, 12 ], [ 14986, 36 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-string-deobfuscation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "String deobfuscation routine", "uses": [ 11, 18, 24 ], "spans": [ [ 4292, 9 ], [ 7252, 9 ], [ 7353, 9 ], [ 13603, 10 ], [ 25889, 42 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::from-str-import-time-loader-stub", "atk": "T1195.002,T1059.007", "mbc": "B0024", "conf": 0.98, "crit": 5, "desc": "Import-time from_str loader swallows results", "uses": [ 13, 14, 17, 22 ], "spans": [ [ 14930, 31 ], [ 14982, 12 ], [ 14985, 11 ], [ 14986, 36 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DJ", "n": [ { "c": 3, "d": "Recognized markers for missing devDependencies", "i": "objectives/supply-chain/impersonation/package/manifest::npm-recognized-missing-devdeps-marker", "o": 0, "z": 20, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "arR\u003eCvqPN1iV]R*xLzG$Cv+k)a$J", "n": [ { "c": 2, "d": "npm package has name field", "i": "metadata/package/quality/empty::npm-has-name", "o": 5, "z": 9, "cf": 1.0 } ], "ln": 2, "addr": 3 }, { "b": "arR\u003eswPIv4x(Ffdz/c:War\u003c8]B8tu4y+cYvvrlJwaz1#5C}BbReP(bCaz++3A::0lazbLjayPq1x([x7A^olQA+e-{B7]Mgay]4[x(do{ayPq8BzbJ5Bzkkeec", "n": [ { "c": 3, "d": "Package has meaningful description", "i": "metadata/package/manifest/description::has-description", "o": 29, "z": 77, "cf": 0.75 } ], "ln": 3, "addr": 27 }, { "b": "arR\u003eKwPz\u003caz/c:War\u0026G(fFkseec", "n": [ { "c": 3, "d": "Uses conventional version format", "i": "metadata/package/manifest/freeform::conventional-version", "o": 128, "z": 5, "cf": 0.75 } ], "ln": 4, "addr": 126 }, { "b": "arR\u003ezwQeGrA+6kniV}S", "ln": 5, "addr": 149 }, { "b": "arR^Hb4kI3x([x7A^n\u0026W", "ln": 6, "addr": 166 }, { "b": "arR^Hb4tn0zGP!u", "ln": 17, "addr": 349 }, { "b": "arT@v", "ln": 18, "addr": 363 }, { "b": "arR\u003etCYmOwBAnS!aBs", "n": [ { "c": 3, "d": "Package has multiple entry points", "i": "metadata/package/quality/source::has-multiple-entries", "o": 371, "z": 10, "cf": 0.8500000238418579 } ], "ln": 19, "addr": 369 }, { "b": "arR^Ha$+62aBs", "ln": 20, "addr": 385 }, { "b": "arR^HarR\u003exze:AlBrS:*a$+JTx\u003eG5nyi7NI", "ln": 21, "addr": 397 }, { "b": "arR^Ha$+J/vpK7YxjSYgB8L}uiV]R0fk$ufyHH\u003c!e]2DCzxY", "ln": 26, "addr": 524 }, { "b": "arV7-", "ln": 27, "addr": 564 }, { "b": "arR\u003eGwPhNex([olC{ko(DJ", "n": [ { "c": 2, "d": "Package has repository field", "i": "metadata/package/manifest/repository::has-repository-field", "o": 572, "z": 60, "cf": 0.8999999761581421 } ], "ln": 28, "addr": 570 }, { "b": "arR^Hb6n9HwG\u003ceTb4\u003eRia$J", "ln": 29, "addr": 589 }, { "b": "arR^Hb6v{xb03?\u003cxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1R9tBrQ", "n": [ { "c": 5, "d": "Impersonation of the popular big.js library", "i": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation-clone", "o": 613, "z": 37, "cf": 0.9900000095367432 } ], "ln": 30, "addr": 609 }, { "b": "arV7-", "ln": 31, "addr": 661 }, { "b": "arR\u003eBvqfQ6iV]RQx\u003eFRv", "ln": 32, "addr": 667 }, { "b": "arR\u003eqA=leywPw$Qar\u003eoexd^}ua$J", "ln": 33, "addr": 685 }, { "b": "arR\u003eBz!a0bwG\u003ceTb4tn0e]tuAa$J", "n": [ { "c": 2, "d": "Package has ESM module entry", "i": "metadata/package/manifest/entrypoint::has-module-entry", "o": 711, "z": 11, "cf": 0.8500000238418579 } ], "ln": 34, "addr": 709 }, { "b": "arR\u003epB-.qnAW0K!DJ", "ln": 35, "addr": 733 }, { "b": "arR^Hb5Q?awG\u003ceTb28=YxKLE*awDuZvrDi@y?W=hec", "ln": 36, "addr": 748 }, { "b": "arR^Hb4UR1x(1$Oar\u003cJtv}W?Yy^qSIvqfKgv@Did", "n": [ { "c": 3, "d": "npm package author uses free email provider", "i": "metadata/package/manifest/author/domain::npm-free-email-provider", "o": 787, "z": 17, "cf": 0.699999988079071 } ], "ln": 37, "addr": 783 }, { "b": "arV7-", "ln": 38, "addr": 817 }, { "b": "arR\u003eqB.t+tiV@+", "n": [ { "c": 2, "d": "Package has bugs/issues URL", "i": "metadata/package/manifest/repository::has-bugs-url-field", "o": 825, "z": 50, "cf": 0.800000011920929 } ], "ln": 39, "addr": 823 }, { "b": "arR^Hb6v{xb03?\u003cxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1.lGB9h5na]", "ln": 40, "addr": 836 }, { "b": "arV7-", "ln": 41, "addr": 891 }, { "b": "arR\u003eAx\u003e7Z(B7DKRar\u003cJKr3A\u003c", "ln": 45, "addr": 936 }, { "b": "arR\u003eHv@=p5BAnS!aBs", "ln": 46, "addr": 957 }, { "b": "arR^Hb4tXey?a.Jar\u003e]Gv\u003cg", "n": [ { "c": 3, "d": "Package has build script (compiled)", "i": "metadata/package/scripts::has-build-script", "o": 977, "z": 13, "cf": 0.8500000238418579 } ], "ln": 47, "addr": 973 }, { "b": "arV7-", "ln": 48, "addr": 993 }, { "b": "arR\u003eux(4v4b03\u0026J", "n": [ { "c": 1, "d": "Package exposes runtime entrypoints", "i": "objectives/supply-chain/install-hook/hook-only::preinstall-only-package-entrypoints", "o": 1001, "z": 17, "cf": 0.8999999761581421 } ], "ln": 49, "addr": 999 }, { "b": "arR^Hb4tn0e]2CKec", "ln": 50, "addr": 1013 }, { "b": "arR^Hb4tn0e]tuAa]", "ln": 51, "addr": 1028 }, { "b": "arT@v", "ln": 52, "addr": 1043 }, { "b": "arR\u003euB-7-7zF7dOaBs", "n": [ { "c": 3, "d": "Package has funding information", "i": "metadata/package/manifest/publishing::has-funding", "o": 1051, "z": 66, "cf": 0.8500000238418579 } ], "ln": 53, "addr": 1049 }, { "b": "arR^Hb6n9HwG\u003ceTb5.BizEWQ3y?m9#x)a5iec", "ln": 54, "addr": 1065 }, { "b": "arR^Hb6v{xb03?\u003cxMOunB2\u003e%cz/xo9v@Dg1wN/*@C4Apoz/4dpx\u003eIg4a]", "ln": 55, "addr": 1096 }, { "b": "arV7-", "ln": 56, "addr": 1143 }, { "b": "arR\u003eswPhi#wmYT*x\u003equfiV@+", "n": [ { "c": 1, "d": "Package has runtime dependencies", "i": "metadata/package/dependencies::has-runtime-deps", "o": 1151, "z": 22, "cf": 0.8500000238418579 } ], "ln": 57, "addr": 1149 }, { "b": "arR^Hb5zggeP+ApwPw$Qar\u003ebCe?![ra]", "ln": 58, "addr": 1170 }, { "b": "arV7", "ln": 59, "addr": 1197 } ], "depth": 1, "facts": { "imp": [ [ "^0.0.9", "log-taker" ] ], "metrics": { "file": { "size": 1203.0, "entropy": 4.56, "size_bytes": 1203.0 }, "binary": { "overall_entropy": 4.56, "peak_region_bytes": 1203.0, "peak_region_entropy": 4.54 } } }, "id": 2, "mol": "O(S)Md(Pa₃)", "path": "/data/samples/bad/foraged/javascript/npmjs.org/ossf-malicious-packages/thirdwebb/thirdwebb-0.0.8.tgz!!package/package.json", "refs": [ { "to": "pkg:github/mikemcl/big.js", "off": 621, "kind": "repository" }, { "to": "pkg:npm/log-taker", "off": 1175, "file": 10, "kind": "dependency" }, { "to": "big", "off": 226, "file": 3, "kind": "local" }, { "to": "big.mjs", "off": 416, "file": 1, "kind": "local" }, { "to": "./big.mjs", "off": 414, "file": 1, "kind": "local" }, { "to": "./big.js", "off": 445, "file": 3, "kind": "local" }, { "to": "./package.json", "off": 529, "kind": "local" } ], "risk": 122, "sha": "9139f23a168729177baa494249ca9fd3f487d731b66c65d53a642af05c3c119e", "size": 1203, "traits": [ { "id": "objectives/supply-chain/impersonation/npm-clone::author-retained-original", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.699999988079071, "crit": 1, "desc": "author retained original", "spans": [ [ 787, 17 ] ] }, { "id": "metadata/package/manifest/entrypoint::pkg-exports-field-entry", "conf": 0.6000000238418579, "crit": 2, "desc": "\"exports\": field in package.json", "spans": [ [ 371, 10 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.8500000238418579, "crit": 2, "desc": "Package has repository URL", "spans": [ [ 613, 37 ] ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.949999988079071, "crit": 4, "desc": "Impersonates MikeMcl/big.js repository", "spans": [ [ 613, 37 ] ] }, { "id": "metadata/package/manifest/description::has-description", "conf": 0.75, "crit": 3, "desc": "Package has meaningful description", "spans": [ [ 29, 77 ] ] }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "npm package has version field", "spans": [ [ 128, 5 ] ] }, { "id": "metadata/package/manifest/entrypoint::pkg-module-field", "conf": 0.6000000238418579, "crit": 2, "desc": "\"module\": field in package.json", "spans": [ [ 711, 9 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.8999999761581421, "crit": 2, "desc": "Package has repository field", "spans": [ [ 572, 60 ] ] }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.8999999761581421, "crit": 2, "desc": "Repository uses common git host", "spans": [ [ 613, 37 ] ] }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm package has name field", "spans": [ [ 5, 9 ] ] }, { "id": "metadata/package/manifest/publishing::has-funding", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has funding information", "spans": [ [ 1051, 66 ] ] }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"build\": script in package.json", "spans": [ [ 977, 3 ] ] }, { "id": "metadata/package/quality/source::has-multiple-entries", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has multiple entry points", "spans": [ [ 371, 10 ], [ 711, 9 ] ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation-clone", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.9900000095367432, "crit": 5, "desc": "Impersonation of the popular big.js library", "spans": [ [ 613, 37 ], [ 787, 17 ] ] }, { "id": "fetch/dependency-verdict", "crit": 5, "desc": "Fetched dependency log-taker@0.1.0 classified hostile", "spans": [ [ 1175, 16 ] ] } ], "type": "package.json" }, { "ctx": [ { "b": "aA/W@fFk6?3lQ/vavdb\u003ezddl%efFLkB95@QwNPU9eP+[.B-Rapy?Wv0vrcSow]zYjvrb*\u003eBAg/gC}A#QwN/B}x(v(iwmYm+zddl6vrc77xL?s5x\u003e5+83lQ/vavy6^D2^RixMLvBv\u003c@JQfFUHdo\u003e!9Jvp:l$o\u003ee0FB.tx7x(jv!asXGRxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1ZiUlQ::qmj@B/4gjjcfawmIasH\u0026AzEW^5z/cWCm[=YBk$\u0026ZIDKQr8aszqMwGV5oA+P39cP.+AarU\u0026oAV^X.xdKG04giKKarR^HfdFC3dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([\u003cmmoZDk%!mlavFT/k#*PTqY)LtdK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK(]34giKK4gjj2arSr\u003caxi2=ay]4}vrDydaA?gfB.bRpvR6v]Coy:BB95KlwGUY8By/8@A=SvEx([35zxK4mwGV5ovru6\u003eaAy[dxjVcp4giKKarR^HfdEzrarR^HasXHkxK@r6vr=H6B.@ms", "ln": 14, "col": 11, "line": 2 }, { "b": "B0bykaA8jgA::67z/fRsx(n9jy\u003c6Jgxcp-0C4(2iz/dPB3lQDlarScRwncifvqYP#B8=kxefFwswft\u0026fCoz9zBz8!mwOkB[x)a5gwQ5fjzE)ZcB1N[earR^HasY2N3lQDlavG3GjS(HlefD5TarR^HarR^Hatkw\u003cfD+EQawCd7uQNZ13jNs+arR^WdH=.carR^HdJ?Y7wGV2iB-4", "ln": 520, "col": 63, "line": 18 }, { "b": "3lQDlatkhN3lQDlarScRra]?=zE)D?Bzk]faz2!pz/fc7Brz#bmjxu/BrC1fwftt)zE)l#xDRIjx\u003e7*0Bz\u003e91A+PA7aAz4nB-Iwvaz2!pz/fc7Bzkf1az#atvruj4zy#w9arR^HasXGZn)#)Kq!6\u0026ZAc9juB.$P0A=Tn:eJk9/3lQDlarScReIO}kfFCgmazC)tBzbkdze0)4zfoXrA+e:0zeA\u003c4wmYo]wQ5fjzE)ZcaA?gfB.8Xlw/$I8", "ln": 1315, "col": 2, "line": 38 }, { "b": "vr=H6B.@mwwN/T}zdNP}wN(]{CYmOswO#PjC42ifwGU]6ayMxVx\u003eF$tvS==nBzbxfaz++ex(\u003eFiB0bvsBrCdjw]zZ1wN)z53lQDlarSc!4gjj2arTGHauZ\u00265f!sB\u0026arR^HarR^HarSr\u003cats{WzY*+*fFCgmfBXu#3lQDlatkhN3lQDlarScRs7(e.", "ln": 1731, "col": 24, "line": 49 }, { "b": "dK([$dK([$dK([$dK([$dK([$dK)7X3jNsK3lQDlatkw\u003cmriA!AV/jgB8$=5wPGEk3lQDlawLi%miB-ocTg4]xd^}ut{7HC4gjj2arTlJrZxzJl)aSnpc?Pyas!MZnP5YWy?WA5cObYlarR^HnLSqLoI4SVl@k0?aw2sek$\u003c\u003cras!MZwmYm+zddl6Abn@)wPGjI4gjj2arTlJrZxzJl%\u0026?^auZ\u0026spf6UOnKKWKaszhFB-7-7zF78ez!9Abedz{", "ln": 2255, "col": 82, "line": 61 }, { "b": "y\u0026%qw4gjj2arR^RfawmharR!sB-7Yhx(v(iltp6XzyDYP4gjj2arR^HC42zlCPYc(Bzbxfi$hJa3lQDlarR^WfcAY3vpB4:ay/tcB98CBv@#TfaA.:lxjSifx([3bB-X:zwP]:o3lQDlarR!vw/@GBd0M\u003eGzGx]dzEWl@w/%AOxdknLDKQr8arR^HarR!EwPS6nzxJ*tjV$}JrzC}JmOcuzl)9*6ayPq6B.$YcBAo6JwO#d5xDPD3jS(B3koKr1x\u003eH^3diHU]zE[2mltp6XzyETR3lQDlarR!P4giKKarR^HarSr\u003cavHu\u003ey?Wx/By^6l3lQDlarR!vw/@HtazC.mByx5%wP8f6ltp6YaBsL8ao", "ln": 2895, "col": 42, "line": 87 }, { "b": "arU[YB09Q*zz2#(4gjj2arR^HarU[YwGTbUzz2GZ4gjj2arR^HarU[Yv\u003c0]Szz2AKB8kM2wHF#?4gjj2arR^HEir9qB7DFv4gjj2arR^HarUxgasItSAaJ%1az@qBjV%]nB98CpzF7sCaBsL8arR^HarR^HarUxgasGM\u003cxd!mEA+P39au.\u003eJaARTDwGSrDaAR)FwP8f6zxH8=jS(aYx\u003eIc$BseHWDKQr8arR^HarR^HarR!GxMw3naxiS9wKQSWz/Nl$pf6UOnKKWKasztvy\u0026%qpdlv$CarR^HarR^HarQ", "ln": 3189, "col": 7, "line": 99 }, { "b": "y\u0026%qw4gjj2asY2N3lQE6B-7Yhx(v(iAa9^dwHI^Oaz@RJDKQr8arR!Ivr9G4efFTTaz#0S4giKKarR^Hx\u003ewFoaX(3imn=YAe{7VCBsq2QdiJ%D3lQDlarR!GxMw3navQr\u003ez/Nl$pf6UOnKKWKasz5Hzdm6%cN?a^3lQDlaBKXa4gjj2arSr\u003cavG^.wPzT4zE\u003c@ix\u003eIro4gjj2arU[YB09Q*zz2BjvraUQc[)7)jV%]neHIV9asIaIjS[R{B8kM2wHGnZefDJ0diHU]f/]*K4gjj2arSr\u003cavG^Jx(do{aAhmkzGF8L3lQDlazCBgc[5THjS[R{x(mD)CU.{1cOu+}diH!%eIOW%zxI7+zz2%vAbn@)wHF]UcOcw/cN?a^3jNs+arR^WfcAYdAbPS9zGGP3y-)tdA=12I3lQDlazCBgc[5^LjS[R{B7F^2v}WnzwIm:DdiH!%fEXb\u003e4giKKarR^HarSr\u003cavG^.wPzT4zE\u0026", "ln": 4120, "col": 36, "line": 139 }, { "b": "ay#VUazA[D3lQDlarR!ras/O$d@D$Xy?Wx\u003cc$%!OatCrb4gjj2arR^HzxI7+zz30MvSMTix(mMifF1tXdlv$CarR^HEir9qB7DFdw/@HkauQ=2diJ%D3jNs+arR^Hatkw\u003cnP5SYxjV9o4gjj2arR^HwGTbUzz2:pzFa68i$hJtarR!P4giKKarR^HzFQBUaz@/FwO#d5xGDUg4gjj2arSr\u003cavG^.wPzT4zE\u003c@bwNPa-zF78rwPzZge!5dgarR!sz/M%Gx=]LYfGQy\u003eauQ=:y-\u003e5Kaz@/wxKL{EBsp\u0026Lau.\u003egcOM]fdiHb\u003ex/=+h4gjj2arUxgasH}DjV%{9y:*GN4giKKarR^HarSr\u003cax\u0026t%z.qFaarR^HarU[Yv\u003c0]S", "ln": 4538, "col": 17, "line": 158 }, { "b": "3jNs+arR^Hatkw\u003cCW\u003c%0wl*r(B0bNrwGUI$xk8Dgvp\u003cQ)AV/EqwGUI$xk8DgBzb98az\u003eLjayX[8A=l8rwmYo]B-n@x3lQDlarR!zz/PzijQ?-varR^HarR!Ez6g#8jS(E4cmf\u003cWv{s1+t{8r]at\u003eo?D\u003c{A9arR^HarR!Ez6g#8jS(H5cmf\u0026-CW\u003c%0", "ln": 6186, "col": 34, "line": 226 }, { "b": "x\u003ezSsCQ%$Fz:![\u0026z/fc7Bzkf1efFUFph+2@wPzYraBsL8arR^HC42zlwGTbUCRiLU4gjj2arR^HB09Q*CRiFUyhW*7c){w\u003eedz}earR^Haz@q+aAGeKwO#d5xGDUg4gjj2arSr\u003cavQJ]z/fc7Bzkf1az#atvruj4zA!NqarR^Hx\u003ewFown:[YAbPS9zGGP3y:*GN4gjj2arR^HB09Q*B1Q%ovraUQc[)7)d\u003cclTau*]5au{$@e*?+(aAGeRy?Wx\u003cc]0d[iV]^$diHb-c$KI-ats{5asy.FauyR)wH/bSas!NCi$hJa3lQDlarR^WfcB2dA=2l3az#atvruj4zy#w9arR^HEir9qB7DFdw/@HkauQ=2diJ%D3lQDlarR!szV", "ln": 7185, "col": 18, "line": 264 }, { "b": "wO=B0azCBgc$KI-az@RJDKQr8arR^HarR!FauZ\u0026*e]$\u0026yv}v5xefFHMas!MZe*?+(aAGeRy?Wx\u003cc$K??4gjj2arR^HEglJaarR!Paz2wgwGUY0asIaIj%hNeaBsL8arR^HarU.F", "ln": 7629, "col": 9, "line": 280 }, { "b": "zxK4mwGVe8y\u0026%qiz!paUx\u003eFMlefF\u003eK4gjj2asXGRarR^HarSuXx\u003ewGfxK#DixKM6}aARpdaAH$dwGVe8y\u0026%qw4gjj2asY2N3lQD/e[n:qauZ\u0026VB-7Yhx(v(id0Wl:DKQr8arR!Ivr9G8B8CM4edz}earR^HaB21(aARphB1v+carR^HarU]sauZ\u0026(", "ln": 8195, "col": 51, "line": 306 }, { "b": "avy6:Aa9=#az2!pz/fc7BAo5z3lQDlazCBgc#f}GjS[L\u0026aAz4nB-IvxyAL!-y-)4bx(!f6xcozYf^5I1eIPr@3jNs+arR!wauZ?}yAL+.CW\u0026vxwO#d5xEL5^asI4GjS]2We]k9pxlm/oau{#:auySYi$hJa3lQDlatkw\u003clVl*Xvrb{4wnbW\u003cBrC4ray]h0x-", "ln": 8622, "col": 7, "line": 327 }, { "b": "auZ\u00260f/{Hdd}{a*azJ$!aBsL8arR^HarUxgasIFAtwmv=aW3@[v{rUMdiJUxBAIRwaB4y2x\u003cz\u0026BaBdE3x\u003cz\u0026/azC[mwOibIatC01at2rf4gjj2arV7w3jNs+arR^", "ln": 8789, "col": 11, "line": 333 }, { "b": "arR!P4giKKarR^HC42zlvR^OrvSTdzzy=]uze.3GA+N6l3lQDlarR!oDltu[vLh.rx\u003e7Z5dj+]narR^HarU9bauZ\u0026Ry-\u003e\u003e-vLhFdzFa68edz}earR^HayP7ejS[e=y?mG%Bz9im3lQDlarR!EauZ\u0026Qe]$\u0026yv}v5xefFzrdj=O:atkw\u003cA+f8@x(mD)AT-u#arR^HaAzovjS[+$y?mG%Bz9im3lQDlarR!DauZ\u0026)efD5TarR^HarR^HarR^Hatkw\u003cADMhwx\u003eqg74gjj2arR^HABO", "ln": 9669, "col": 2, "line": 368 }, { "b": "3lQDlarR!EwPS6nzxKfRAboVrd0Wm64gjj2arV7w3jNs+arR!Ivr9Gnv\u003c0]SCRiFUB8kM2wHF#U4gjj2arR^HCX50XaB2IIedz}earR^HaBdDtjS]25v\u003en5@arR^HarU@vauZ\u0026)e[E9N3jNs+arR^WfcAX$BzblaaBmQtz:aWrarR^Hx\u003ewFoa:vH3fKk/GD\u0026", "ln": 13039, "col": 17, "line": 508 }, { "b": "auZ\u00264i$hJa3lQDlarR^WfcBe7B9hqvaz(mxBrC47aBmQtz.qFaarR^HarU]sauZ\u0026KD1w9Yatv7.4gjj2arV7w3jNs+arR!Le[l1!aB4xT4gjj2arU}ZwGTbUD1x5D3jNs+arR!EwPS6nzxKi^4gjj2Eld(B4gjj2BAhTHDKQr8arR!pz/fSray]z2auZ\u0026/wPq\u003cbA+cTyAa9^5wPPIBy\u0026sztdlv$CarR^Hwn+%gw].*buVQsfc[c=\u003cxK#6fwGTc1aBtkVdk2asByO#jwGTc1aBtkVdgDRbaBLwxvru0)asH/wA=k$EaBsL8arV7w3jNs+atkhN3lQDldJ?S2BAIRwayMygwP]m-x\u003eFMjxM4%6aA?gfB.8XfB0bNrwGVe8y\u0026%qiz!pblxLzJgltp6PzeS%cy\u0026pCrxK@rfvqH6$aA7\u003cmltp6PC}GKkarR^Rfawmhaw:Xcz!6$Nazb+lv@#B6zxHuMdiJ%D3lQDlaA?glaBdQwCQ%pharR^HarU[KjS[\u0026Wx(+*m3lQDlarR^[x\u003eFLKaB2IGz/fSrA=\u003e(lz/Nxr3lQDlarR!nauZ\u0026(e]@MM3lQDlarR!oauZ?}C{2l)zE[2mltp6XC{$f{B2%*r4gjj2arUxgasFyUe[n9tt}3(", "ln": 14802, "col": 10, "line": 593 }, { "b": "aBKXaarR^HarV7w3lQDlarR!EwPS6nzxKi^4gjj2arV7w3jNs+arR!Kv\u003c0]SCW\u0026vEy?Wx\u003cc[dj!3jNs+arR^WfcB8iwPhi#wfuhfA=l1wBz\u0026pkADLYax(^\u0026dwQ5fjzE)ZcB1N[earR^Hfe1Cyz//LKaAz4pwPz\u003c6azb56By/FnBzb92aA.NyxLz72B1N[e", "ln": 16377, "col": 8, "line": 681 }, { "b": "zE)ZccN?a^3lQDlaBKXa4gjj2arUxgasH@BzE)Dfaz@q+at4E)4giKKarR^Hw]zYjc{5LkdiJ%D3lQDlarR!vw/@Htasni=diJ)UjS]25BzkP6B0#nZi$hJtarR^Haz@q=k0p2yi$hJtarR^HazCBgc)rESayYw5vqv}l3lQDlarR!KauZ\u0026(e{7/AwPGnAdf", "ln": 17818, "col": 34, "line": 747 }, { "b": "arU+GjS[=b4gjj2arR^HAV^H/xKLZ?e{7/AwPGnwe]USHB0#n=wncinBswT/i$hJtarR!PaA}Hky?j.qBs}5QB8kM2wHGk-ay##OyhW*7c){w\u003ear-)haAx8Ae]$\u0026yv}v5xefFHMe]2rszyu\u003eWdjEs/3jNs+arR!EwPS6nzxJ$rB-7.rAX5sYltp6+l@k0TjS(Ngas!NPe[DdQatCz\u0026ltp6+qCwP44gjj2Eld(B4giKKarSr!4gjj2asXHiwPS6nzxJvgzE[2mltp6PCw7]owGVe8y\u0026%qix(+zsxK@p", "ln": 20373, "col": 5, "line": 835 }, { "b": "wH[%CA=\u003e}xi$hJtarR!vw/@HzxLzJuv@DmaBAhIlBz(gLB98Cpv@@?RjV%{fA=\u003e}ocmf\u0026UBzbxfe[G2Jzz33Hq/)4]zF7vDdjDx^4gjj2arR^HBzbYkCoxs{A=k$Dpc?Pyas!MZnO@A!wN/B}wGUG3zGYPiB7]MgcN?a^3lQDlaBKXaarR^HA+funA=91qi$hJtaBMrX3jNsK3lQDAdH=.carScRqE%@)A=91daAITBx(mMaA+figwPIB2Bzg", "ln": 24256, "col": 33, "line": 982 }, { "b": "tpi@)w)]*#BsgupjS)79xd=I+xcotWltp6]4giKKarSr\u003ck$%:14gjj2x\u003ewFoBA}?pz!pb5wObT]wGTc0jS(a:B-7Yhx(v(pasnATwmYv!zE\u003eCezdC7rDKQr8arR!qwObT]wHIekzEW^5z/cWCdiJ%WA+funA=90^x\u003eGHIEjmk!3jNs+arR^WfcB2dwmV((zE:(dBzblaavy6:zeTq:q.q*1yH[S1zGY-mz/fA6zGC", "ln": 25870, "col": 6, "line": 1037 }, { "b": "z!a0bwIdLsAbP=sB1N[earV7PwO=B0azCBgd0f-NwP8f6zeS%cy?j.jjV%]nB-7-3w[=c]wg5GDclNezwozZ1e[GoDz/P@vdiJ%D3lQDlaz(4cB.\u003eRwwQ5fjA==vBjS)79xfcLf4gjj2arSr\u003clum0*B7GwA4gjj2Eir9qB7DFv4gjj2arTfFpEmuve\u003c:n+ao", "ln": 26072, "col": 64, "line": 1043 } ], "depth": 1, "facts": { "imp": [ [ "", "_Big_" ], [ "", "Big" ], [ "", "n.c.slice" ], [ "", "TypeError" ], [ "", "String" ], [ "", "parse" ], [ "", "NUMERIC.test" ], [ "", "Error" ], [ "", "n.charAt" ], [ "", "n.slice" ], [ "", "n.indexOf" ], [ "", "n.replace" ], [ "", "n.search" ], [ "", "n.slice" ], [ "", "n.substring" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "Error" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.c.join" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "x.constructor" ], [ "", "Big" ], [ "", "Error" ], [ "", "Error" ], [ "", "b.slice" ], [ "", "a.slice" ], [ "", "bz.unshift" ], [ "", "r.push" ], [ "", "r.shift" ], [ "", "qc.shift" ], [ "", "round" ], [ "", "Big" ], [ "", "x.plus" ], [ "", "x.c.slice" ], [ "", "Big" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.pop" ], [ "", "xc.shift" ], [ "", "require" ], [ "", "doc.from_str.then.catch" ], [ "", "doc.from_str.then" ], [ "", "doc.from_str" ], [ "", "Big" ], [ "", "Error" ], [ "", "y.cmp" ], [ "", "Big" ], [ "", "x.div" ], [ "", "x.times" ], [ "", "Big" ], [ "", "x.minus" ], [ "", "Big" ], [ "", "xc.slice" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.constructor" ], [ "", "Error" ], [ "", "y.times" ], [ "", "x.times" ], [ "", "one.div" ], [ "", "Error" ], [ "", "round" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "Big" ], [ "", "Error" ], [ "", "Math.sqrt" ], [ "", "stringify" ], [ "", "x.c.join" ], [ "", "Math.sqrt" ], [ "", "Big" ], [ "", "s.toExponential" ], [ "", "s.indexOf" ], [ "", "Big" ], [ "", "half.times" ], [ "", "t.plus" ], [ "", "x.div" ], [ "", "t.c.slice.join" ], [ "", "t.c.slice" ], [ "", "r.c.slice.join" ], [ "", "r.c.slice" ], [ "", "round" ], [ "", "Big" ], [ "", "Array" ], [ "", "c.shift" ], [ "", "c.pop" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "n.toString" ], [ "", "Error" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "stringify" ], [ "", "_Big_" ], [ "", "define" ], [ "", "parket-slot" ] ], "mbr": [ "Big.Big", "Big.DP", "Big.NE", "Big.PE", "Big.RM", "Big.default", "Big.prototype", "Big.roundDown", "Big.roundHalfEven", "Big.roundHalfUp", "Big.roundUp", "Big.strict", "GLOBAL.Big", "Math.sqrt", "NUMERIC.test", "P.abs", "P.add", "P.cmp", "P.div", "P.eq", "P.gt", "P.gte", "P.lt", "P.lte", "P.minus", "P.mod", "P.mul", "P.neg", "P.plus", "P.pow", "P.prec", "P.round", "P.sqrt", "P.sub", "P.times", "P.toExponential", "P.toFixed", "P.toJSON", "P.toNumber", "P.toPrecision", "P.toString", "P.valueOf", "a.length", "a.slice", "arguments.length", "b.length", "b.slice", "bz.unshift", "c.length", "c.pop", "c.shift", "define.amd", "doc.from_str", "doc.from_str.then", "doc.from_str.then.catch", "half.times", "module.exports", "n.c", "n.c.slice", "n.charAt", "n.e", "n.indexOf", "n.length", "n.replace", "n.s", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "q.c", "q.e", "q.s", "qc.shift", "r.c", "r.c.slice", "r.c.slice.join", "r.e", "r.length", "r.push", "r.shift", "s.charAt", "s.indexOf", "s.length", "s.slice", "s.toExponential", "t.c", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c", "x.c.join", "x.c.length", "x.c.push", "x.c.slice", "x.constructor", "x.constructor.RM", "x.div", "x.e", "x.minus", "x.plus", "x.s", "x.times", "xc.length", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.c", "y.cmp", "y.e", "y.s", "y.times", "yc.length" ], "tgt": [ "Array", "Big", "Error", "Math.sqrt", "NUMERIC.test", "String", "TypeError", "_Big_", "a.slice", "b.slice", "bz.unshift", "c.pop", "c.shift", "define", "doc.from_str", "doc.from_str.then", "doc.from_str.then.catch", "half.times", "n.c.slice", "n.charAt", "n.indexOf", "n.replace", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "parse", "qc.shift", "r.c.slice", "r.c.slice.join", "r.push", "r.shift", "require", "round", "s.charAt", "s.indexOf", "s.slice", "s.toExponential", "stringify", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c.join", "x.c.push", "x.c.slice", "x.constructor", "x.div", "x.minus", "x.plus", "x.times", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.cmp", "y.times" ], "funcs": [ [ "anonymous", 208 ], [ "_Big_", 2700 ], [ "Big", 2914 ], [ "parse", 4135 ], [ "round", 5516 ], [ "stringify", 7170 ], [ "anonymous", 7968 ], [ "anonymous", 8282 ], [ "anonymous", 9177 ], [ "anonymous", 11913 ], [ "anonymous", 12101 ], [ "anonymous", 12300 ], [ "anonymous", 12478 ], [ "anonymous", 12674 ], [ "anonymous", 12848 ], [ "e", 15002 ], [ "e", 15018 ], [ "anonymous", 15167 ], [ "anonymous", 15720 ], [ "anonymous", 15935 ], [ "anonymous", 17616 ], [ "anonymous", 18391 ], [ "anonymous", 19046 ], [ "anonymous", 19478 ], [ "anonymous", 20680 ], [ "anonymous", 22439 ], [ "anonymous", 23264 ], [ "anonymous", 23984 ], [ "anonymous", 24209 ], [ "anonymous", 24914 ], [ "anonymous", 25604 ], [ "anonymous", 25976 ] ], "metrics": { "ast": { "op.eq": 35, "op.ge": 5, "op.gt": 29, "op.le": 5, "op.lt": 42, "op.ne": 31, "op.add": 59, "op.bor": 3, "op.div": 6, "op.lor": 37, "op.mod": 2, "op.mul": 1, "op.shr": 1, "op.sub": 40, "op.xor": 3, "op.band": 4, "op.bnot": 14, "op.land": 26, "op.lnot": 39, "max_depth": 26, "call_count": 135, "node_count": 7178, "member_count": 116, "max_array_len": 1, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0.01, "op_density.ne": 0, "op_density.add": 0.01, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0.01, "op_density.mod": 0, "op_density.mul": 0, "op_density.shr": 0, "op_density.sub": 0.01, "op_density.xor": 0, "sequence_count": 2, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 4, "member_depth_max": 4, "const_return_function_count": 1, "const_return_function_ratio": 0.03 }, "file": { "size": 26249, "entropy": 4.73 }, "text": { "lines": 1051, "top_char": 101, "max_ws_run": 34, "digit_ratio": 0.03, "space_count": 7612, "char_entropy": 4.73, "unique_chars": 91, "top_char_null": 0, "string_density": 0.04, "top_char_ratio": 0.05, "ascii_art_lines": 2, "avg_line_length": 22.98, "max_line_length": 104, "empty_line_ratio": 0.2, "last_line_length": 9, "whitespace_ratio": 0.37, "identifier_density": 1.35, "line_length_stddev": 24.17, "normalized_string_count": 1.45, "repeated_char_sequences": 48, "suspicious_comment_ratio": 0.09, "suspicious_identifier_ratio": 0.14, "normalized_unique_identifiers": 12.45 }, "binds": { "count": 294 }, "binary": { "peak_region_bytes": 22153, "peak_region_entropy": 4.9 }, "source": { "function_count": 5 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 232, "count": 47, "avg_length": 4.94, "max_length": 20, "avg_entropy": 1.61, "empty_count": 7, "entropy_stddev": 1.4 }, "comments": { "chars": 10434, "count": 138, "lines": 280, "base64": 2, "high_entropy": 10, "to_code_ratio": 0.36, "url_in_comments": 1 }, "functions": { "count": 5, "nested": 2, "density": 3.04, "anonymous": 27, "avg_params": 1.03, "code_ratio": 1.75, "max_params": 4, "one_liners": 3, "length_stddev": 179.72, "over_100_lines": 3, "over_500_lines": 1, "avg_name_length": 5.4, "no_params_count": 10, "avg_length_lines": 57.38, "max_length_lines": 1045, "min_length_lines": 1, "avg_nesting_depth": 1, "max_nesting_depth": 2, "single_char_params": 17, "avg_param_name_length": 2.21 }, "identifiers": { "count": 1422, "unique": 125, "avg_length": 4.61, "max_length": 13, "min_length": 1, "avg_entropy": 1.74, "reuse_ratio": 0.09, "length_stddev": 3.04, "sequential_names": 17, "single_char_count": 17, "single_char_ratio": 0.14, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.7, "all_uppercase_ratio": 0.13, "underscore_prefix_count": 1 } } }, "id": 3, "mol": "O₂(SAs)H₃(CmDb₅Os)", "path": "/data/samples/bad/foraged/javascript/npmjs.org/ossf-malicious-packages/thirdwebb/thirdwebb-0.0.8.tgz!!package/big.js", "pid": 0, "risk": 126, "sha": "5b803b2bbd43db704b5802fa5bf4da96e79c3b876d74495116b53a837101dace", "size": 26249, "traits": [ { "id": "metadata/build/bundler/wrapper::js-umd-wrapper-amd", "conf": 0.9, "crit": 2, "desc": "Contains a UMD wrapper's AMD branch", "spans": [ [ 25918, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 379, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 568, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 6234, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8243, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 62, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 586, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1779, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 154, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 4184, 18 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 7252, 9 ] ] }, { "id": "micro-behaviors/data/string/access::js-charat-lookup", "conf": 0.82, "crit": 2, "desc": "JavaScript string character lookup", "spans": [ [ 4292, 0 ] ] }, { "id": "micro-behaviors/data/string/concat::join-empty-separator-call", "conf": 0.82, "crit": 3, "desc": "Joins values without a separator", "spans": [ [ 7249, 8 ], [ 20437, 14 ], [ 20466, 14 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-method-call", "conf": 0.98, "crit": 3, "desc": "Calls a method named from_str", "spans": [ [ 14982, 12 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-no-argument-call", "conf": 0.98, "crit": 3, "desc": "Calls from_str with no arguments", "spans": [ [ 14985, 11 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "spans": [ [ 24320, 10 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1379, 8 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-require-in-try", "conf": 0.9, "crit": 3, "desc": "CommonJS require inside a try block", "spans": [ [ 14930, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-array-join-symbol", "conf": 0.5, "crit": 1, "desc": "Join using empty string delimiter", "spans": [ [ 7252, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::external-require-from-str-dispatch", "atk": "T1195.002", "conf": 0.97, "crit": 4, "desc": "External require followed by from_str dispatch", "spans": [ [ 14953, 43 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::noop-loader-promises", "atk": "T1195.002", "conf": 0.97, "crit": 4, "desc": "Loader chain swallows promise results", "spans": [ [ 14996, 31 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::require-slot-loader", "atk": "T1195.002", "conf": 0.995, "crit": 4, "desc": "Requires slot loader module", "spans": [ [ 14953, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 15033, 20 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::from-str-empty-catch", "conf": 0.97, "crit": 3, "desc": "Empty catch follows from_str call", "spans": [ [ 14986, 67 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.85, "crit": 3, "desc": "JavaScript empty-string accumulator initializer", "spans": [ [ 2319, 11 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-comment-exec-recognized-marker", "conf": 0.9, "crit": 1, "desc": "Recognized comment-heavy JavaScript marker", "uses": [ 0 ], "spans": [ [ 25918, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::slot-loader-stub", "atk": "T1195.002,T1059.007", "conf": 0.998, "crit": 5, "desc": "Slot loader runs during import", "uses": [ 13, 17, 20, 21, 23 ], "spans": [ [ 14930, 31 ], [ 14953, 22 ], [ 14982, 12 ], [ 14986, 67 ], [ 14996, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-string-deobfuscation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "String deobfuscation routine", "uses": [ 11, 18, 25 ], "spans": [ [ 4292, 9 ], [ 7252, 9 ], [ 7353, 9 ], [ 13603, 10 ], [ 25918, 42 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::from-str-import-time-loader-stub", "atk": "T1195.002,T1059.007", "mbc": "B0024", "conf": 0.98, "crit": 5, "desc": "Import-time from_str loader swallows results", "uses": [ 13, 14, 17, 20, 23 ], "spans": [ [ 14930, 31 ], [ 14982, 12 ], [ 14985, 11 ], [ 14986, 67 ], [ 14996, 31 ] ] } ], "type": "javascript" }, { "id": 4, "sha": "50cc5317e3d4081cb712cc750c8294645cab1c5aae6e8f6864b1b401a287da7a", "path": "/data/samples/bad/foraged/javascript/npmjs.org/ossf-malicious-packages/thirdwebb/thirdwebb-0.0.8.tgz!!package/README.md", "risk": 1, "size": 6238, "type": "markdown", "depth": 1 }, { "id": 5, "sha": "def75ba75d6426f1c3f02addf8e175fbe6e0d8a82e541cbdffc16d2bd8fd7d6a", "path": "/data/samples/bad/foraged/javascript/npmjs.org/ossf-malicious-packages/thirdwebb/thirdwebb-0.0.8.tgz!!package/LICENCE.md", "risk": 1, "size": 1147, "type": "markdown", "depth": 1 }, { "id": 6, "mol": "Md(Pa₂)", "sha": "483dc4321fc59cd41a80dc5d2013e11226f42cee1f1798c419d1917c517d7a51", "path": "parket-slot-0.0.1-security.tgz", "risk": 2, "size": 397, "type": "npm", "depth": 2 }, { "id": 7, "mol": "Md(Pa)", "sha": "57a163736898e231e2e51f25295618708dcc902ddcdd8609f0f35973cc44e190", "path": "parket-slot-0.0.1-security.tgz!!package/README.md", "risk": 1, "size": 285, "type": "markdown", "depth": 3 }, { "id": 8, "mol": "Md(Pa₂)", "sha": "dab42db58f163f4048e55d43a88f02c0e348e80a5e963f290cdc22bc0960e289", "path": "parket-slot-0.0.1-security.tgz!!package/package.json", "risk": 2, "size": 143, "type": "package.json", "depth": 3 }, { "id": 9, "mol": "Md", "sha": "4356e1c45bc27ffa00a59043f6a6a1b69f0db88987169780440bef03ac5a0252", "path": "log-taker@0.1.0.registry.json", "risk": 1, "size": 727, "type": "registry", "depth": 2 }, { "ctx": [ { "b": "abZy8000000@}TIyJFk\u0026LkjEA@0d]pO251#eK7O*c9FVSs0(^zvWDia(}VMFx+DN.Ru!jy*eZtoX/U}b[p5FVhVKF^c\u0026", "n": [ { "c": 5, "d": "npm install hook detonates a bundled native credential stealer", "i": "objectives/supply-chain/install-hook/dropper/native-loader::npm-install-hook-native-credential-stealer", "o": 0, "z": 41, "cf": 0.9700000286102295 } ], "ln": 0 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 5760.0, "entropy": 7.96, "size_bytes": 5760.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.96, "peak_region_bytes": 5760.0, "peak_region_entropy": 7.8 }, "consistency": { "unused_runtime_deps": 0.0 } } }, "id": 10, "ident": { "name": { "value": "log-taker", "source": "npm.name", "verified": false }, "trust": "unsigned", "version": { "value": "0.1.0", "source": "npm.version", "verified": false }, "identifier": { "value": "log-taker", "source": "npm.name", "verified": false } }, "mol": "O₆(Co₂EuS₇Ca₂Dy₃Xe)H₄(Cm₂DbF₃Po₇)Md(Pa₄)", "path": "log-taker-0.1.0.tgz", "risk": 434, "sha": "fddcf755de5b9dc67f6926a4e0f48526108734403ee90b8ba4e948dafa26504a", "size": 5760, "traits": [ { "id": "metadata/package/dependencies::npm-dep-child-process", "atk": "T1195.002", "conf": 0.8199999928474426, "crit": 3, "desc": "npm dependency on child_process stub" }, { "id": "objectives/discovery/system/fingerprint/user::user-info", "atk": "T1033", "conf": 0.699999988079071, "crit": 3, "desc": "User information fingerprinting", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::install-hook-exists", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has install-time script hooks" }, { "id": "objectives/credential-access/wallet/keywords::rust-wallet-keyword-privatekey", "conf": 0.8500000238418579, "crit": 1, "desc": "Rust private key keyword", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/spawn::stdio-ignore", "mbc": "F0005", "conf": 0.8500000238418579, "crit": 3, "desc": "stdio set to ignore", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/messaging/telegram::tdata-directory", "atk": "T1555", "conf": 0.699999988079071, "crit": 1, "desc": "Telegram tdata directory token", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/wallet/keywords::metamask-word", "crit": 1, "desc": "MetaMask wallet keyword", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/theft/multi-app::multi-app-credential-stealer", "atk": "T1555", "mbc": "B0028", "conf": 0.949999988079071, "crit": 4, "desc": "Harvests credentials from multiple target apps", "from": [ { "off": 13417, "file": 1, "line": 446 } ] }, { "id": "metadata/package/testing/scripted::coverage-marker-coverage", "conf": 1.0, "crit": 2, "desc": "coverage tooling keyword", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::js-victim-id", "atk": "T1082", "conf": 0.8500000238418579, "crit": 3, "desc": "Victim identification (host + user)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/traverse::node-dirent-isdirectory", "conf": 0.7200000286102295, "crit": 2, "desc": "Node Dirent directory check", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/upload::form-data-new", "conf": 0.6000000238418579, "crit": 3, "desc": "Creates FormData object", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/wallet/keywords::mnemonic-word", "crit": 1, "desc": "Mnemonic keyword", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/framework::crypto-library", "atk": "T1195.001", "mbc": "B0024", "conf": 0.8999999761581421, "crit": 4, "desc": "Trojanized cryptocurrency library", "from": [ { "off": 953, "file": 1, "line": 22 } ] }, { "id": "micro-behaviors/communications/http/request/client::http-config-headers", "conf": 0.30000001192092896, "crit": 2, "desc": "HTTP configuration field (headers)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-destructure-require", "atk": "T1059", "mbc": "C0017", "conf": 0.8500000238418579, "crit": 3, "desc": "Destructured child_process require", "from": [ { "file": 1 } ] }, { "id": "metadata/file/invisible-unicode::test-file-context", "atk": "T1027", "conf": 0.8500000238418579, "crit": 1, "desc": "Test or generated file context", "from": [ { "file": 3 } ] }, { "id": "supply-chain/install-hook/postinstall", "conf": 0.800000011920929, "crit": 3, "desc": "Package has 'postinstall' hook that runs during install" }, { "id": "micro-behaviors/communications/http/response::axios-client-reference", "mbc": "C0002", "conf": 0.8500000238418579, "crit": 1, "desc": "Axios client reference", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::node-os-platform", "atk": "T1082", "conf": 0.75, "crit": 3, "desc": "Platform detection via os module", "from": [ { "file": 1 } ] }, { "id": "objectives/impact/ransom/encrypt/threat-text::bitcoin-word", "conf": 1.0, "crit": 1, "desc": "bitcoin word", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/messaging/telegram::desktop-path", "atk": "T1555", "conf": 0.8500000238418579, "crit": 3, "desc": "Telegram Desktop directory reference", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/recon-exfil/ai-cli::prompt-keystore-word", "atk": "T1552.001, T1041", "mbc": "E1552", "conf": 0.9399999976158142, "crit": 1, "desc": "\"keystore\" word inside a string literal", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::node-platform", "atk": "T1082", "conf": 0.8999999761581421, "crit": 3, "desc": "Collects operating system platform", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/entrypoint::pkg-main-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"main\": field in package.json" }, { "id": "metadata/package/testing/presence/harness::tests-path-filename", "conf": 0.8500000238418579, "crit": 1, "desc": "Tests path or filename markers", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.800000011920929, "crit": 1, "desc": "Dotenv filename literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/direct::write-file-sync", "conf": 0.800000011920929, "crit": 2, "desc": "Writes to file synchronously", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/stealer/credential/browser::js-external-stealer-upload-sink", "atk": "T1041", "conf": 0.8999999761581421, "crit": 1, "desc": "External credential upload sink", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.8500000238418579, "crit": 3, "desc": "npm script runs a script interpreter" }, { "id": "micro-behaviors/communications/http/lib/axios::axios-import-or-require", "atk": "T1071.001", "mbc": "C0002", "conf": 1.0, "crit": 3, "desc": "axios library import or require", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/framework::crypto-exfil-indicators", "conf": 1.0, "crit": 1, "desc": "Crypto exfiltration indicators", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-hook-key", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has postinstall script" }, { "id": "objectives/credential-access/theft/keywords::keystore", "conf": 0.4000000059604645, "crit": 1, "desc": "Credential-access vocabulary word: keystore", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::vocab-string", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary string", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::config-toml-filename-literal", "atk": "T1552.001", "conf": 0.800000011920929, "crit": 1, "desc": "Config TOML filename literal", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/remote-command/keywords::output", "conf": 0.20000000298023224, "crit": 1, "desc": "Output word for remote-command composites", "from": [ { "file": 1 } ] }, { "id": "objectives/collection/stealer/workflow::js-file-stealer-recursive", "atk": "T1005", "conf": 0.8999999761581421, "crit": 5, "desc": "Recursive file stealer targeting sensitive data", "from": [ { "off": 1290, "file": 1, "line": 29 } ] }, { "id": "metadata/package/quality/empty::npm-empty-description", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "npm package has empty description" }, { "id": "objectives/supply-chain/recon-exfil/registry/probe::public-access-config", "conf": 0.800000011920929, "crit": 1, "desc": "public access config", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/fs/directory/traverse::node-readdir-dirents", "conf": 0.7400000095367432, "crit": 2, "desc": "Node readdir with directory entries", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/read::read-node", "conf": 0.6600000262260437, "crit": 3, "desc": "Read files (Node.js)", "from": [ { "file": 1 } ] }, { "id": "supply-chain/missing-author", "crit": 3, "desc": "Package has empty or missing author field" }, { "id": "objectives/supply-chain/impersonation/manifest/skeleton::pkg-no-description-short", "conf": 0.699999988079071, "crit": 3, "desc": "Very short/empty description" }, { "id": "micro-behaviors/communications/http/lib/axios::axios-method-calls", "atk": "T1071.001", "mbc": "C0002", "conf": 1.0, "crit": 3, "desc": "axios HTTP method calls", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/runtime::js-os-userinfo", "atk": "T1082", "mbc": "B0012", "conf": 0.8500000238418579, "crit": 3, "desc": "os.userInfo() user information", "from": [ { "file": 1 } ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File in a test directory", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/fs/write/file/direct::js-file-write", "conf": 0.8999999761581421, "crit": 3, "desc": "JavaScript file write operation", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::fs-readdir", "conf": 0.6000000238418579, "crit": 3, "desc": "Recursive dir reading (readdir/stat loop)", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/theft/keywords::secret", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: secret", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/exec::exec-api-call", "atk": "T1059", "conf": 0.8500000238418579, "crit": 3, "desc": "exec API call", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/publishing::has-publish-config", "conf": 0.8500000238418579, "crit": 3, "desc": "Has publish configuration" }, { "id": "micro-behaviors/process/user/query::os-userinfo-call", "atk": "T1033", "conf": 0.800000011920929, "crit": 3, "desc": "os.userInfo() user query", "from": [ { "file": 1 } ] }, { "id": "objectives/collection/messaging/app::telegram-tdata-desktop-win", "atk": "T1005", "conf": 0.699999988079071, "crit": 3, "desc": "Telegram Desktop tdata Windows path", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::js-profiling", "atk": "T1082", "conf": 0.800000011920929, "crit": 3, "desc": "Aggregates system info for profiling", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/hardware::node-data-aggregation", "atk": "T1082", "conf": 0.8999999761581421, "crit": 3, "desc": "Aggregates system data into object", "from": [ { "off": 4193, "file": 1, "line": 120 } ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-require-call", "atk": "T1059", "mbc": "C0017", "conf": 0.800000011920929, "crit": 3, "desc": "require child_process import", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/infrastructure/tracking::username-field", "conf": 0.699999988079071, "crit": 1, "desc": "Username tracking field", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/post::post-ast", "atk": "T1071.001", "mbc": "C0002", "conf": 0.800000011920929, "crit": 3, "desc": "HTTP POST AST calls", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/lib/axios::axios-require", "atk": "T1071.001", "mbc": "C0002", "conf": 0.699999988079071, "crit": 3, "desc": "axios require statement", "from": [ { "file": 1 } ] }, { "id": "objectives/collection/file-targeting/filter::document-extension-literal", "atk": "T1083", "conf": 0.800000011920929, "crit": 1, "desc": "Document extension literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-require", "atk": "T1059", "mbc": "C0017", "conf": 0.800000011920929, "crit": 3, "desc": "Node.js child_process module import", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/registry::meta-json-postinstall-node", "atk": "T1195.002", "conf": 0.8500000238418579, "crit": 3, "desc": "Registry metadata postinstall runs node script", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::process-cwd-call", "conf": 0.699999988079071, "crit": 2, "desc": "process.cwd() call", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/stealer/credential/browser::js-browser-wallet-stealer-source", "atk": "T1041", "conf": 0.9399999976158142, "crit": 1, "desc": "Browser or wallet credential source", "from": [ { "off": 13401, "file": 1, "line": 446 } ] }, { "id": "objectives/execution/interpreter/script/npm::npm-postinstall-script", "conf": 1.0, "crit": 3, "desc": "npm postinstall hook present" }, { "id": "micro-behaviors/process/create/shell/bridge::js-execsync", "conf": 1.0, "crit": 3, "desc": "Executes shell commands synchronously", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/framework::crypto-library-indicators", "conf": 1.0, "crit": 1, "desc": "Cryptocurrency library indicators", "from": [ { "file": 1 } ] }, { "id": "metadata/file/string/identity::chunk-token", "conf": 0.949999988079071, "crit": 1, "desc": "Source chunk token", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/enumerate/directory::file-search-exclude-common", "conf": 0.800000011920929, "crit": 2, "desc": "References common system/dev directory names", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/read::create-read-stream", "conf": 0.699999988079071, "crit": 3, "desc": "Creates a file read stream", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/stealer/credential/browser::js-browser-wallet-upload-exfil", "atk": "T1555.003", "mbc": "B0028", "conf": 0.9800000190734863, "crit": 5, "desc": "Browser or wallet data upload exfiltration", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/theft/keywords::credential", "conf": 0.30000001192092896, "crit": 1, "desc": "Credential-access vocabulary word: credential", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/read::read-node-ast", "conf": 0.8600000143051147, "crit": 3, "desc": "Read files (Node.js AST)", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-runs-node-script", "conf": 0.9200000166893005, "crit": 3, "desc": "postinstall runs local node script" }, { "id": "micro-behaviors/communications/http/upload::form-data-append", "conf": 0.699999988079071, "crit": 1, "desc": "Appends data to FormData", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/shell/lang::powershell-keyword", "conf": 0.699999988079071, "crit": 3, "desc": "powershell keyword", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/post::axios-post-call", "atk": "T1071.001", "conf": 0.800000011920929, "crit": 3, "desc": "axios.post() HTTP POST request", "from": [ { "file": 1 } ] }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "npm package has version field" }, { "id": "micro-behaviors/fs/directory/traverse::node-scan-skips-dotdirs", "conf": 0.800000011920929, "crit": 3, "desc": "Dirent walk skips dot entries", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/sensitive/credentials::id-json-filename-literal", "atk": "T1552.001", "conf": 0.800000011920929, "crit": 1, "desc": "ID JSON filename literal", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/shell/spawn::sh-c-exec", "conf": 0.800000011920929, "crit": 3, "desc": "shell execution with -c flag", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/traverse::node-recursive-dirent-walk", "conf": 0.8199999928474426, "crit": 3, "desc": "Recursive Node directory traversal logic", "from": [ { "off": 3421, "file": 1, "line": 90 } ] }, { "id": "metadata/package/quality/empty::npm-empty-author", "conf": 0.75, "crit": 3, "desc": "npm package has empty author" }, { "id": "micro-behaviors/data/compress/library::node-zlib-import", "conf": 0.7200000286102295, "crit": 3, "desc": "Node zlib module import", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/write/file/direct::create-write-stream", "conf": 0.800000011920929, "crit": 3, "desc": "Creates a write stream", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::scoped-public-access-hooks", "atk": "T1195.002", "conf": 0.8999999761581421, "crit": 4, "desc": "Scoped package with public access and install hooks", "from": [ { "file": 2 } ] }, { "id": "metadata/package/testing/presence/fixture::test-filename-pattern", "conf": 0.6000000238418579, "crit": 2, "desc": "Common test filename pattern", "from": [ { "file": 3 } ] }, { "id": "objectives/credential-access/wallet/keywords::rust-wallet-keyword-trustwallet", "conf": 0.8500000238418579, "crit": 1, "desc": "Rust TrustWallet keyword", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/wallet/keywords::wallet-token", "conf": 0.4000000059604645, "crit": 1, "desc": "Wallet keyword", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/framework::key-theft-indicators", "conf": 1.0, "crit": 1, "desc": "Key theft patterns", "from": [ { "off": 1004, "file": 1, "line": 22 } ] }, { "id": "objectives/credential-access/messaging/telegram::telegram-stealer", "atk": "T1555", "conf": 0.949999988079071, "crit": 3, "desc": "Telegram session data reference", "from": [ { "file": 1 } ] }, { "id": "objectives/discovery/system/fingerprint/runtime::js-system-info-discovery", "atk": "T1082", "mbc": "B0012", "conf": 0.8500000238418579, "crit": 3, "desc": "System information discovery (JS)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/user/query::os-homedir-call", "atk": "T1033", "conf": 0.699999988079071, "crit": 3, "desc": "os.homedir() user home directory", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/lib/axios::request-axios", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "HTTP requests via axios", "from": [ { "off": 213, "file": 1, "line": 7 } ] }, { "id": "metadata/package/manifest/freeform::pkg-skeleton-small", "conf": 0.699999988079071, "crit": 3, "desc": "Tiny package.json (metadata only)", "from": [ { "file": 2 } ] }, { "id": "objectives/supply-chain/hidden-payload/encoding::postinstall-node-loader", "conf": 0.8999999761581421, "crit": 3, "desc": "Postinstall runs local node loader" }, { "id": "micro-behaviors/communications/http/lib/axios::axios", "atk": "T1071.001", "mbc": "C0002", "conf": 0.6000000238418579, "crit": 3, "desc": "axios library reference", "from": [ { "file": 1 } ] }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "npm package has name field" }, { "id": "objectives/supply-chain/install-hook/dropper/native-loader::npm-install-hook-native-credential-stealer", "atk": "T1195.002", "conf": 0.9700000286102295, "crit": 5, "desc": "npm install hook detonates a bundled native credential stealer", "from": [ { "off": 13401, "file": 1, "line": 446 }, { "file": 2 } ], "spans": [ [ 0, 41 ] ] } ], "type": "npm" }, { "ctx": [ { "b": "v@DmaBrC]MwQ4=@q*Am\u003caBLv}aAz4kB.L(cc)Aemx(4r!Ab](bwPI]pdlv(Dz/fSrazbWqjS[=RADL#owHF:mB0r4{3s!0(B95Kzvruf9jS[=RADL#owHF:wvrufbdlv(Dz/fSraA8rzjS[=RADL#owHF:vB0r4{3s!0(B95KJy?Wu3jS[=RADL#owHF:Gy?Wu5dlv(Dz/fSraBtkewNPaTvR/P#EipV}A+flkx(W=kb6d\u003cDwNPB1dlv(Dz/fSrayPIez/W3:aAz4kB.L(cc)A8Ax(w5pdlv\u003ezv@DmaBrB4\u003eA=1iMByupPaAz4kB.L(cc)AnwA=0ysvrt{4dlv\u003ezv@DmaBrA\u003eCnNB!Iq:?/(asIhHz!0v1B1R3wB$M9ElRyAQuQmHWuSx#$aBFLVb4#7uAc15[fkLMteP+ApwPxzABz(hha$kc+wPhD]v}v5wtRvuQefDbXdlv(Dz/fSraxqlipEdxQrz(HkjS[bTDQgF1uQv4Smsu*$Aa{$Gf\u003c)6I3s!0(B95K0l0dFXk#ZixuQv){mn\u003er(awN5@vR6NdAb](bwPI]BwO#Vzlp0$irzW3%l0dFXk#ZixuQv){mn\u003eSTE0^4[asXG*fFUEcdJ*D1gbI61v@DmaBrA$umNp3Fr9@M\u003ek#7=Yl0dFZmnM@OauZ\u0026xB.$P0AWU)Ez!0v1B1R3wB$M9ElRyAQuSfrTpg3ZYsyjD+p/G$maBFLVf!+V@v@DmaBrBHMmncxZnj=-VpF$t5oI4#FuRB3=nMl/}atCM7i%]FozGx[xo*I(*r762Kl0(@Yr7f.djS)Hxzdm6%c#:iBv}x.5e[F{ze\u003c.\u0026\u003eoi1!}r762Kl0)tLsyjx$r7f.maBFLVh83ZbdJ*D1gbHa6atCM9g=(4Oz/fSraxg-{r6:\u003e\u0026mnu/?o*IVImn+l\u003eaAg+hxFa4rx(ktqB1RMKAaAW6c[cX\u0026b4Lb7vj+}%v@3jaeP(2Gz^^fdByX*4vj(RjzGE6Ki%(s8z/fSraxH\u003c5oHR]/ogq#+pF%OVauZ\u0026K3lQDnyH}=nefDcXvqG:\u003eBrSmUb5*$iB9zLywfJMEb4CU8wmYU2x\u003c\u003e*4efDcDA+e=)zGGP3y\u0026Z^Kar\u003e(By:7zMb4U\u003efa$K\u0026XBAhqqa$K\u0026XvRG{]z!T8kefDcCByMHCar\u003e=yy:7zMb6XcEa$K6zar\u003eVlByx2{B88%Jar\u003e=rvqZg9z6yINb5p+nB98tvwG\u0026VFb5?NpC42G7yH}=nefDcQA+PY9By!/{wQbEJar\u003e(rv@=d5a$K\u0026XzeJ{4z/fo0a$K\u0026XAa\u003co2B7DKDar\u003e=oA=VepvqEbsar\u003eVFeOP9mzZ3.Pb5IQjx(mK3a$K\u0026Xx(mK3A=2lbx(v(ked9Hxb4s$\u003cyJTOuefDcTwO2x@efDcUA+fMnAW04Sb5y?3xjV9cefDcFy?m9#A=(jyefDcFCYdbnB0rdTb6m\u003cFB98Rmy\u00260W8a$K\u0026XBz\u003e@azxZROb4k1)A+frka$K\u0026XA+e:0C4CYta$K7bi%(s8z/fSravG0)uQX6@mnu=MpFK?hjS)@Me[w)ga$K\u0026Xe[w)gCP[WYa$!aRB0rdTa$!aRB9F(War\u0026BWCYUcni%(s8z/fSrax7{8p*Wc*k#7=PnM5FfjS[SNCox*}Bspu2arR\u003eCz!9A^zeS%cy?mViefDckA=kPhvqNbRx(4v4a$K\u0026Xp\u0026ZF!A:-/cmRMWIB08(Qi5SifefDckA=kPhvqOzvByuvAar\u003c)3zE^WfB0rdxarR\u003eqB.LV5a$K\u0026Xwncaba$K\u0026Xz/{dCefDcPB-.OBBrSmUb64mhwNPT\u003ea$K\u0026XvRGZ7efDcPvRN8rar\u003ci+vS=rcefDcmwO+{^B7DKD3lQDnByxi5wPPaEar\u003e]oA+w%9", "ln": 0, "col": 1, "line": 1 }, { "b": "ar\u003e#ywmYX2a$K\u0026XC4\u003eF#zZ3.Pb5IEzx\u003e5tr3lQDnxk8DiefDcTC5wGPar\u003ersB0rdTb4$QkefDcNwPzp6A+O@#a$K\u0026XA+e($B98CFa$K6zar\u003ef1o*Icxq=\u003ej{ar\u003ev", "ln": 1566, "col": 75, "line": 32 }, { "b": "ed9Hxb5I4bA::67z/fRuefDcTzEEH9xM50la$K\u0026XB8#1sefDcTz!0M]Bs}oCa$K\u0026XB9qbhBy^4tx(\u003eKIar\u003e#yBy=TE3lQDnv@DK4A:-P(a$K\u0026XBy/Gkvp\u003cB#z6yIrarR\u003cXByxi5wPPaEar\u0026BQwQ5qvefDb?xk8DiefDb?v{@\u003eXwG\u0026VFa$^$WA:\u0026@hefDb?zGQhCa$K\u0026Xe]L(OAclmDefDb?C4CY7wO-Lw3sb8x3jpx/zEW^5z/cXgwPQ{[wPzV%zdLaAaBsCraARTHaBsCrarR!EwPS6nzxJ\u003ese{hkDA.gdXzZW4!B-RbmzEEx[i%)8MEir3dByO#bDKp(rarUYoBAIRwaAhvtv}x.5e[F{ze(+?sqxQvmaAhvtv}x.5e[F{ze(+?sqCGILmiD#9aAhvtv}x.5e[F{ze\u003e/5hpc?PyaBFLVb6v^szF%-pb0cbOaBKPB3jpx/zEW^5z/cXlz!zHVA=k$Dy**^:y+cYuA=JPKDKp(rv@DmaBrCTDvruTkauZ\u0026UA=J^MwPI*ezGxwNe]#byBAIT^3lQE3z/fSray[]5ve", "ln": 1748, "col": 40, "line": 35 }, { "b": "jS[rRAXqiuB8$=5wGVwFax9x5x(mMiwPz/ui%)8Mv@Dmaz!@#qwPz*fAWUs1wmoN*eN\u0026c#yJTOFB-qenvpST^bZTuovR6w7i::GYB97\u0026jB-OV\u0026koIc]efG4WAaJ%1ay[]5vivY@jS\u003e}\u0026BAh8kxcFD.ay[]5vivPNwmoN*au@7kzf6tsi%{xy3taA#v@#B6zxJ[bA=U!XzGXY/B95*CwQbZEDKp(rv@DmaBry", "ln": 2228, "col": 13, "line": 52 }, { "b": "B7EAuarUYoBAIRwaxH\u003c5oHR]/ogq#+pF%OVe]$@FwHF%xCpsT$j%jVWCv+!Ex(mA%B.268c#j2Qdlv(+3jpx/zEW^5z/cXsxM53fwj7oKy?m9#mRMWIc$WgfwLMVJwHO:G3lQE3z/fSraz+$uwPw[Razbt7wLMVJwIe7yoMbb^AZKnRwHF#?3lQE9w/@Hrz*b=kau.\u003eJar\u0026BHzGWiDE0^5Mz*b=ke[F{hB606$xEC5SwO#VndjDxWwPS6nzxK4wB.9SwarUxgasI5ACv+!EwO#41s7#+\u0026c)yoUB8L}udiG@:az+$uwPw[RjV%]ix\u003ee\u0026hB8L}udiJUxBAIRwaARTDwJHkwazCBgc#r*CwPw[RjV%]iv@Dl%x\u003eG5uz/6qmdiJUxBAIRwaARTDwJHkwaAz4nB-Ivxx(^u:y\u00260W8qE%VMBy!#Jz^$hiz*b=kdlv(+3jpi.D2vamw{503BzkVhaAI43zBwhVwN/?2A^pK", "ln": 2716, "col": 29, "line": 65 }, { "b": "azbWEAb](lx(^\u003cbe]#byBspWlAW:6SarV7Pv{%E?xDRTearR^HA+funA=9@CarV7tarUxgasFyOByxnzx(=WRA+e:5z/QaKdjDxWwPS6nzAwgjarUGiBrCdjBAh8bB2%ZKaARTHaBsCrarR!rzGG]kwPF$SayPF5x(\u003eFfB1RALz/6ifwPGFAwNPaWx(URjx(U:EDMWJDBzacTy?lN\u003eAaK8KaARTDwGVyIi%)8MEir3dByO#bDKp(rarUYoBAIRwi%)8MEf{r7az+Rhaz2CjA^p2\u003cB-8pzjS(Bu3lQE6z/M%Gv@DmaBrCdjBAhTHz!pb6zGG]kwPGpyDKp(rarUlkBAhT]z/]@td\u003erW*arR^Hx\u003ewFowO#QgC%=H)zGE0EaBdWjy?b$TwPA5sjV$}JfEXb\u003e3lQDlarR!nCvticaz$+maw^8%ze165c[6aEB8L(rwHO-+j%j]TBv*s^wN]H-By=\u003evwPI^aC4A9Ki%)8MarV7t3lQDlay/tcB95KozGG]Ap*[DVauZ\u0026^vrufnyhW*7c$E4jefFIwBAhTVzEEx[dlv\u003eVao", "ln": 3263, "col": 17, "line": 82 }, { "b": "djDxHz/fVhzGPIL3jm)#arR^Hx\u003ewFowO#QgC}J/Ll${WMv@#TfC{\u003e9\u003caBsCrarR^HarR!vw/@HkzGG]Ae]C9mwIe4CvrcEhs7#+\u0026c)yn/djDxHz/fVhzGPIL3lQDlarR^HazCBgc@S=gp*Wc*k#7=PnM5FtxKL%gwO#QgC}J#yzdLdBay/tcBzkSnwJHkwarR^HarR!nCvticaAI43zBwhVwN/?2A^pL]v%8*kx)a5owO#QgC#d{\u003exE\u003eoAB-YeSzddVSwPh:8ec", "ln": 3747, "col": 32, "line": 104 }, { "b": "arV7tarV7tEf{r[B-7Yhx(v(ixjVfYy*?A$z/PX[v{%mMz/o-sc[co=3lQE3z/fSraAhd9By]Diz6g$:z/WKIy*?A$z/PXydlv\u003eVay/tcB95KBz/o-sauZ\u0026Kt@@x2arUxgasIhBvrua1A+#{ZjV%]iy?W^fCP[NVDKp(rarUfjzGx[xxM4:0auZ\u0026=B1RcAzdNl(AWSv#3lQDlazCBgc$)KowHO:xz/o-se]U@OxEELjzdLdT3jm)#arUfjzGx[xxM4:0lsB}DauZ?\u003efkbovwG\u003chyarR^HBAhTHDKp(rarR^Hx\u003ewFow]/OoCXIkvB5Nv4v\u003c(2ezdM4xB7D^ycmf\u003cEB1RJQvrtB[zEU8dz/65Lvrl0ee[]w{x(W={Bz(hBc[cO/DKp(rarR^HarUomAV==uz/fSraz2CjA^n^Cw/$Ybe]\u003eJiwmPy{q*Am\u003cc$)KowKo*DwH[%JaA}KwxHVYLwMi}]wPG)PBAhInaBLW/aBsCrarR^HarR^HazCBgc$NprA^ooKB3%..wN/?2A^o5ZdiJUHz/*4MAclknc#-QpxFa4rx(ktjz/65Lvrl0haz2CjA^ooPvqPN8dlv\u003eVarR^HarR!P3i", "ln": 4129, "col": 3, "line": 115 }, { "b": "arV7Pv{%E?xDRTearR^HarSr\u003cazCFaz/PziB-8khvpS!Qy?j.xxM4:03lQDlaBKOtaBLwzy\u0026:egx\u003ewFoAbn%8w]zZbau.\u003eJar(2zzzK3(diJ%AarR^Hw]zYjc$vgkB95KvwPS39AV/pjar\u003cfvmmG^rnLgfQaBsCrarR^Hay/tcB95KnA+PYdauZ\u0026PbZTusBAz8mEl7Rru][YrarR^HaARTHaBsCrarR^HarR!sB1Q)hv}x.5q*Am\u003cc$EvjC4A9:3lQDlarR^H", "ln": 4620, "col": 3, "line": 134 }, { "b": "v{%E?xDRTearR^HarR^Hfe1CUA+PYdaz#ataAhvjB7Glh3lQDlarR!P3lQDlaBKOtaBLwzy\u0026:egx\u003ewFoAbn%8w]zZbau.\u003eJar\u003eu8A^8kna$jTY3lQDlay/tcB95KEB7GxklsB}DauZ?\u003efi978A=SA^3lQDlaARTHaBsCrarR^HazCBgc$WJMwQ4{gBApxazEU8qB7GxklsB}DdiG@:azbWEB97\u0026jq*Am\u003cd0oPxA=TMQB7D^Mx(=WRA+e:5z/QaKdjDx^3lQDlao", "ln": 4860, "col": 9, "line": 143 }, { "b": "c$NTBA:Z7qclM]we[GowB98F4D2vauwQ5rqvjrSFA=k(rB1RAOB7=$vvrufnA+frgy\u003c6wrwQ5rqvjrS!3lQEt3jm)#A+funA=917e?O+]wP]m}wPPtvz/o-sdp21xEf{r\u0026B9RUkazb+lv@#B6zxJCcy\u00260V)Bw(:*B7]-gC4BcSy?mVozddVSwPh:8auZ\u0026n", "ln": 5515, "col": 8, "line": 166 }, { "b": "wPF$Sax@b5az\u003eXivnz5TA=L(8wPF$SaBwI=aBsCrazCBgc)rhpy?lBKBzb.Fy?mG%Bz8^zclKEyCYW$mmRMWIB1RouzFa68diJ%AarR^Hv@Dmaz!@#qCvtJfc)z(avrt{fvQS+ZB-n{PAboD3wl*rMzY\u0026Uay?mVgBz\u0026pAAboD3wgO\u003cAyIv:bx(mMcdlv\u003eVarR!EwPS6nzAwgFaBKO7arUfjzGx[xB-RbmzEEx[auZ\u0026WwPQ{[wPzV%zdLaAi%)8Mv@DmaBrCglA+#{Zaz$+mavZo\u0026za4/OvjiM^3jm)#w]zZbe[5ZrwO#3bb6v%rA=br5wG\u0026VFB-RbmzEEx[dlv\u003ezarUomAV==uz/fSrazbt7wL=/SxDRk9azbt7wL=/SxMCQBDKp(rarUomA=0BqAbYxawgeTlx(4v4a$K\u003cGB1Q%ywNPW(qE%oEq/)4\u003evqNA8x(4uSvrufiefGoDarR^HarUogy?mG)zdL:JAa9\u003c4e[emgwO${[wHIe8y?lBKBz99O3lQDlaBLX23lQEt3jm)#w]zYjc$vgkB95KKazbt7wO${[wH[%lz/fVdzGEALwO#0@wnb{]aBLwJw/$VfBAg!Vx(4v4diJ%AarR^Hv@DmaBrC4nw[CQ{auZ\u0026lB.kk%AXq6EluM)LwPxhez/fVdzGErmarR^HarS(\u003ev@DmbwO#O%arR^HarSY/luM)LwPxznA=k!yv@DmbwO#Pvaz2C2z!9N1xcqOHar\u003e@Iw\u0026H$-i%)8MarUomA=0BqAbYxawgeS", "ln": 5946, "col": 68, "line": 184 }, { "b": "x(4u#vqPM#Ejmk+arV7t3lQE6z/PXEvq{f%zE+d5arR^Hb5H[kviNlfarR^Hn(FIXe]#bPx(mM$w{C!K3lQDlarR!pA+eW3wN)t0arR^HarU/FwPzV%zdLm9arR^HarUSCvR/:*nPlZkb6v^szF%-pa$K6zarR^HaAhd9By]Diz8@!UA=kD0B8@%My*?A$z/PXC3lQDlarR^Ve?R0LByv%*wPz*9wmY*k3lQDlaBLWCarS9{3jm)#vrVc]BrC1px(w5BAbP/tc@\u003c8qpEdxQrz(HwazbLjz7D/R3lQDlazts{wmY!5iV@3MA=0BwwPQEOvpS}\u0026B0@E*3lQDlaz\u003eLilt{yWoL59OBz9YTnP5cOzFsired9HxarUJfCTDy!By/uioL59OBz9YTnP5cOzFsired9HxEjmk+Ef{r[B-7Yhx(v(iv}Z15yES2OwPHg-q!ZL?c$WgfwL=/SxMCZEzddVQD30RsdiJ%AarUfjzGx[xvQTv*xK#lcjS)%mi%)8My?mYhv%8*jwO#PjjS)%mi%)8My?mYhv%8*jwO#P*x)KtkjS(Bu3jm)#w]v", "ln": 6576, "col": 37, "line": 205 }, { "b": "B09Q*v}Z15yES2OwPHg-q!ZL?c$WgfwPGyBo*I(*lp1NrnmaX^r7f.mi%)8Mv@Dmaz!@#qy\u0026r@mu%veIByu+gvpK7}A4MiKy\u0026r-)t{9c^y\u0026r-)x(mMabZTcqy?mVuy?mG%Bzc7Bw[=6)d03*Wx(k4sDTZA9v}YB{e]k9pxlm*nayX=3v}Wo4B17GCi%(rqazbJ", "ln": 7775, "col": 15, "line": 264 }, { "b": "arR!nCvticaz(mqBzkY5A=+r2y\u0026r-)c$lRbv}YB{twmv]ay/C6vru6\u003edlv\u003eVarR!pz/fSmy?kknz!yFatv.e:vj+}%v@3jaeP(2Gz^^fZavoHUv}V#gDUBPMatFo", "ln": 7972, "col": 2, "line": 268 }, { "b": "as!M?auQ=Qvru0)wPGFuwO#d5xEL6jCvticaz$+maw^8%ze165c[69+au.[hB7GC)x(dB1B-Y3LefDY4fEXCj3lQEt3vJl*fe1$3nm=QRwPxHF\u0026^^moB7nS@ay/RaazbLjaAIaiB7]-gC4z!dx(4v4asIqtzdK\u0026gB.\u003eSgayPslwo8ycwGV57vqWI33sO13zET/3B-7Yhx(v(iw].*buVQsfuOJ@TaBsCray/tcB95KmCvR*VaAhvtv}x.5e[o9oc[dj+arUxgasFyBB1R3Gx(!xqq*Am\u003cc$vEidjDx^3lQDlaARpqz*9swwP]m=A=M8sc$2CSA+e:5z/QaCwn=42az#ataz2!iB96C=bZT3Bwpm\u0026mi%)8MEf{r7ay/tcB95Kpz/]@dauZ\u0026Kt@@xoayPF5x(\u003eFsv{%myx(T", "ln": 8138, "col": 10, "line": 270 }, { "b": "BsqeXatCM7djEs=arV7tEf{q*w{503BzkVhaAz44wk^eMy?#TRB98tvC$8H:wHIe8y?lBKBz99CDKp(rBAhTHDKp(rarUxgasFyBB1R3Gx(!xqq*Am\u003cc$WgfwL=/SxELwMA+funA=91qB.\u003e\u003eQ3lQDlaAz4nB-Ivxw]/OBwNPasx(4uVD2vauw[=6)p*[DVefDcVBy)GRdlv\u003eVaBLwxvru0)aBsCrarR!EwPS6nzxJ?ty?#fuarV7tEf{r[B-7Yhx(v(iy?W:2Bw(\u003c:y?#TRB98tvC$.{\u0026wPGnwwQ5qFaz++ex(\u003e^DDKp(rv@DmaBrCylzE)(ijS[\u0026TCYUMVAbolgc[!?Cku@7Vdlv\u003eVazCBgc#rQnwPGFuwO#d5xDPA2az++ex(\u003e^DA+funA=91wwQ5qU3lQEiwPS6nzxJ+fzE)(wB8kM2wHGcDx(dNadk2vNx(ksytY7-mi%{xy3taA#v@#B6zxJy%B7!9UB98tvC$8*)z9\u0026wVy\u0026\u003cxec$)KowKHlMefFFmw)]*#BwMy/xEL6J3lQEkA^n^O3lQDlay/tcB95KBwPJ0gBrAZ?wQ4=@q*Am\u003cc)AbeB7=WFv\u003c2D0B98tvC{j^ZDKp(rarR^HwO#0@wnb{]iV]R?By)GRed9HxarR^Hv%qDAaztXgwKHlMed9HxarR^HwO#VLaBtj-e?R9-z!0v1B1R3wB$s+bpFBnsaztXgwKHlMefEFPq=DjToHQ#+wmYvYB.(d@vruf9EjLZFarR^HaARsmwP8ZkiV{plfFC3+arR^HarU-Ewnb%yax{4ex(EScefDcQx(EScefDcJxkRTdwG\u003ezh3lQDlaBLX23lQDlay/tcB95KDA+PxcwN(]DaAz4mB.(dLBAh8jc[dj+arR^HA+funA=91wA+PxcwN)AfwO#d5xDPFYfD-O5BAh8jzdNl2iV@r.y?#fuarV7Pv{%E?xDRTearR^HA+funA=91qB.\u003e\u003eQ3lQEt3vI", "ln": 8870, "col": 65, "line": 293 }, { "b": "B7!9UB98tvC$8*)zan1-xM4:0l${V\u003caBsCraARTHaBsCrarR!pz/fSraAz4mB.(dxjS[rXwN!U:zEU7sDui:xeN][Jw[8@ny-\u003eq:fFCgda$K\u003c-3lQDlarR!rzEWP}x(mMAar\u003e@Iw\u0026H$=3lQDlarR!pCvS-SxM4:0l${V)3lQDlarR!rzGX5-DMT{[e]U\u0026Hv}x.5e[F{zefEFVo*}8=xM4:0l${V:EjLZFarR^HaARsmwP8ZkiV{plfFA", "ln": 9664, "col": 11, "line": 329 }, { "b": "i%)8MarV7tarV7]3jm)#x\u003ewFoAbn%8w]zZbau.\u003eJar(2zzzK3(diJ%AarR^Hv@DmaBrC1hA71bRvivYQAb](bwPI]BwO#Vzk#pxCk#Zb)E0^5QvrufnyhW*7c$)KowKHlMefDc5AbXiNByuvAar\u003cZ4vqPZ@xcF=^3lQDlaAhEAxEBigarR^HaAg+hxFa4rx(ktcAbXiNByuZyb28=YA=l2qw]]jFar\u003c)3zE^WfB0rdTb2Ai4wPyZ.wO=fbefDckq=mgnwk3YPwG\u0026VFb13o^B8L(ann\u0026M\u003euUBd{Bz(hBe{8tWa$k5IarR^HarR\u003e8z*b=kq!P-Uy-\u003ec5q=mgnwk3YPwHO/garR^Hdlv\u003eVarR!CB-RjAAa9\u003c4e]2rszyxgpzdMaHAX5sSe[emgxKtB!B98tvC{jW*ar\u003ccXB7=WAwIdQFav*c/avoHTxELbOi%)8MarUxgasFyKB-YlSz/65lc$NprA^o8RjW701zGG]Ae]$@NA:@Vkx(mA%B.268c)y#^B7=:DdjDx^3lQDlarR!pz/fSrayX=2xH(\u0026UBrAZ?vQTs\u003ennic!z/Qa)A=k!YB.LVlx(ktjz/65Nx(U:EAa9\u003c4e]2rszyxgpzdMaHAX5sSe[emgxKtB!B98tvC{jW^i%)8MarR^Hx\u003ewFovQTs\u003ennic!diJ%AarR^HarR^Hz/{dOAclknd0(pzarR^HarR^HaAIEzA:@Vwar\u003ccXB7=WAvQTs\u003eat47La$K6zarR^HarR^Hay/tcBy/uiiV@lMze18\u003cxK#0@nnic!z/Qa%x(mH6c$lRaxH(\u0026UBsXLknjuiCuR0-", "ln": 10439, "col": 49, "line": 356 }, { "b": "c#-QpxFaspB8L(rwHIkaB982dy?k4Dar\u003cuFq=DjToHQcOi%)8MarV7tarR^HAclknc#-QpxFa4rx(ktjz/65Nx(U:Ea$^tkB7!]]x(!xmA^n\u0026TefDc6vrl9adlv\u003eVarR!CB-RjAAa9\u003c4e]2rszyxgpzdMaHAX5sSe{.OLuUBd{Bz(hBa$k5=b3G53a$kOXarR^HAclknc#-QpxFa4rx(ktjz/65Nx(U:Ea$^XIv{%f$efDcTxKL{)a$K\u0026Xw[=s1a$K\u0026Xw[=s1uUBd{Bz(hBa$k5=b1uo/xD!(!3lQDlaAhEAxEE?dBz9pwz!T8qxM4:0l${V)ar\u0026BVxKtB!B98tvC{jW*ar\u003c-$a$kOXarR^HAclknc\u003c?7tarR^HAa9\u003c4e]2rszyxgpzdMaHAX5sSe]kDovqEbsar\u003e(uvrb{6efDcQz*b=kB7/c3y:7zMb2ziowNPayx(mGaefDc7z/fSmy?ldQB97=5x(!xmA^ooVCYUbUed9HxarR^Hb2Ai4wPyZ.wO=f9c}[t)B:btV3lQDlasPwVarR^Hx\u003ewFoa-zHBe]$@FwHF%rzGG]AdiH=qaz2CjA^ooUz/{8gwGTc0jS\u003e}nvrl9adjDx^3lQDlarR!pz/fSrayX=2xH(\u0026UBrAZ?vQTs\u003ennic!z/Qa)A=k!YB.LVlx(ktjz/65Nx(U:EAa9\u003c4", "ln": 11215, "col": 11, "line": 379 }, { "b": "zGx-jwId!qxda%dwmoN*eN\u0026c#yJTOFB-qenvpST^w].*buVQsfuOTU+B7nS@zFs03a$K\u003cTv{%mKvrug7e]2rszyuXWar\u0026l-i%(rqay/tcB95Kpz/]@dauZ\u0026QCvticay/tay?m9#q!o\u0026/x([6jwKZxIwPGm/mmGNyoJkv$lQsEOo*I(*l}6{KnguRc3lQE9w/@GBw]z*fwg?XfzFa68diJ%AarR^Hv@Dmaz!@#qy\u0026r@mb3OO^Byu+gvpK7}A4Mh", "ln": 12912, "col": 5, "line": 432 }, { "b": "vru0)wN)i3z/]@defFLky\u0026:epi%)8Mv@Dmaz!@#qy\u0026r@mb3OO^Byu+gvpK7}A4MiKy\u0026r-)t{9:1z/5\u003c5BAg.zay]zdwG\u0026M+3vJl*fe1$3nm=QRwPxQI\u0026^^moraP(Sxl4A$avG^ZyJKGlaARd5Byupus7#L.z*cmBfcCauv]32L3jpx/zEW^5z/cXgwPQ).y?mm1vqO$Ovrt{OvrufhdiJ%AarUfjzGx[xAbn%8w]zZbauZ\u0026=B1RAFvrua1A=0iNi%)8My?mYhByX*4vmj*Ii%(rqazCBgc#:0hBy]Diz6g#8jS\u003e}VvrcNazxZILDKp(rarU=pvrt{Cx(UsVaAg+hxFa4rx(ktqB1RcAzdNl(AWSv/ar\u003cG[vSC)$C{j^Zb0*f!y?Wx/BzkVhax9A4AbP=sa$K\u0026XraP(Sxl4A$avG^ZyJKGla$K\u0026XByX*4viNcZ3lQEtaz2wgwGUY0asIhBvrua1A+#{ZjV%]iCwg}Jg9Od\u0026DKp(rarUfjzGx[xvq{fNvrt{2jS[Y:z!0v1B1R3wB$M6Sp^^PGk{gM5aAg+hxFa4rx(ktqB1RcAzdNl(AWSv/ar\u003c9\u003cA71bRviNlBb2St/ze0)2a$kOXarR^HByX*4vmj*IauZ\u0026^vrufnyhW*7c$d7ll$7gCefDcowO+{\u003cA:-/cl$HBPBz(axefDcUwmoN*a]", "ln": 13305, "col": 25, "line": 442 }, { "b": "A435Qy?m^3y=SX+y?Wuhv@DmaByx6eB1QT6petj:pFBU-mn)bRpFJ3Xdlv\u003eVay/tcB95KGA+PSbAV^H/w]/OmA+eW3wMJ[^By!x)A+eV@c#TlIAcln0vrufii%(rqayPtpzET/3B-7Yhx(v(say/8czFKqwdiJ%AarR^Hw]zYjc$vgkB95Kpx(4u6z!pb7x(4v4diJ%AarR^HarUfjzGx[xA+f5-vruf9jS[uJy?kktwO+gKBz9pEwPhD]v}v5wtWe{{efDb\u0026a$kOXarR^HarUfjzGx[xAa9\u003c4luM(.jS)7lw[CQ{e[Pcxz76Boy/1LZxE\u003enIB-.jPa$kOXarR^HarUfjzGx[xAa9\u003c4oL58:jS)7lw[CQ{e[5Njz^#^+B75V(c]rwm3lQDlarR!CvrufRwO%bAA+PSbry}7IgCRo=c#-QpxHl\u0026Ne]k9pxlm/rattla3lQDlarR!pz/fSray/tcBy/uiauZ\u0026QCvticazbWEAb](lx(^\u003cbe]\u003eJiwjyoHwHIe8y?kkhB.\u003e\u003e\u003cvrufii%)8MarR^Hv@DmaBrC7izGGDcBwcm-auZ\u0026lB.kk%AXp^py\u0026r/-zGxk#wHGw:i%)8MarR^Hv@DmbwO#P-wO%bAA+PSbry}7IgCRo=c$vgkBy/uie]k9pxlm/rattla3lQDlarR!Lx\u003eq9\u003eao", "ln": 15222, "col": 30, "line": 507 }, { "b": "aA8yAAcln0vrufA3vJl*w{503BzkVhaA}mnraGAVvl[ZIwNPa{q!o\u0026*d0f0dByw0OBz99CDKp(rx\u003ewFoAb](bwPI]BwO#Vzlp0$irzW44l{T^ruQ^*?lQ-aXjV%]if^n4?A+funA=91ivqH0@i%)8MBAhTHDKp(rarUfjzGx[xB97\u0026jauZ\u0026VB1RJQvrtB[zEU8pwmoN*p*[DVdlv\u003eVarR!pz/fSraz\u003eLcyH}JejS)u}pFJJYvrcB2c$WJMA+eV\u0026mRMWIq*Am\u003cc@-P2r6:\u003e\u0026mnu/?o*IVImn+VVb6w0ti3G!2i%)8MarUYoBAIRwaz\u003eLcyH}JsAa9\u003c4au.\u003eJaARd5Byw0OBz8^zclNelA+/lbe]tYAzdMB.au.\u003eJaAITkBs}ALx(dAQB2%ZKaBLwxvru0)aBsCrarR!EwPN", "ln": 16092, "col": 9, "line": 532 }, { "b": "raGAVvn*-PBsqlwvrt{OvrufiaBsCray/tcB95KCByxnljS[uTe]#byBw)E5v\u003c(Cfvrt{Ovrufii%)8Mw]/OGA+PSbmRMWIq*Am\u003cc\u003c?7tarTSKk#ZcSq:\u003cCXuRJ*:ogq-f3lQDlawbNdpa*QfA+PA7x\u003ezSsDMWooBz9YTByX*4vnHxOxE\u003eoyBzkP6o(\u0026urB97\u0026je]tYAzdMB.efG1BzGFf^iV@rKCoxpZBy=\u003cHe{826q+{tlA+PA7c[co!dgdgudlv(+3jpi.D2vamw{503BzkVhazbUjzc}vaA:HTKv@=c?By!#9jS[uBy\u0026:epaBsCray/tcB95Kzy*?A$z/PXqjS[V:e]Q", "ln": 16457, "col": 14, "line": 546 }, { "b": "zc}vaA:HT:aARd5ByuqmAboD3wft/dy\u003cvdAB-qqrA=+(6aA8cus7#L.z*cmBvqYP#zdc{IqZ9UL3lQDlaAz4nB-IvY3lQEt3jm)#v@DmaBrCWovrt{Ovruf9jS[xGBw#*/wOl3(zb+4OByw0OBz96Ki%)8Mx\u003ewFoa-}m6Byw0OBz99CDKp(rarUd", "ln": 16842, "col": 42, "line": 557 }, { "b": "z^^f8tx11XyH}3Mvruf*efFCywNPW(wgO\u003cct}vaBaARd5ByviMBAhInaBLX23lQDlaz\u003eLcyGa?MByw9VzGEpGwmoN*p*[DVdlv\u003eVarR!pz/fSmy?kknz!yExtv.e:vj+{", "ln": 17659, "col": 23, "line": 581 }, { "b": "ByX*4vixYiy\u0026r-)wN(#li%)8MEircozEEu$C{4CvarR^HBAhTHDKp(rarR^Hw]/OEzFT38yG2H@v\u003c(q8v@2T^p*[DVdlv\u003eVarR!Pay!\u00264v}W0i3lQDlarR^WfcB$wzF%Mbay/k0vqZjbaz2Olz/P[aarR^HEf}8tEf$xf3nj4=awDoUzvc.VB9RUkazb+lv@#B6zu", "ln": 17788, "col": 51, "line": 583 }, { "b": "xgl\u0026Yz/NlIw].*buVQsfuO\u0026@Taz2Oldlv\u003eVarR!GxMw3naz2Oli%)8MEf$xf3t\u003cY(B.\u003eRwwQ5fjA==vBjS]7UarUopz/5\u003c5BAe]tarUopz/5\u003c5BAg.yed9Hxw].*buVQsfuOTetarUopz/5\u003c5BAg.Aed9Hxw].*buVQsfuO\u003cqvarUr9Bzblaq!P-Uy!enYBz(hBed9HxxjVe", "ln": 18324, "col": 7, "line": 620 } ], "depth": 3, "facts": { "imp": [ [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "Number" ], [ "", "Number" ], [ "", "Number" ], [ "", "path.join" ], [ "", "os.tmpdir" ], [ "", "Set" ], [ "", "os.userInfo" ], [ "", "String" ], [ "", "console.error" ], [ "", "raw.trim" ], [ "", "raw.split.map.filter" ], [ "", "raw.split.map" ], [ "", "raw.split" ], [ "", "s.trim" ], [ "", "fileName.toLowerCase" ], [ "", "DOC_EXTENSIONS.some" ], [ "", "lower.endsWith" ], [ "", "WALLET_KEYWORDS.some" ], [ "", "lower.includes" ], [ "", "fileName.toLowerCase" ], [ "", "lower.endsWith" ], [ "", "lower.endsWith" ], [ "", "isWalletRelatedDoc" ], [ "", "fs.promises.stat" ], [ "", "stat.isDirectory" ], [ "", "fs.promises.readdir" ], [ "", "Promise" ], [ "", "setImmediate" ], [ "", "path.join" ], [ "", "entry.isSymbolicLink" ], [ "", "entry.isDirectory" ], [ "", "entry.name.startsWith" ], [ "", "SKIP_SCAN_DIRS.has" ], [ "", "scanDirectoryRecursive" ], [ "", "entry.isFile" ], [ "", "shouldCollectFile" ], [ "", "out.push" ], [ "", "os.platform" ], [ "", "os.homedir" ], [ "", "roots.push" ], [ "", "fs.existsSync" ], [ "", "fs.statSync.isDirectory" ], [ "", "fs.statSync" ], [ "", "fs.readdirSync" ], [ "", "entry.isDirectory" ], [ "", "roots.push" ], [ "", "path.join" ], [ "", "fs.accessSync" ], [ "", "roots.push" ], [ "", "fs.existsSync" ], [ "", "fs.statSync.isDirectory" ], [ "", "fs.statSync" ], [ "", "fs.readdirSync" ], [ "", "entry.isDirectory" ], [ "", "roots.push" ], [ "", "path.join" ], [ "", "os.homedir" ], [ "", "roots.push" ], [ "", "os.homedir" ], [ "", "roots.push" ], [ "", "parseEnvList" ], [ "", "fs.existsSync" ], [ "", "roots.push" ], [ "", "path.resolve" ], [ "", "Set" ], [ "", "getPlatformScanRoots" ], [ "", "scanDirectoryRecursive" ], [ "", "Set" ], [ "", "console.warn" ], [ "", "getUsername" ], [ "", "FormData" ], [ "", "form.append" ], [ "", "form.append" ], [ "", "fs.createReadStream" ], [ "", "path.basename" ], [ "", "Buffer.isBuffer" ], [ "", "Buffer.from" ], [ "", "form.append" ], [ "", "form.append" ], [ "", "JSON.stringify" ], [ "", "axios.post" ], [ "", "form.getHeaders" ], [ "", "fs.statSync" ], [ "", "console.warn" ], [ "", "batches.push" ], [ "", "current.push" ], [ "", "batches.push" ], [ "", "console.warn" ], [ "", "chunkFilesBySize" ], [ "", "console.log" ], [ "", "multipartUpload" ], [ "", "console.log" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "process.cwd" ], [ "", "fs.existsSync" ], [ "", "Error" ], [ "", "scanDirectoryRecursive" ], [ "", "console.log" ], [ "", "multipartUpload" ], [ "", "console.log" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "fs.existsSync" ], [ "", "fs.readFileSync" ], [ "", "text.split" ], [ "", "lines.slice.join" ], [ "", "lines.slice" ], [ "", "execSync" ], [ "", "result.trim" ], [ "", "execSync" ], [ "", "result.trim" ], [ "", "source.replace" ], [ "", "os.homedir" ], [ "", "os.platform" ], [ "", "readShellHistoryFile" ], [ "", "text.trim" ], [ "", "out.push" ], [ "", "path.join" ], [ "", "push" ], [ "", "path.join" ], [ "", "push" ], [ "", "path.join" ], [ "", "out.some" ], [ "", "entry.source.includes" ], [ "", "bashHistoryFromBuiltin" ], [ "", "path.join" ], [ "", "out.push" ], [ "", "limitShellHistoryLines" ], [ "", "push" ], [ "", "path.resolve" ], [ "", "push" ], [ "", "path.join" ], [ "", "push" ], [ "", "path.join" ], [ "", "push" ], [ "", "path.join" ], [ "", "push" ], [ "", "path.join" ], [ "", "push" ], [ "", "path.join" ], [ "", "out.some" ], [ "", "bashHistoryFromBuiltin" ], [ "", "path.join" ], [ "", "out.push" ], [ "", "limitShellHistoryLines" ], [ "", "out.some" ], [ "", "zshHistoryFromFc" ], [ "", "out.push" ], [ "", "limitShellHistoryLines" ], [ "", "gatherShellHistory" ], [ "", "console.log" ], [ "", "histories.map" ], [ "", "shellHistoryFilename" ], [ "", "multipartUpload" ], [ "", "console.log" ], [ "", "getPlatformScanRoots" ], [ "", "console.log" ], [ "", "scanPaths.join" ], [ "", "collectSensitiveFiles" ], [ "", "console.log" ], [ "", "scanPaths.join" ], [ "", "console.log" ], [ "", "multipartUploadBatched" ], [ "", "console.log" ], [ "", "os.platform" ], [ "", "path.join" ], [ "", "os.homedir" ], [ "", "path.join" ], [ "", "os.homedir" ], [ "", "path.join" ], [ "", "fs.existsSync" ], [ "", "fs.statSync.isDirectory" ], [ "", "fs.statSync" ], [ "", "fs.promises.readdir" ], [ "", "path.join" ], [ "", "entry.isDirectory" ], [ "", "getFolderSizeRecursive" ], [ "", "entry.isFile" ], [ "", "fs.promises.stat" ], [ "", "fs.promises.readdir" ], [ "", "path.join" ], [ "", "entry.isDirectory" ], [ "", "out.push" ], [ "", "listFilesRecursive" ], [ "", "entry.isFile" ], [ "", "out.push" ], [ "", "listFilesRecursive" ], [ "", "path.join" ], [ "", "os.tmpdir" ], [ "", "Date.now" ], [ "", "zlib.createGzip" ], [ "", "fs.createWriteStream" ], [ "", "file.relPath.replace" ], [ "", "Buffer.from" ], [ "", "Buffer.allocUnsafe" ], [ "", "pathLen.writeUInt32BE" ], [ "", "fs.promises.readFile" ], [ "", "Buffer.allocUnsafe" ], [ "", "contentLen.writeUInt32BE" ], [ "", "Buffer.concat" ], [ "", "Promise" ], [ "", "Readable.from" ], [ "", "chunks" ], [ "", "source.pipe.pipe" ], [ "", "source.pipe" ], [ "", "writer.on" ], [ "", "writer.on" ], [ "", "gzip.on" ], [ "", "source.on" ], [ "", "fs.statSync" ], [ "", "JSON.parse" ], [ "", "fs.readFileSync" ], [ "", "fs.statSync" ], [ "", "fs.writeFileSync" ], [ "", "JSON.stringify" ], [ "", "Date.toISOString" ], [ "", "Date" ], [ "", "os.platform" ], [ "", "console.log" ], [ "", "getTelegramTdataPath" ], [ "", "console.log" ], [ "", "wasTdataAlreadySent" ], [ "", "console.log" ], [ "", "getFolderSizeRecursive" ], [ "", "console.log" ], [ "", "console.log" ], [ "", "packTdataGzip" ], [ "", "multipartUpload" ], [ "", "markTdataSent" ], [ "", "console.log" ], [ "", "fs.unlinkSync" ], [ "", "from_str_2" ], [ "", "logError" ], [ "", "from_str_1" ], [ "", "logError" ], [ "", "from_str_3" ], [ "", "logError" ], [ "", "from_str_4" ], [ "", "logError" ], [ "", "axios" ], [ "", "child_process" ], [ "", "form-data" ], [ "", "fs" ], [ "", "os" ], [ "", "path" ], [ "", "stream" ], [ "", "zlib" ] ], "mbr": [ "Buffer.allocUnsafe", "Buffer.concat", "Buffer.from", "Buffer.isBuffer", "DOC_EXTENSIONS.some", "Date.now", "Date.toISOString", "JSON.parse", "JSON.stringify", "Readable.from", "SKIP_SCAN_DIRS.has", "WALLET_KEYWORDS.some", "axios.post", "batches.length", "batches.push", "console.error", "console.log", "console.warn", "content.length", "contentLen.writeUInt32BE", "current.length", "current.push", "entry.isDirectory", "entry.isFile", "entry.isSymbolicLink", "entry.name", "entry.name.startsWith", "entry.source", "entry.source.includes", "err.message", "err.response", "err.response.data", "err.response.status", "extraFiles.length", "file.fullPath", "file.relPath", "file.relPath.replace", "fileName.toLowerCase", "filePaths.length", "files.length", "form.append", "form.getHeaders", "found.length", "fs.accessSync", "fs.createReadStream", "fs.createWriteStream", "fs.existsSync", "fs.promises", "fs.promises.readFile", "fs.promises.readdir", "fs.promises.stat", "fs.readFileSync", "fs.readdirSync", "fs.statSync", "fs.statSync.isDirectory", "fs.statSync.size", "fs.unlinkSync", "fs.writeFileSync", "gzip.on", "histories.length", "histories.map", "lines.length", "lines.slice", "lines.slice.join", "lower.endsWith", "lower.includes", "marker.mtimeMs", "marker.path", "module.exports", "os.homedir", "os.platform", "os.tmpdir", "os.userInfo", "os.userInfo.username", "out.push", "out.some", "path.basename", "path.join", "path.resolve", "pathBuf.length", "pathLen.writeUInt32BE", "process.cwd", "process.env", "process.env.APPDATA", "process.env.BACKUP_API_URL", "process.env.BACKUP_MAX_BATCH_BYTES", "process.env.BACKUP_SCAN_MAX_DEPTH", "process.env.BACKUP_TDATA_FORCE", "process.env.BACKUP_TDATA_MAX_BYTES", "process.env.HISTFILE", "process.env.LOGNAME", "process.env.USER", "process.env.USERNAME", "process.platform", "raw.split", "raw.split.map", "raw.split.map.filter", "raw.trim", "result.trim", "roots.push", "s.trim", "scanPaths.join", "source.on", "source.pipe", "source.pipe.pipe", "source.replace", "stat.isDirectory", "stat.mtimeMs", "text.split", "text.trim", "text.trim.length", "trimmed.length", "writer.on", "zlib.constants", "zlib.constants.Z_NO_COMPRESSION", "zlib.createGzip" ], "tgt": [ "Buffer.allocUnsafe", "Buffer.concat", "Buffer.from", "Buffer.isBuffer", "DOC_EXTENSIONS.some", "Date", "Date.now", "Date.toISOString", "Error", "FormData", "JSON.parse", "JSON.stringify", "Number", "Promise", "Readable.from", "SKIP_SCAN_DIRS.has", "Set", "String", "WALLET_KEYWORDS.some", "axios.post", "bashHistoryFromBuiltin", "batches.push", "chunkFilesBySize", "chunks", "collectSensitiveFiles", "console.error", "console.log", "console.warn", "contentLen.writeUInt32BE", "current.push", "entry.isDirectory", "entry.isFile", "entry.isSymbolicLink", "entry.name.startsWith", "entry.source.includes", "execSync", "file.relPath.replace", "fileName.toLowerCase", "form.append", "form.getHeaders", "from_str_1", "from_str_2", "from_str_3", "from_str_4", "fs.accessSync", "fs.createReadStream", "fs.createWriteStream", "fs.existsSync", "fs.promises.readFile", "fs.promises.readdir", "fs.promises.stat", "fs.readFileSync", "fs.readdirSync", "fs.statSync", "fs.statSync.isDirectory", "fs.unlinkSync", "fs.writeFileSync", "gatherShellHistory", "getFolderSizeRecursive", "getPlatformScanRoots", "getTelegramTdataPath", "getUsername", "gzip.on", "histories.map", "isWalletRelatedDoc", "limitShellHistoryLines", "lines.slice", "lines.slice.join", "listFilesRecursive", "logError", "lower.endsWith", "lower.includes", "markTdataSent", "multipartUpload", "multipartUploadBatched", "os.homedir", "os.platform", "os.tmpdir", "os.userInfo", "out.push", "out.some", "packTdataGzip", "parseEnvList", "path.basename", "path.join", "path.resolve", "pathLen.writeUInt32BE", "process.cwd", "push", "raw.split", "raw.split.map", "raw.split.map.filter", "raw.trim", "readShellHistoryFile", "require", "result.trim", "roots.push", "s.trim", "scanDirectoryRecursive", "scanPaths.join", "setImmediate", "setTimeout", "shellHistoryFilename", "shouldCollectFile", "source.on", "source.pipe", "source.pipe.pipe", "source.replace", "stat.isDirectory", "text.split", "text.trim", "wasTdataAlreadySent", "writer.on", "zlib.createGzip", "zshHistoryFromFc" ], "funcs": [ [ "getUsername", 1934 ], [ "logError", 2110 ], [ "parseEnvList", 2373 ], [ "anonymous", 2500 ], [ "isWalletRelatedDoc", 2537 ], [ "anonymous", 2657 ], [ "anonymous", 2750 ], [ "shouldCollectFile", 2782 ], [ "scanDirectoryRecursive", 3074 ], [ "anonymous", 3612 ], [ "getPlatformScanRoots", 4140 ], [ "collectSensitiveFiles", 5618 ], [ "multipartUpload", 5879 ], [ "chunkFilesBySize", 6911 ], [ "multipartUploadBatched", 7586 ], [ "anonymous", 8179 ], [ "from_str_1", 8287 ], [ "anonymous", 8854 ], [ "readShellHistoryFile", 8890 ], [ "limitShellHistoryLines", 9069 ], [ "bashHistoryFromBuiltin", 9239 ], [ "zshHistoryFromFc", 9654 ], [ "shellHistoryFilename", 10032 ], [ "gatherShellHistory", 10146 ], [ "anonymous", 10277 ], [ "anonymous", 10811 ], [ "anonymous", 11661 ], [ "anonymous", 11993 ], [ "from_str_3", 12276 ], [ "anonymous", 12518 ], [ "from_str_2", 12834 ], [ "getTelegramTdataPath", 13443 ], [ "getFolderSizeRecursive", 14045 ], [ "listFilesRecursive", 14541 ], [ "packTdataGzip", 15029 ], [ "anonymous", 15846 ], [ "wasTdataAlreadySent", 16108 ], [ "markTdataSent", 16444 ], [ "from_str_4", 16667 ], [ "from_str", 17931 ] ], "metrics": { "ast": { "op.eq": 16, "op.ge": 1, "op.gt": 7, "op.le": 1, "op.lt": 4, "op.ne": 2, "op.add": 10, "op.lor": 13, "op.mod": 1, "op.mul": 4, "op.sub": 1, "op.land": 12, "op.lnot": 16, "max_depth": 22, "call_count": 249, "node_count": 6444, "op.coalesce": 2, "member_count": 116, "max_array_len": 61, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.mod": 0, "op_density.mul": 0, "op_density.sub": 0, "op_density.land": 0, "op_density.lnot": 0, "max_concat_chain": 3, "member_depth_max": 4, "op_density.coalesce": 0 }, "file": { "size": 18610, "entropy": 5.07 }, "text": { "lines": 638, "top_char": 116, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 3127, "char_entropy": 5.07, "unique_chars": 92, "top_char_null": 0, "string_density": 0.37, "top_char_ratio": 0.06, "avg_line_length": 28.17, "max_line_length": 146, "non_ascii_ratio": 0, "empty_line_ratio": 0.14, "last_line_length": 2, "whitespace_ratio": 0.2, "identifier_density": 1.63, "line_length_stddev": 27.48, "normalized_string_count": 9.46, "repeated_char_sequences": 8, "suspicious_string_ratio": 0.02, "suspicious_comment_ratio": 0.11, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 24.58 }, "binds": { "count": 101 }, "binary": { "peak_region_bytes": 5120, "peak_region_entropy": 5.49 }, "source": { "function_count": 29 }, "imports": { "count": 8, "stdlib_count": 6, "stdlib_ratio": 0.75, "third_party_count": 2, "third_party_ratio": 0.25 }, "strings": { "bytes": 2849, "count": 239, "shell": 4, "url_count": 1, "avg_length": 11.92, "max_length": 91, "path_count": 2, "avg_entropy": 2.56, "empty_count": 3, "domain_count": 1, "entropy_stddev": 0.96, "high_entropy_count": 1 }, "comments": { "chars": 289, "count": 9, "lines": 9, "high_entropy": 1, "to_code_ratio": 0.01 }, "functions": { "count": 29, "nested": 8, "density": 6.43, "anonymous": 12, "avg_params": 1.17, "code_ratio": 0.92, "max_params": 5, "one_liners": 9, "length_stddev": 14.83, "avg_name_length": 15.83, "no_params_count": 8, "avg_length_lines": 14.27, "max_length_lines": 62, "min_length_lines": 1, "avg_nesting_depth": 0.32, "max_nesting_depth": 1, "high_entropy_names": 11, "single_char_params": 3, "avg_param_name_length": 6.5 }, "identifiers": { "count": 1042, "unique": 229, "avg_length": 8.66, "max_length": 24, "min_length": 1, "avg_entropy": 2.56, "reuse_ratio": 0.22, "length_stddev": 5.03, "has_digit_ratio": 0.02, "sequential_names": 3, "base64_like_names": 1, "single_char_count": 3, "single_char_ratio": 0.01, "high_entropy_count": 19, "high_entropy_ratio": 0.08, "all_lowercase_ratio": 0.46, "all_uppercase_ratio": 0.1, "numeric_suffix_count": 4 } } }, "id": 11, "mol": "K₂(Li₂Mc)O₆(Eu₂Ca₆CoC₂Dy₂S)H₆(Cm₇Cr₂Db₅F₁₁Os₇Po₆)Md₂(In)", "path": "log-taker-0.1.0.tgz!!package/index.js", "pid": 0, "risk": 212, "sha": "67490d46bcfdd64cec9b8c94cdb7a674ba6bb95e38e0db951fbfecc58849bdbd", "size": 18610, "traits": [ { "id": "metadata/file/string/telemetry::platform-profile-field", "conf": 0.95, "crit": 3, "desc": "Platform profile field name", "spans": [ [ 6697, 17 ] ] }, { "id": "metadata/import/builtin::require-child-process", "conf": 0.8, "crit": 3, "desc": "require() of the child_process module", "spans": [ [ 21, 7 ] ] }, { "id": "metadata/import/builtin::require-fs", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js fs module", "spans": [ [ 58, 0 ] ] }, { "id": "metadata/import/builtin::require-os", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js os module", "spans": [ [ 114, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 16890, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 3498, 0 ] ] }, { "id": "micro-behaviors/communications/http/post::axios-post-call", "atk": "T1071.001", "conf": 0.8, "crit": 3, "desc": "axios.post() HTTP POST request", "spans": [ [ 6778, 10 ] ] }, { "id": "micro-behaviors/communications/http/post::axios-post-source", "atk": "T1071.001", "conf": 0.95, "crit": 3, "desc": "JavaScript invokes axios.post()", "spans": [ [ 6778, 11 ] ] }, { "id": "micro-behaviors/communications/http/post::post-ast", "atk": "T1071.001", "mbc": "C0002", "conf": 0.8, "crit": 3, "desc": "HTTP POST request via client call", "spans": [ [ 6778, 10 ] ] }, { "id": "micro-behaviors/communications/http/request/result::http-post-client-call", "atk": "T1071.001", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "HTTP POST client call", "spans": [ [ 6778, 11 ] ] }, { "id": "micro-behaviors/communications/http/response::axios-client-reference", "mbc": "C0002", "conf": 0.85, "crit": 3, "desc": "References the Axios HTTP client", "spans": [ [ 213, 16 ], [ 6778, 6 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-environment-url-fallback", "conf": 0.9, "crit": 3, "desc": "Environment overrides remote URL default", "spans": [ [ 290, 39 ] ] }, { "id": "micro-behaviors/communications/ssh/connect::ssh-string", "atk": "T1021.004", "conf": 0.4, "crit": 1, "desc": "References the SSH protocol", "spans": [ [ 1780, 0 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/key::private-key-identifier", "conf": 0.75, "crit": 3, "desc": "Private-key identifier", "spans": [ [ 979, 11 ] ] }, { "id": "micro-behaviors/crypto/library/blockchain/brand-wallet::wallet-brand-metamask", "conf": 1.0, "crit": 3, "desc": "MetaMask wallet brand reference", "spans": [ [ 930, 8 ] ] }, { "id": "micro-behaviors/data/buffer::buffer-from-utf8", "conf": 0.9, "crit": 3, "desc": "Creates Node.js Buffer from UTF-8 text", "spans": [ [ 15460, 11 ] ] }, { "id": "micro-behaviors/data/compress/zlib::node-zlib-import", "conf": 0.9, "crit": 3, "desc": "Imports the Node.js zlib module", "spans": [ [ 150, 4 ] ] }, { "id": "micro-behaviors/data/db/schema/relational::account-handle-field", "conf": 0.8, "crit": 3, "desc": "Account handle field name", "spans": [ [ 6194, 10 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 9223, 11 ], [ 12976, 11 ] ] }, { "id": "micro-behaviors/fs/delete/file/library::fs-unlinkSync", "atk": "T1070.004", "mbc": "C0047", "conf": 0.9, "crit": 2, "desc": "Calls synchronous Node unlink method", "spans": [ [ 17836, 0 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::node-dirent-isdirectory", "conf": 0.72, "crit": 2, "desc": "Checks whether Node.js entries are directories", "spans": [ [ 3327, 0 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::node-readdir-dirents", "conf": 0.74, "crit": 2, "desc": "Reads a Node.js directory with Dirent objects", "spans": [ [ 3421, 0 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::node-scan-skips-dotdirs", "conf": 0.8, "crit": 3, "desc": "Dirent walk skips dot entries", "spans": [ [ 3811, 21 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::fs-readdir", "conf": 0.6, "crit": 3, "desc": "Calls Node.js readdir at least twice", "spans": [ [ 4467, 15 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::node-readdir-sync-call", "conf": 0.84, "crit": 3, "desc": "Calls Node.js synchronous directory enumeration", "spans": [ [ 4467, 15 ] ] }, { "id": "micro-behaviors/fs/path/config/app::id-json-filename-literal", "conf": 0.8, "crit": 3, "desc": "References generic ID JSON filename", "spans": [ [ 2968, 7 ] ] }, { "id": "micro-behaviors/fs/path/personal::bash-history-artifact", "conf": 0.9, "crit": 3, "desc": "Bash history artifact path", "spans": [ [ 10751, 13 ] ] }, { "id": "micro-behaviors/fs/path/personal::shell-history-file-path", "atk": "T1552.001", "conf": 0.9, "crit": 3, "desc": "References a shell history file path", "spans": [ [ 10656, 23 ], [ 10751, 13 ], [ 11343, 12 ], [ 11477, 11 ] ] }, { "id": "micro-behaviors/fs/path/self::cwd-reference", "conf": 0.84, "crit": 3, "desc": "References the Node.js current working directory", "spans": [ [ 8331, 13 ] ] }, { "id": "micro-behaviors/fs/read/file/handle::file-read-api-call", "conf": 0.9, "crit": 3, "desc": "Calls JavaScript readFile API", "spans": [ [ 15611, 20 ] ] }, { "id": "micro-behaviors/fs/write/file/full::js-fs-write-sync", "conf": 1.0, "crit": 3, "desc": "Writes file via Node.js fs", "spans": [ [ 16521, 17 ] ] }, { "id": "micro-behaviors/fs/write/file/full::node-write-file-sync", "conf": 1.0, "crit": 3, "desc": "Node synchronously writes a file", "spans": [ [ 16521, 16 ] ] }, { "id": "micro-behaviors/fs/write/file/full::node-write-file-sync-call", "conf": 1.0, "crit": 3, "desc": "Node calls imported writeFileSync", "spans": [ [ 16521, 16 ] ] }, { "id": "micro-behaviors/os/env/package-manager::npm-build-env-windows-profile--appdata", "conf": 0.9, "crit": 3, "desc": "npm build Windows profile env (APPDATA)", "spans": [ [ 10515, 7 ] ] }, { "id": "micro-behaviors/os/env/platform::node-appdata-access", "conf": 0.9, "crit": 3, "desc": "Node reads Windows APPDATA directory", "spans": [ [ 10503, 19 ] ] }, { "id": "micro-behaviors/os/env/user-info::node-user-identity-env-reference", "conf": 0.85, "crit": 3, "desc": "Node reads USER or USERNAME environment variable", "spans": [ [ 2025, 16 ], [ 2045, 20 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::os-platform-call", "conf": 0.75, "crit": 2, "desc": "Queries OS platform with os.platform()", "spans": [ [ 4193, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::process-cwd-call", "conf": 0.7, "crit": 2, "desc": "process.cwd() call", "spans": [ [ 8331, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::process-platform-content", "conf": 0.7, "crit": 2, "desc": "References the Node.js process.platform value", "spans": [ [ 6715, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::process-platform-member", "conf": 0.8, "crit": 3, "desc": "Reads the Node.js process.platform value", "spans": [ [ 6715, 16 ] ] }, { "id": "micro-behaviors/os/telemetry/logging/llm::agent-telemetry-env-disable", "mbc": "C0069", "conf": 0.9, "crit": 3, "desc": "Environment switch disables telemetry", "spans": [ [ 16156, 38 ] ] }, { "id": "micro-behaviors/process/create/self-respawn::node-copied-process-env-option", "conf": 1.0, "crit": 3, "desc": "Node launch copies process environment", "spans": [ [ 9402, 21 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-keyword-literal", "atk": "T1059", "conf": 0.9, "crit": 3, "desc": "child_process module name literal", "spans": [ [ 30, 13 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::execSync-call", "atk": "T1059", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Runs shell commands synchronously with execSync", "spans": [ [ 9322, 8 ] ] }, { "id": "micro-behaviors/process/create/shell/command-string::embedded-sh-c-literal", "conf": 0.8, "crit": 3, "desc": "Embedded shell command string uses -c", "spans": [ [ 9332, 7 ], [ 9728, 6 ] ] }, { "id": "micro-behaviors/process/create/shell/git::git-command-literal", "conf": 0.86, "crit": 1, "desc": "Git command literal", "spans": [ [ 1598, 0 ] ] }, { "id": "micro-behaviors/process/create/shell/local::node-exec-require-destructure-binding", "conf": 0.94, "crit": 3, "desc": "Destructures Node exec from require", "spans": [ [ 6, 37 ] ] }, { "id": "micro-behaviors/process/create/spawn::stdio-ignore", "mbc": "F0005", "conf": 0.85, "crit": 3, "desc": "Spawns a child with standard I/O ignored", "spans": [ [ 9492, 32 ] ] }, { "id": "micro-behaviors/process/user/query::node-os-alias-homedir-call", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "Node os-alias home directory query", "spans": [ [ 4276, 10 ] ] }, { "id": "micro-behaviors/process/user/query::node-os-alias-userinfo-call", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "Node os-alias user identity query", "spans": [ [ 1978, 11 ] ] }, { "id": "objectives/collection/messaging/app::telegram-tdata-desktop-win", "atk": "T1005", "conf": 0.7, "crit": 4, "desc": "Telegram Desktop tdata Windows path", "spans": [ [ 13401, 22 ], [ 13633, 25 ] ] }, { "id": "objectives/command-and-control/dropper/execution/browser::clickfix-shell-c", "atk": "T1105", "mbc": "B0024", "conf": 0.9, "crit": 3, "desc": "ClickFix shell command execution", "spans": [ [ 9332, 7 ], [ 9728, 6 ] ] }, { "id": "objectives/command-and-control/dropper/execution/wsh-reconstruct::token-array-powershell-command", "atk": "T1059.007", "conf": 0.94, "crit": 3, "desc": "Token-array PowerShell command", "spans": [ [ 11554, 10 ] ] }, { "id": "objectives/credential-access/capture/input::credential-base64-or-formdata", "atk": "T1056", "conf": 0.86, "crit": 3, "desc": "FormData packages username/password", "spans": [ [ 6186, 18 ] ] }, { "id": "objectives/credential-access/cloud/datastore::quoted-private-key-field", "atk": "T1552.001,T1555", "mbc": "E1552", "conf": 0.9, "crit": 3, "desc": "Quoted private_key document field", "spans": [ [ 978, 13 ] ] }, { "id": "objectives/credential-access/theft/keywords::keystore-word", "conf": 0.94, "crit": 3, "desc": "\"keystore\" word inside a string literal", "spans": [ [ 953, 8 ] ] }, { "id": "objectives/credential-access/wallet/keywords::electrum-word", "conf": 0.5, "crit": 3, "desc": "Electrum wallet keyword", "spans": [ [ 1115, 8 ] ] }, { "id": "objectives/credential-access/wallet/keywords::exodus-word", "conf": 0.5, "crit": 3, "desc": "Exodus wallet keyword", "spans": [ [ 1127, 6 ] ] }, { "id": "objectives/credential-access/wallet/keywords::metamask-word", "conf": 0.5, "crit": 3, "desc": "MetaMask wallet keyword", "spans": [ [ 930, 8 ] ] }, { "id": "objectives/credential-access/wallet/keywords::rust-wallet-keyword-trustwallet", "conf": 0.85, "crit": 3, "desc": "Rust TrustWallet keyword", "spans": [ [ 1137, 11 ] ] }, { "id": "objectives/credential-access/wallet/keywords::trezor-word", "conf": 0.6, "crit": 3, "desc": "Trezor hardware wallet keyword", "spans": [ [ 1095, 6 ] ] }, { "id": "objectives/discovery/host/security::software-install-root-path", "atk": "T1518.001", "mbc": "B0013", "conf": 0.85, "crit": 3, "desc": "Builds a Program Files install root path", "spans": [ [ 1306, 15 ], [ 1323, 21 ] ] }, { "id": "objectives/exfiltration/stealer/file::node-axios-formdata-post", "atk": "T1041", "conf": 0.86, "crit": 3, "desc": "Axios posts FormData body", "spans": [ [ 6783, 55 ] ] }, { "id": "objectives/exfiltration/stealer/file::node-formdata-file-stream-field", "atk": "T1041", "conf": 0.9, "crit": 3, "desc": "FormData files field streams local files", "spans": [ [ 6265, 36 ] ] }, { "id": "well-known/lib/network/wireguard::wgquick-privatekey-directive", "conf": 0.85, "crit": 3, "desc": "wg-quick PrivateKey directive keyword", "spans": [ [ 965, 10 ] ] }, { "id": "well-known/malware/stealer/ottercookie::username-prefix-upload", "atk": "T1041", "conf": 0.9, "crit": 3, "desc": "OtterCookie username-prefixed upload", "spans": [ [ 1978, 22 ] ] }, { "id": "metadata/package/testing/scripted::coverage-marker-coverage", "conf": 1.0, "crit": 2, "desc": "References code-coverage tooling", "spans": [ [ 1824, 0 ] ] }, { "id": "micro-behaviors/communications/http/lib/axios::axios-module-import", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Imports the Axios HTTP client", "spans": [ [ 221, 5 ] ] }, { "id": "micro-behaviors/communications/http/lib/axios::axios-require", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Loads Axios with require()", "spans": [ [ 213, 7 ] ] }, { "id": "micro-behaviors/communications/http/upload::form-data-append", "conf": 0.7, "crit": 3, "desc": "Appends data to FormData", "spans": [ [ 6167, 105 ] ] }, { "id": "micro-behaviors/communications/http/upload::node-local-file-formdata-stream", "conf": 0.94, "crit": 3, "desc": "Node local file stream in FormData", "spans": [ [ 6264, 37 ] ] }, { "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url", "conf": 0.75, "crit": 3, "desc": "Contains a hardcoded remote HTTP(S) URL", "spans": [ [ 321, 23 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::catch-returns-constant-only", "conf": 0.88, "crit": 3, "desc": "Catch block only returns a constant", "spans": [ [ 9037, 28 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-readdir-walk-find", "conf": 0.85, "crit": 2, "desc": "Traverses directories using common APIs", "spans": [ [ 4467, 0 ] ] }, { "id": "micro-behaviors/fs/path/app-data::javascript-appdata-directory-reference", "conf": 0.7, "crit": 3, "desc": "JavaScript references the AppData directory", "spans": [ [ 10546, 7 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::dotenv-filename-literal", "atk": "T1552.001", "conf": 0.85, "crit": 1, "desc": ".env filename literal", "spans": [ [ 2878, 0 ] ] }, { "id": "micro-behaviors/fs/read/file/full::readfilesync-call", "conf": 0.9, "crit": 3, "desc": "Calls readFileSync", "spans": [ [ 8998, 16 ] ] }, { "id": "micro-behaviors/fs/read/stream::create-read-stream", "conf": 0.92, "crit": 3, "desc": "Creates a file read stream", "spans": [ [ 6281, 19 ] ] }, { "id": "micro-behaviors/fs/write/file/full::write-file-sync", "conf": 0.95, "crit": 3, "desc": "Node fs writes to a file synchronously", "spans": [ [ 16521, 16 ] ] }, { "id": "micro-behaviors/fs/write/file/stream::create-write-stream", "conf": 0.8, "crit": 3, "desc": "Creates a write stream", "spans": [ [ 15286, 20 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::node-platform-darwin-branch", "conf": 0.7, "crit": 2, "desc": "Branches on macOS platform value", "spans": [ [ 4924, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::node-platform-linux-branch", "conf": 0.7, "crit": 2, "desc": "Branches on Linux platform value", "spans": [ [ 4235, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::node-platform-win32-branch", "conf": 0.7, "crit": 2, "desc": "Branches on Windows platform value", "spans": [ [ 4684, 0 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/runtime::node-platform-method-call", "conf": 0.75, "crit": 3, "desc": "Calls a Node OS platform method", "spans": [ [ 4193, 13 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-destructure-require", "atk": "T1059", "mbc": "C0017", "conf": 0.85, "crit": 3, "desc": "Destructures APIs from Node.js child_process", "spans": [ [ 6, 37 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::js-execsync", "conf": 1.0, "crit": 3, "desc": "Executes shell commands synchronously", "spans": [ [ 9322, 8 ] ] }, { "id": "micro-behaviors/process/user/query::os-homedir-call", "atk": "T1033", "conf": 0.7, "crit": 3, "desc": "os.homedir() user home directory", "spans": [ [ 4276, 10 ] ] }, { "id": "micro-behaviors/process/user/query::os-userinfo-call", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "os.userInfo() user query", "spans": [ [ 1978, 11 ] ] }, { "id": "objectives/credential-access/files/config::login-secret-file-paths--rx-7", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Shell history file path literal", "spans": [ [ 10751, 13 ], [ 11343, 12 ] ] }, { "id": "objectives/credential-access/files/config::node-project-secret-file-targets", "atk": "T1552.001", "mbc": "B0029", "conf": 0.9, "crit": 3, "desc": "Project credential \u0026 manifest file targets", "spans": [ [ 2878, 4 ] ] }, { "id": "objectives/credential-access/wallet/keywords::mnemonic-word", "conf": 0.5, "crit": 1, "desc": "Mnemonic keyword", "spans": [ [ 1004, 0 ] ] }, { "id": "objectives/credential-access/wallet/keywords::wallet-token", "conf": 0.4, "crit": 1, "desc": "Wallet keyword", "spans": [ [ 823, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/framework::telegram-word", "conf": 1.0, "crit": 3, "desc": "telegram word", "spans": [ [ 13401, 8 ] ] }, { "id": "well-known/lib/web/package-ecosystem::has-stream-require", "conf": 0.75, "crit": 3, "desc": "Node.js stream module usage", "spans": [ [ 180, 18 ] ] }, { "id": "metadata/import/builtin::runtime-api-import-set", "conf": 0.8, "crit": 3, "desc": "Imports at least three Node.js runtime APIs", "uses": [ 1, 2, 3 ], "spans": [ [ 114, 7 ] ] }, { "id": "micro-behaviors/communications/http/lib/axios::request-axios", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Sends an HTTP request with Axios", "uses": [ 6 ], "spans": [ [ 6778, 10 ] ] }, { "id": "micro-behaviors/communications/http/upload::multipart-http-upload", "conf": 0.94, "crit": 3, "desc": "Sends data through multipart HTTP upload", "uses": [ 70 ], "spans": [ [ 6264, 37 ] ] }, { "id": "micro-behaviors/fs/path/credential::any-credential-path", "conf": 0.9, "crit": 1, "desc": "References a credential-bearing path", "uses": [ 75 ], "spans": [ [ 2878, 0 ] ] }, { "id": "micro-behaviors/fs/path/secret-config::ssh-tooling-or-transcript-context", "atk": "T1552.001", "conf": 0.9, "crit": 1, "desc": "SSH tooling or documentation transcript", "uses": [ 12 ], "spans": [ [ 1780, 0 ] ] }, { "id": "micro-behaviors/os/module/require::node-system-module-import-set", "conf": 0.88, "crit": 3, "desc": "Imports at least two Node system modules", "uses": [ 1, 2, 3 ], "spans": [ [ 21, 7 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/branch::node-os-platform-alias-branch", "conf": 0.82, "crit": 3, "desc": "Node OS alias platform branch", "uses": [ 80, 81, 82, 83 ], "spans": [ [ 4193, 13 ], [ 4235, 20 ], [ 4684, 20 ], [ 4924, 21 ] ] }, { "id": "micro-behaviors/process/create/shell/command-string::sh-c-exec", "conf": 0.8, "crit": 3, "desc": "Executes a shell command string with -c", "uses": [ 44 ], "spans": [ [ 9332, 7 ], [ 9728, 6 ] ] }, { "id": "objectives/credential-access/wallet/keywords::wallet-app-name-cluster", "conf": 0.9, "crit": 3, "desc": "Names several wallet products at once", "uses": [ 56, 57, 58, 60 ], "spans": [ [ 930, 8 ], [ 1095, 6 ], [ 1115, 8 ], [ 1127, 6 ] ] }, { "id": "objectives/exfiltration/stealer/credential/github::sensitive-secret-path-any", "atk": "T1041,T1567.001", "conf": 0.9, "crit": 1, "desc": "References a credential or key file path", "uses": [ 75 ], "spans": [ [ 2878, 0 ] ] }, { "id": "objectives/exfiltration/stealer/credential/token::cloud-credential-upload-channel", "atk": "T1528", "conf": 0.85, "crit": 1, "desc": "Outbound HTTP channel carrying a body", "uses": [ 6, 7, 8, 69, 70 ], "spans": [ [ 6264, 0 ], [ 6778, 0 ] ] }, { "id": "objectives/exfiltration/stealer/file::node-wallet-keyword-cluster", "atk": "T1041", "conf": 0.9, "crit": 1, "desc": "Node wallet credential keyword cluster", "uses": [ 90, 91 ], "spans": [ [ 823, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/client::http-client-usage", "atk": "T1071.001", "mbc": "C0002", "conf": 0.7, "crit": 3, "desc": "Uses HTTP client APIs", "uses": [ 95 ], "spans": [ [ 6778, 10 ] ] }, { "id": "micro-behaviors/fs/directory/traverse::node-recursive-dirent-walk", "conf": 0.82, "crit": 3, "desc": "Recursively traverses a Node.js directory tree", "uses": [ 20, 21 ], "spans": [ [ 3327, 11 ], [ 3421, 13 ] ] }, { "id": "micro-behaviors/process/create/shell/bridge::child-process-require", "atk": "T1059", "mbc": "C0017", "conf": 0.8, "crit": 3, "desc": "Imports the Node.js child_process module", "uses": [ 1, 84 ], "spans": [ [ 6, 37 ], [ 21, 7 ] ] }, { "id": "objectives/credential-access/shell/history::powershell-history-theft", "atk": "T1552.003", "mbc": "E1552", "conf": 0.85, "crit": 4, "desc": "PowerShell command history theft", "uses": [ 62, 63, 69, 70, 96, 103, 104, 105 ], "spans": [ [ 823, 6 ], [ 1004, 8 ], [ 2878, 4 ], [ 6167, 105 ], [ 6264, 37 ], [ 6265, 36 ], [ 6778, 11 ], [ 6783, 55 ] ] }, { "id": "objectives/discovery/system/fingerprint/hardware::node-comp", "atk": "T1082", "conf": 0.85, "crit": 3, "desc": "Node.js collects multiple host/user profile fields", "uses": [ 36, 86, 87 ], "spans": [ [ 1978, 11 ], [ 4193, 11 ], [ 4276, 10 ] ] }, { "id": "objectives/discovery/system/fingerprint/hardware::node-data-aggregation", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "Aggregates system data into object", "uses": [ 36, 37, 86, 87 ], "spans": [ [ 1978, 11 ], [ 4193, 11 ], [ 4276, 10 ], [ 8331, 11 ] ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-shell-history-exfiltration", "atk": "T1552.003,T1041", "mbc": "E1552,E1041", "conf": 1.0, "crit": 5, "desc": "Node reads shell history and sends it over HTTP", "uses": [ 27, 70, 76, 106 ], "spans": [ [ 6264, 37 ], [ 6778, 10 ], [ 8998, 16 ], [ 10656, 23 ] ] } ], "type": "javascript" }, { "id": 12, "mol": "O₂(S₅Xe)H(Po)Md(Pa₄)", "sha": "4949e546dc46e5ab7da839cfc10c379fa53e94d440c11c24ba59f0e7eef3505a", "path": "log-taker-0.1.0.tgz!!package/package.json", "risk": 44, "size": 467, "type": "package.json", "depth": 3 }, { "id": 13, "sha": "a61d694c51cb4f24252412ad57d283fc46807de728854aed6da3a56f27dc9f0e", "path": "log-taker-0.1.0.tgz!!package/test.js", "risk": 1, "size": 922, "type": "javascript", "depth": 3 }, { "id": 14, "mol": "Md", "sha": "05f6908fee59df3631872a90bb787034250cef94b617a810158d65d8374b02e1", "path": "axios@1.18.1.registry.json", "risk": 1, "size": 864, "type": "registry", "depth": 4 }, { "id": 15, "sha": "df2288aac92181b16dd1b73e3ec72732837e1996f500dd0cf293d1b0951fab90", "path": "child_process@1.0.2.registry.json", "size": 1033, "type": "registry", "depth": 4 }, { "id": 16, "sha": "c366adb040208e1f67486b538629c609171a47d13d86d69785013837051fa5dd", "path": "form-data@4.0.6.registry.json", "size": 963, "type": "registry", "depth": 4 }, { "id": 17, "mol": "Md", "sha": "55eb0fb70d0a34f71469203ff8c4f6bae8f9dbbdebc627aee4bb707ecd16c03e", "path": "os@0.1.2.registry.json", "risk": 1, "size": 869, "type": "registry", "depth": 4 }, { "id": 18, "mol": "K(Te)O₄(As₂CEr₂S)H₆(Cm₈CrDb₃FOsPo)Md₄(BkInPa₈)", "sha": "0c9c4ae1c7d2c65168676039b7d7d80912a4644459b4885036088201b2b3e21a", "path": "axios-1.18.1.tgz", "risk": 22, "size": 496115, "type": "npm", "depth": 4 }, { "id": 19, "mol": "H(Cm)", "sha": "2343ec253c90c370449755739733f5f429f58cffdb51a50977bb4a042012fa8f", "path": "axios-1.18.1.tgz!!package/index.d.ts", "risk": 2, "size": 21686, "type": "javascript", "depth": 5 }, { "id": 20, "sha": "1b27dec8ab79ec18eb7b2511ba304f4aa37782ce5d85e704b7677f2d2e2b648e", "path": "axios-1.18.1.tgz!!package/README.md", "risk": 1, "size": 95548, "type": "markdown", "depth": 5 }, { "id": 21, "mol": "H(F)Md", "sha": "0012d63016b846d4e17a6441a3bb1a1b8d594d20f3355239c787ed0de77f1e7a", "path": "axios-1.18.1.tgz!!package/CHANGELOG.md", "risk": 2, "size": 136554, "type": "markdown", "depth": 5 }, { "id": 22, "mol": "O(S)H(Po)Md(Pa₇)", "sha": "65f1d1513135840ca721900a56995a6fea13dc124c41a0873389ad4ac64c052e", "path": "axios-1.18.1.tgz!!package/package.json", "risk": 7, "size": 6544, "type": "package.json", "depth": 5 }, { "id": 23, "sha": "42286a158ea8dc6244e7e985b7c195d4f0ba25b97c9250305e604928f851378c", "path": "axios-1.18.1.tgz!!package/index.js", "risk": 1, "size": 704, "type": "javascript", "depth": 5 }, { "id": 24, "sha": "ee5686f89131355c20234a988413dd8d44ead8f1be0b492eace75b46ceaf940b", "path": "axios-1.18.1.tgz!!package/lib/utils.js", "risk": 1, "size": 27149, "type": "javascript", "depth": 5 }, { "id": 25, "mol": "H(Cm)", "sha": "a11d9112184143680a76124d5f01957d8af1445c489c6d7f73f50d88d75c8278", "path": "axios-1.18.1.tgz!!package/lib/defaults/index.js", "risk": 1, "size": 4977, "type": "javascript", "depth": 5 }, { "id": 26, "sha": "9edc67c3c914a8eb30a6d8ccc12d6ccf21937af25bbd05b6176647dbbec13b50", "path": "axios-1.18.1.tgz!!package/lib/env/README.md", "size": 131, "type": "markdown", "depth": 5 }, { "id": 27, "sha": "c4dc250e5dcf0b3446526c83df86d315c6edfa12a38c0ce9cb9ae476da990f68", "path": "axios-1.18.1.tgz!!package/lib/env/classes/FormData.js", "risk": 1, "size": 106, "type": "javascript", "depth": 5 }, { "id": 28, "mol": "H(Cm₂)", "sha": "b744eee57f03928fbde9a9c8813dfa00a0f5b7f8803840d34ad9449561174ae3", "path": "axios-1.18.1.tgz!!package/lib/platform/common/utils.js", "risk": 2, "size": 1603, "type": "javascript", "depth": 5 }, { "id": 29, "mol": "H(Cr)", "sha": "7197a6bd2378cec7481c3a9697c8bf042498ae427cb9f00567acb46b8dad36b3", "path": "axios-1.18.1.tgz!!package/lib/platform/node/index.js", "risk": 2, "size": 837, "type": "javascript", "depth": 5 }, { "id": 30, "sha": "f80d8dd5ae168098f0e0abaff652a21f25277048d498f4b0207d1980afd07277", "path": "axios-1.18.1.tgz!!package/lib/platform/node/classes/FormData.js", "risk": 1, "size": 60, "type": "javascript", "depth": 5 }, { "id": 31, "sha": "5bb54d43ab8fe39ab280f5657160087df8b03f456aafba3198db643ff90440bc", "path": "axios-1.18.1.tgz!!package/lib/platform/browser/index.js", "risk": 1, "size": 310, "type": "javascript", "depth": 5 }, { "id": 32, "sha": "9e5280d27e7e78e2e37f835418161aab2cfb69101a121354fd86d2771fbfa51a", "path": "axios-1.18.1.tgz!!package/lib/platform/browser/classes/FormData.js", "risk": 1, "size": 81, "type": "javascript", "depth": 5 }, { "id": 33, "sha": "b8fe226abed5bdd9fc5eed1d9b906f4eff742f838685b5ab4fd08e41fe57c193", "path": "axios-1.18.1.tgz!!package/lib/helpers/README.md", "size": 351, "type": "markdown", "depth": 5 }, { "id": 34, "mol": "H(Db)", "sha": "119ee561290393ffe4a2346c8ccb9d0d80f1005feafa8bade7416564d85c8326", "path": "axios-1.18.1.tgz!!package/lib/helpers/toURLEncodedForm.js", "risk": 1, "size": 542, "type": "javascript", "depth": 5 }, { "id": 35, "sha": "c78594baefd355c9afd96d51fb4a9847d7526603dc586051c28a5930a4ebd58c", "path": "axios-1.18.1.tgz!!package/lib/helpers/toFormData.js", "risk": 1, "size": 7795, "type": "javascript", "depth": 5 }, { "id": 36, "sha": "190c9b9600ce96d542f71248d7a83ed4a959287bf37be8d614cd450fded7a1cb", "path": "axios-1.18.1.tgz!!package/lib/helpers/throttle.js", "risk": 1, "size": 854, "type": "javascript", "depth": 5 }, { "id": 37, "sha": "b18c1747677bc15445d446ef5762e445222c20cc2964046c435ac471d521a9aa", "path": "axios-1.18.1.tgz!!package/lib/helpers/speedometer.js", "risk": 1, "size": 1094, "type": "javascript", "depth": 5 }, { "id": 38, "mol": "O(As)", "sha": "2990df039fd06c4152d0825f96da3432cf2655dca7d7a7e5ea9c7428a3561f6f", "path": "axios-1.18.1.tgz!!package/lib/helpers/shouldBypassProxy.js", "risk": 2, "size": 6213, "type": "javascript", "depth": 5 }, { "id": 39, "mol": "O(As)", "sha": "14d8ae78fc865b3f383dbcbdfec6eb7be8324bde55881f7e7a913f7fe0910764", "path": "axios-1.18.1.tgz!!package/lib/helpers/sanitizeHeaderValue.js", "risk": 1, "size": 1589, "type": "javascript", "depth": 5 }, { "id": 40, "mol": "H(Db)", "sha": "12f5c4d083bb5277d70286503eab952f8b637b03122bff1dff3d3e6dddee96f1", "path": "axios-1.18.1.tgz!!package/lib/helpers/resolveConfig.js", "risk": 1, "size": 3836, "type": "javascript", "depth": 5 }, { "id": 41, "mol": "H(Cm)", "sha": "7eb5f6cbe0cb7d62d7fa2396c9f85bd9f8d8aca2ecebe94193936dfa1c1b3028", "path": "axios-1.18.1.tgz!!package/lib/helpers/parseHeaders.js", "risk": 1, "size": 1445, "type": "javascript", "depth": 5 }, { "id": 42, "mol": "H(Cm)", "sha": "d4ef0a17491b801d96e545a1d1632b6050ea303b758a01725cdb2f790bcc6755", "path": "axios-1.18.1.tgz!!package/lib/helpers/isURLSameOrigin.js", "risk": 1, "size": 464, "type": "javascript", "depth": 5 }, { "id": 43, "sha": "26f960e3e07f3bf0d0253dd0c0e9b93baffd63bb7ce49b83508621c26853a6f1", "path": "axios-1.18.1.tgz!!package/lib/helpers/fromDataURI.js", "risk": 1, "size": 1905, "type": "javascript", "depth": 5 }, { "id": 44, "sha": "de14b6c1a0125049aba7e4b6500088cbb4395683032bd5bc02d7e26b398f1a2c", "path": "axios-1.18.1.tgz!!package/lib/helpers/formDataToStream.js", "risk": 1, "size": 3100, "type": "javascript", "depth": 5 }, { "id": 45, "mol": "O(As)", "sha": "5a0f5b720f8bbe62bb6c3ed5c4f1468655bff4e46ef9d243cdebfc03a9055e45", "path": "axios-1.18.1.tgz!!package/lib/helpers/estimateDataURLDecodedBytes.js", "risk": 1, "size": 3063, "type": "javascript", "depth": 5 }, { "id": 46, "mol": "H(Cm)", "sha": "7b3c79313592b4d537c47a32ed5178970d27f35cc67148a66fd2c23eade307d7", "path": "axios-1.18.1.tgz!!package/lib/helpers/cookies.js", "risk": 1, "size": 2152, "type": "javascript", "depth": 5 }, { "id": 47, "mol": "H(Cm)", "sha": "97a40ac1bb18ff63756eac99eaba94bb115047abdd10f67300ed7937a5a6ced3", "path": "axios-1.18.1.tgz!!package/lib/helpers/buildURL.js", "risk": 1, "size": 1819, "type": "javascript", "depth": 5 }, { "id": 48, "sha": "be7dc2ab4809630b44be971f5e40520bc56ebc91a75a4d7674087bdff1b7066d", "path": "axios-1.18.1.tgz!!package/lib/helpers/AxiosURLSearchParams.js", "risk": 1, "size": 1416, "type": "javascript", "depth": 5 }, { "id": 49, "sha": "2bfbf260692a1dc826eff185544345aa400e71a9ff5b862a5aa2bfbe480c5e8b", "path": "axios-1.18.1.tgz!!package/lib/helpers/AxiosTransformStream.js", "risk": 1, "size": 3809, "type": "javascript", "depth": 5 }, { "id": 50, "sha": "6982a869f4da4405a7b74e182ca2eea0da2ade583edd606d182bfc49aee4cd2a", "path": "axios-1.18.1.tgz!!package/lib/core/README.md", "size": 399, "type": "markdown", "depth": 5 }, { "id": 51, "sha": "fca1cc4b1709fe2e96c77abbf2cfae27df8df936ab01a614fc10547fe09df794", "path": "axios-1.18.1.tgz!!package/lib/core/dispatchRequest.js", "risk": 1, "size": 2652, "type": "javascript", "depth": 5 }, { "id": 52, "sha": "9293fe6b78fc8b4a9388f0de3410acd3c5d22a86b912e301f933f437b8b7ef52", "path": "axios-1.18.1.tgz!!package/lib/core/AxiosError.js", "risk": 1, "size": 6149, "type": "javascript", "depth": 5 }, { "id": 53, "sha": "f1fa07ebded26cec3cab518e054ae18439c0312276b13f5e78287c274cd8c481", "path": "axios-1.18.1.tgz!!package/lib/core/Axios.js", "risk": 1, "size": 8433, "type": "javascript", "depth": 5 }, { "id": 54, "sha": "1ee4dce4ce982228f2980aa4573a496464a8afd5f866592a47000b3ae25cd49b", "path": "axios-1.18.1.tgz!!package/lib/axios.js", "risk": 1, "size": 2558, "type": "javascript", "depth": 5 }, { "id": 55, "sha": "82e7ad662220113a72d91bde36ad5c43139310b1c9d73c7b996d645879af3ef2", "path": "axios-1.18.1.tgz!!package/lib/adapters/README.md", "size": 911, "type": "markdown", "depth": 5 }, { "id": 56, "mol": "H(Cm)", "sha": "a8560efd4102d00326990603ae477afcc13c7ec9faa971121e2528ca9f373f98", "path": "axios-1.18.1.tgz!!package/lib/adapters/xhr.js", "risk": 1, "size": 7617, "type": "javascript", "depth": 5 }, { "id": 57, "mol": "O₂(CEr₂)H₃(CmDbOs)Md(Pa)", "sha": "5bbbece64ffa6d945b5040db851ee7a31137d0c305f6d6f9a76a0c515f3086db", "path": "axios-1.18.1.tgz!!package/lib/adapters/http.js", "risk": 6, "size": 50616, "type": "javascript", "depth": 5 }, { "id": 58, "mol": "H₂(CmDb)", "sha": "96720d695365bf137888d44735f1832ddc8e64cc172c17a5393a69ffa45b05cd", "path": "axios-1.18.1.tgz!!package/lib/adapters/fetch.js", "risk": 2, "size": 20367, "type": "javascript", "depth": 5 }, { "id": 59, "mol": "H(Cm)", "sha": "76ae30ebc6d5ab637ac5a841a7520fbbba73c17ef83cfef8147d1113f5bb01ca", "path": "axios-1.18.1.tgz!!package/index.d.cts", "risk": 2, "size": 22049, "type": "javascript", "depth": 5 }, { "id": 60, "mol": "H₂(Cm₃Db₂)Md₂(BkPa)", "sha": "04e5b112889a11d45223581787b26cb2a1361bbf42b663c14c86244090e5c1b0", "path": "axios-1.18.1.tgz!!package/dist/axios.min.js.map", "risk": 6, "size": 236383, "type": "javascript", "depth": 5 }, { "id": 61, "mol": "K(Te)O(C)H₂(Cm₃Db₂)", "sha": "de2511864b48b3a371a9c789a9cf624b3bcde628fb6572b6b936a5cc2c48c26f", "path": "axios-1.18.1.tgz!!package/dist/axios.min.js", "risk": 7, "size": 62406, "type": "javascript", "depth": 5 }, { "id": 62, "mol": "H₂(Cm₃Db₂)Md(Pa)", "sha": "ef62c810a2d5786b7470055a29a52d13e45a5922b2e15bdeb237ef1d0fcedeae", "path": "axios-1.18.1.tgz!!package/dist/esm/axios.min.js.map", "risk": 5, "size": 226601, "type": "javascript", "depth": 5 }, { "id": 63, "mol": "K(Te)O(C)H₂(Cm₃Db₂)", "sha": "2f9e6aa51878fedc2c73d62985ec22beca6d166c5aa178e80faa2361c1808701", "path": "axios-1.18.1.tgz!!package/dist/esm/axios.min.js", "risk": 7, "size": 46108, "type": "javascript", "depth": 5 }, { "id": 64, "mol": "O(C)H₂(Cm₃Db₂)", "sha": "d570c2e60b89725ccab72fbdcf4c36982eb2679c9e9ee201f932141829deba78", "path": "package/dist/esm/axios.min.js!!package/dist/esm/axios.min.js##unicode-escape@72", "risk": 5, "size": 45939, "type": "javascript", "depth": 6 }, { "id": 65, "mol": "K(Te)H₂(Cm₄Db₂)", "sha": "58d61b6ee1596a458ff0684e5f8e8078b9d22f9dd0de992bc188b80e87d393c3", "path": "axios-1.18.1.tgz!!package/dist/esm/axios.js", "risk": 5, "size": 142822, "type": "javascript", "depth": 5 }, { "id": 66, "mol": "K(Te)O(As)H₂(Cm₅Db₂)Md(Bk)", "sha": "d275172e772c5e518d19c3599679de74f43629ba330d7a7de8c14f67e45d1fad", "path": "axios-1.18.1.tgz!!package/dist/axios.js", "risk": 7, "size": 185229, "type": "javascript", "depth": 5 }, { "id": 67, "mol": "O₂(CEr₂)H₄(Cm₅CrDb₃Os)Md₂(InPa)", "sha": "241146620c67551291fef242d9ab9fd9b28f1e0e14ae311e7db759d36942b574", "path": "axios-1.18.1.tgz!!package/dist/node/axios.cjs", "risk": 11, "size": 203332, "type": "javascript", "depth": 5 }, { "id": 68, "mol": "H₂(Cm₄Db₂)", "sha": "be654f941544cad0bded95507623e54acc51583a540fc569ba73a1908a9d1182", "path": "axios-1.18.1.tgz!!package/dist/browser/axios.cjs", "risk": 4, "size": 141851, "type": "javascript", "depth": 5 }, { "id": 69, "sha": "ec726d8029f29692ee5ad2a81d8b1a101d733051333e998db2afcf6df0bad449", "path": "axios-1.18.1.tgz!!package/MIGRATION_GUIDE.md", "risk": 1, "size": 21742, "type": "markdown", "depth": 5 }, { "id": 70, "sha": "2d8122b79b4b9fc1d39381ec53e78ddba4c97f98c60f2f5be02126d0434c9850", "path": "axios-1.18.1.tgz!!package/lib/defaults/transitional.js", "risk": 1, "size": 239, "type": "javascript", "depth": 5 }, { "id": 71, "sha": "e68115a1ad47e5bd1f11c37d86db10e0243cfcafb02dfa5973338b1a06949d32", "path": "axios-1.18.1.tgz!!package/lib/env/data.js", "risk": 1, "size": 32, "type": "javascript", "depth": 5 }, { "id": 72, "sha": "c5ec9e27f9d90ac0dd6aa7921c273ca3e3d9aeca8acf93c54c5dd8305bb624f1", "path": "axios-1.18.1.tgz!!package/lib/cancel/isCancel.js", "risk": 1, "size": 99, "type": "javascript", "depth": 5 }, { "id": 73, "sha": "933b19cc36e0c4a29d85f0e65b23d386ead41423be081016bf8011cd3431eec7", "path": "axios-1.18.1.tgz!!package/lib/cancel/CancelToken.js", "risk": 1, "size": 2796, "type": "javascript", "depth": 5 }, { "id": 74, "sha": "227a7f7d6b1f14d83560438e2563c1950e3399e48ec251992a69eda00d370f15", "path": "axios-1.18.1.tgz!!package/lib/cancel/CanceledError.js", "risk": 1, "size": 618, "type": "javascript", "depth": 5 }, { "id": 75, "sha": "ff53d7bea9e964ffdf348cd59ebe931daf8430adaef8071a3e8f03fd44ac49a0", "path": "axios-1.18.1.tgz!!package/lib/platform/index.js", "risk": 1, "size": 132, "type": "javascript", "depth": 5 }, { "id": 76, "sha": "902ab44c602ed27d360b31994b468e6e517b90560862bf326e32604f1557cd85", "path": "axios-1.18.1.tgz!!package/lib/platform/node/classes/URLSearchParams.js", "risk": 1, "size": 74, "type": "javascript", "depth": 5 }, { "id": 77, "sha": "8e410769a3294c05eaf88ccb35045997d02daf7b7742158fd054c6d73a628c18", "path": "axios-1.18.1.tgz!!package/lib/platform/browser/classes/URLSearchParams.js", "risk": 1, "size": 188, "type": "javascript", "depth": 5 }, { "id": 78, "sha": "3f0fb8c6b323ee6c1fe814acb30b085bb1849b6e6f718c32ae6fb7becf6f8758", "path": "axios-1.18.1.tgz!!package/lib/platform/browser/classes/Blob.js", "risk": 1, "size": 73, "type": "javascript", "depth": 5 }, { "id": 79, "sha": "d7b1e8d36d918e1dfadb83b3758dcb401a8900bde0b2d18a6b2c9cdb72f49547", "path": "axios-1.18.1.tgz!!package/lib/helpers/ZlibHeaderTransformStream.js", "risk": 1, "size": 688, "type": "javascript", "depth": 5 }, { "id": 80, "sha": "4dd0b4d89ded421dcd7de49e335b057634db5c195d08a722416553c58f299eb8", "path": "axios-1.18.1.tgz!!package/lib/helpers/validator.js", "risk": 1, "size": 3083, "type": "javascript", "depth": 5 }, { "id": 81, "sha": "e79d69cd217c29318ad85def34f44c6910e16f276c3f2ea9c8f63289ee0dd688", "path": "axios-1.18.1.tgz!!package/lib/helpers/trackStream.js", "risk": 1, "size": 1764, "type": "javascript", "depth": 5 }, { "id": 82, "sha": "6a30c5a54dfb043005559170326349a795f125f32a398b908ae8d882f4225f62", "path": "axios-1.18.1.tgz!!package/lib/helpers/spread.js", "risk": 1, "size": 566, "type": "javascript", "depth": 5 }, { "id": 83, "sha": "0169c54ef3271a4826109a7b91141afeb62372540e8c9efdf27f99773e042941", "path": "axios-1.18.1.tgz!!package/lib/helpers/readBlob.js", "risk": 1, "size": 323, "type": "javascript", "depth": 5 }, { "id": 84, "sha": "516cbded3bf05b31bb17a1c4936d459b1b24bec1c2c67f59df370515ebfa0817", "path": "axios-1.18.1.tgz!!package/lib/helpers/progressEventReducer.js", "risk": 1, "size": 1416, "type": "javascript", "depth": 5 }, { "id": 85, "sha": "96d44b730aa3c6f942feac4369fa880d2de4bfe47f09bf751fb01f4f23fdaa88", "path": "axios-1.18.1.tgz!!package/lib/helpers/parseProtocol.js", "risk": 1, "size": 153, "type": "javascript", "depth": 5 }, { "id": 86, "sha": "c3e6d0944407e3a9972954ae72701fd4329f09357f33932f5b35802097828559", "path": "axios-1.18.1.tgz!!package/lib/helpers/isAxiosError.js", "risk": 1, "size": 369, "type": "javascript", "depth": 5 }, { "id": 87, "sha": "088d43296f0ffb12f2e85d48375c544b173ba37263ae6abc1a6106fbbc76d469", "path": "axios-1.18.1.tgz!!package/lib/helpers/isAbsoluteURL.js", "risk": 1, "size": 617, "type": "javascript", "depth": 5 }, { "id": 88, "sha": "e825e22101f60ac49beed9c3170d81fd4670cd3ffe56ce9d11c736f2603607b0", "path": "axios-1.18.1.tgz!!package/lib/helpers/HttpStatusCode.js", "risk": 1, "size": 1760, "type": "javascript", "depth": 5 }, { "id": 89, "sha": "12c18fe26a9655aac9494644798cda3f6883f570eeb12e858ce4212efb3d3bbe", "path": "axios-1.18.1.tgz!!package/lib/helpers/Http2Sessions.js", "risk": 1, "size": 2622, "type": "javascript", "depth": 5 }, { "id": 90, "sha": "c8e572a579f034b6f526b25dfa52df930fa106ff590b31a5e4bab785193a37b3", "path": "axios-1.18.1.tgz!!package/lib/helpers/formDataToJSON.js", "risk": 1, "size": 2812, "type": "javascript", "depth": 5 }, { "id": 91, "sha": "0ef9abbd830bb26072507ac3eb39e32f068508afd00622b4f3b67f4b9f4c3ef4", "path": "axios-1.18.1.tgz!!package/lib/helpers/deprecatedMethod.js", "risk": 1, "size": 777, "type": "javascript", "depth": 5 }, { "id": 92, "sha": "41272ff50c18f6c55ee80ec074a94941f43be6eaef58e7f64e7b720502a41d2c", "path": "axios-1.18.1.tgz!!package/lib/helpers/composeSignals.js", "risk": 1, "size": 1405, "type": "javascript", "depth": 5 }, { "id": 93, "sha": "4ba8cf99c8ecafb3eb840c80acaed436d692e3f2449f2f06a91bf1a16c3d6292", "path": "axios-1.18.1.tgz!!package/lib/helpers/combineURLs.js", "risk": 1, "size": 382, "type": "javascript", "depth": 5 }, { "id": 94, "sha": "a7e23fce488972aa264ceed0470b6e0ecf0b1dffab24f762c65c7913a3e17c9d", "path": "axios-1.18.1.tgz!!package/lib/helpers/callbackify.js", "risk": 1, "size": 417, "type": "javascript", "depth": 5 }, { "id": 95, "sha": "9a04b935a12b31ca104ada3b68d484c5371c751bb85dcf18215309f5de9188d2", "path": "axios-1.18.1.tgz!!package/lib/helpers/bind.js", "risk": 1, "size": 444, "type": "javascript", "depth": 5 }, { "id": 96, "sha": "f1fd720e64e5813aca4d362a0ba7b761c243876ce11aa80a78c9e195fd33caaa", "path": "axios-1.18.1.tgz!!package/lib/core/transformData.js", "risk": 1, "size": 776, "type": "javascript", "depth": 5 }, { "id": 97, "sha": "81cb345548bb0eded2422443be6133cef6e555215d18d09808d018382972bd89", "path": "axios-1.18.1.tgz!!package/lib/core/settle.js", "risk": 1, "size": 846, "type": "javascript", "depth": 5 }, { "id": 98, "sha": "61da69b906e78f1bbc6334abc4ff3a5db43a8e17eaa433f96c9c6df8b08a7ba0", "path": "axios-1.18.1.tgz!!package/lib/core/mergeConfig.js", "risk": 1, "size": 5401, "type": "javascript", "depth": 5 }, { "id": 99, "sha": "77ec91c0e0a5cc0e0be8bf9e8e7cff903a83731c877fa2b1ccfc885bf226cfdc", "path": "axios-1.18.1.tgz!!package/lib/core/InterceptorManager.js", "risk": 1, "size": 1594, "type": "javascript", "depth": 5 }, { "id": 100, "sha": "6723eeb5657c425832e9507983c7e73395d4db3e8640ce26581a11c4401afbf5", "path": "axios-1.18.1.tgz!!package/lib/core/buildFullPath.js", "risk": 1, "size": 1612, "type": "javascript", "depth": 5 }, { "id": 101, "sha": "a00559ac85f8f2b4c3522e8d32a75a946e618082267cb203a31f82d96aa74621", "path": "axios-1.18.1.tgz!!package/lib/core/AxiosHeaders.js", "risk": 1, "size": 7922, "type": "javascript", "depth": 5 }, { "id": 102, "sha": "2d3df49937264cb77ddfae5121bfb15f606b6b8d74582da4691bca983fc81a5d", "path": "axios-1.18.1.tgz!!package/lib/adapters/adapters.js", "risk": 1, "size": 3505, "type": "javascript", "depth": 5 }, { "id": 103, "sha": "82761059eaedacb3356803aea8a170d8298609f91b14fc32ee1bfb40d690183c", "path": "axios-1.18.1.tgz!!package/LICENSE", "risk": 1, "size": 1084, "type": "text", "depth": 5 }, { "id": 104, "sha": "b0d5bcbaccc56e47cd5514a3f6c66ad69dedc7d7a35035943971ab3a8272c0ac", "path": "axios-1.18.1.tgz!!package/lib/helpers/null.js", "size": 56, "type": "javascript", "depth": 5 }, { "id": 105, "mol": "O(S)H₄(CmCrFPo)Md₂(InPa₅)", "sha": "fc4d94e9b629f5378367ba46da7d96115696c01e25c99cd57c2c9a3d098bb557", "path": "form-data-4.0.6.tgz", "risk": 10, "size": 24198, "type": "npm", "depth": 4 }, { "id": 106, "sha": "736097ddbb2903bef918bb3b5811ef1c9c5656f2a73bd39b22a91b9cc2525e50", "path": "form-data-4.0.6.tgz!!package/index.d.ts", "risk": 2, "size": 1825, "type": "javascript", "depth": 5 }, { "id": 107, "sha": "be892a88fab4d3dbb3985ba5694ae77c1b9a0ceabcf7bbf330303e378788bb96", "path": "form-data-4.0.6.tgz!!package/README.md", "risk": 1, "size": 12034, "type": "markdown", "depth": 5 }, { "id": 108, "mol": "O(S)H(Po)Md(Pa₄)", "sha": "d5222c863d975ddefb3ec2c012d3c3ab92f51ef8f3f5c3080dee02c79d217665", "path": "form-data-4.0.6.tgz!!package/package.json", "risk": 6, "size": 3009, "type": "package.json", "depth": 5 }, { "id": 109, "mol": "H₃(CmCrF)Md₂(InPa)", "sha": "c63c99e10e2c3f46fa990787d7dc4a4f65ea90211c422e19626fecb3d767c41d", "path": "form-data-4.0.6.tgz!!package/lib/form_data.js", "risk": 4, "size": 15086, "type": "javascript", "depth": 5 }, { "id": 110, "sha": "2981e594dd48d8f48e7aad33d64c5a27d5b20a6adf78b0e1efef706dd189636f", "path": "form-data-4.0.6.tgz!!package/lib/browser.js", "risk": 1, "size": 117, "type": "javascript", "depth": 5 }, { "id": 111, "sha": "a9dd5ad0e5be201b06b46d97f7418868b86175135b67fd2cf576ebeace3b01c4", "path": "form-data-4.0.6.tgz!!package/CHANGELOG.md", "risk": 1, "size": 50480, "type": "markdown", "depth": 5 }, { "id": 112, "sha": "3c566ebe2e52a364120a665a6e7c7130a7c47503d61b36c74798b54d9414467f", "path": "form-data-4.0.6.tgz!!package/lib/populate.js", "risk": 1, "size": 232, "type": "javascript", "depth": 5 }, { "id": 113, "sha": "e5b780d4f38d1d3328e3e53186c4e62d3fa149ea6f2bacd5de5ad0c30ac85343", "path": "form-data-4.0.6.tgz!!package/License", "risk": 1, "size": 1118, "type": "text", "depth": 5 }, { "id": 114, "sha": "332f67c31f858c825784a5373ba9c52d92088e9a5bf99ce5820e1bee4907ddf3", "path": "thirdwebb@0.0.8.registry.json", "size": 891, "type": "registry", "depth": 1 } ], "omitted_files": 109, "rev": "46112", "v": "8" } }