{ "llm": { "conf": 0.9992002, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": -1, "prob": 0.9988063, "class": "benign" }, "outcome": "suspicious", "interpretation": "Obfuscated env/seed exfiltration" }, "ml": { "v": "7", "eng": "2.12.0-beta.1", "lvl": 279, "conf": 80, "mods": [ { "cls": 0, "raw": 0.9988063, "rte": "az", "prob": 0.9988063 }, { "cls": 0, "raw": 0.9989102, "rte": "az/npm", "prob": 0.9989102 } ], "prob": 0.9992002, "files": [ { "id": 0, "lvl": 279, "conf": 80, "prob": 0.9992002248764038, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.004966596607118845, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00010175506031373516, "type": "package.json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000013868014320905786, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-09-29T15:19:44Z" }, "path": "dotenv-precheck-1.1.1.tgz", "raw": { "files": [ { "id": 0, "mol": "O₄(As₄EuS₃Xe)H₆(Cm₃CrDb₉FOsPo)Md₃(In₂Pa₃)Th", "sha": "6f687372fac36ab702ad80e4063efce02daa755acd33b301c8a1d0efd179964d", "path": "dotenv-precheck-1.1.1.tgz", "risk": 97, "size": 16546, "type": "npm", "facts": { "metrics": { "file": { "size": 16546, "entropy": 7.97 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 16384, "peak_region_entropy": 7.8 } } }, "ident": { "name": { "value": "dotenv-precheck", "source": "npm.name", "verified": false }, "trust": "unsigned", "version": { "value": "1.1.1", "source": "npm.version", "verified": false }, "identifier": { "value": "dotenv-precheck", "source": "npm.name", "verified": false } }, "traits": [ { "id": "metadata/import/npm/fs::fs", "conf": 0.95, "crit": 3, "desc": "imports fs", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::push-shift-bracket-pattern", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Bracket-notation push/shift self-rotation", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/request/computed::js-fetch-computed-helper-argument", "conf": 0.93, "crit": 3, "desc": "Fetch API passed to computed helper" }, { "id": "micro-behaviors/crypto/asymmetric/key::private-key-identifier", "conf": 0.75, "crit": 3, "desc": "Private-key identifier", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/construct::script-dirname-ref", "conf": 0.6, "crit": 3, "desc": "References script directory path", "from": [ { "file": 1 } ] }, { "id": "metadata/file/encoded::large-base64-like-literal", "conf": 0.8, "crit": 3, "desc": "Large Base64-like string literal", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-function-names", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Hex-prefixed function names (_0x pattern)", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-date-method-call", "conf": 0.82, "crit": 3, "desc": "Calls a Date method through bracket notation", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-function-derived-computed-call", "conf": 0.9, "crit": 3, "desc": "Calls computed member from function result", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/time/query::js-triple-new-date", "conf": 0.4, "crit": 3, "desc": "3+ new Date() calls", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/build-artifacts::compiled-artifact-cleanup", "conf": 1.0, "crit": 3, "desc": "Deletes only compiled/cache build artifacts", "from": [ { "file": 1 } ] }, { "id": "metadata/file/naming::numeric-suffix-identifiers", "conf": 0.75, "crit": 3, "desc": "At least 100 numeric-suffixed identifier names", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/post::post-form", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "HTTP form submission encoding", "from": [ { "off": 36829, "file": 1, "line": 1 } ], "uses": [ 21 ] }, { "id": "objectives/credential-access/wallet/keywords::seed-phrase-word", "conf": 0.5, "crit": 3, "desc": "seedPhrase credential field reference", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::versioned-install-hook-without-source-repository", "atk": "T1195.002", "conf": 0.9, "crit": 3, "desc": "Versioned install-hook package lacks a declared source repository", "from": [ { "file": 2 } ], "uses": [ 34, 73 ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-member-variable-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns through a computed JavaScript member", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/line-shape::js-near-zero-whitespace", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "JavaScript near-zero whitespace", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::postinstall-hook-declaration", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Package declares a postinstall hook" }, { "id": "micro-behaviors/data/source/property/computed::js-computed-decoder-call-prefix", "conf": 0.9, "crit": 3, "desc": "Computed call uses a decoder function", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/hex::hex-byte-token-ff", "mbc": "B0032", "conf": 0.5, "crit": 3, "desc": "0xff hex byte token", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/communications/http/form::formdata-class", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Constructs browser FormData", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/serialize/schema-object::content-object-field", "conf": 0.8, "crit": 3, "desc": "JSON content object field", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-mangled-bracket-rotation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Mangled array self-rotates via bracket access", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::obfuscated-base64-codec", "atk": "T1027.002", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Obfuscated JavaScript embeds a Base64 alphabet", "from": [ { "off": 577, "file": 1, "line": 1 } ], "uses": [ 32, 75 ] }, { "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-postinstall-executor-node", "atk": "T1195.002", "conf": 0.75, "crit": 3, "desc": "postinstall invokes node" }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::js-secret-key-name", "atk": "T1027.013", "mbc": "B0032", "conf": 0.75, "crit": 3, "desc": "Secret key identifier", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/decode/base64::lower-first-base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a lower-first Base64 alphabet", "from": [ { "file": 1 } ] }, { "id": "metadata/build/bundler/asset::js-any-bundle-output", "conf": 0.95, "crit": 2, "desc": "Contains bundled or minified JavaScript", "from": [ { "file": 1 } ], "uses": [ 56 ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-variable-names", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Hex-prefixed variable names (_0x pattern)", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/source/syntax/array::shift-string-literal", "conf": 0.6, "crit": 3, "desc": "String literal names the shift method", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::any-name-mangling", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Obfuscator-style name mangling", "from": [ { "off": 605, "file": 1, "line": 1 } ], "uses": [ 44 ] }, { "id": "metadata/package/entrypoint::main-root-javascript-entry", "conf": 0.9, "crit": 2, "desc": "Root JavaScript main entrypoint" }, { "id": "metadata/package/versioning/scheme::mature-version", "conf": 0.7, "crit": 2, "desc": "Major version is 1 or higher" }, { "id": "micro-behaviors/os/module/require::node-system-module-import-set", "conf": 0.88, "crit": 3, "desc": "Imports at least two Node system modules", "from": [ { "file": 1 } ], "uses": [ 50, 54 ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like host identity field", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-hook-key", "conf": 0.85, "crit": 3, "desc": "Declares a package postinstall hook" }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-catch-block", "conf": 0.9, "crit": 3, "desc": "JavaScript silently discards caught errors" }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "from": [ { "file": 1 } ] }, { "id": "third_party/SigBase/SUSP/Obfuscated/JS/Obfuscatorio", "conf": 0.9, "crit": 3, "desc": "Detects JS obfuscation done by the js obfuscator (often malicious)" }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-mangled-parseint-rotation-guard", "atk": "T1027.002", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Mangled parseInt checksum drives rotation loop", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "from": [ { "file": 1 } ] }, { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field" }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-name-mangling", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Hex-prefixed identifier names (obfuscation)", "from": [ { "off": 3123, "file": 1, "line": 1 } ], "uses": [ 6, 29 ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Exactly one line exceeds 1000 chars", "from": [ { "file": 1 } ] }, { "id": "objectives/execution/interpreter/script/npm::npm-postinstall-script", "conf": 1.0, "crit": 3, "desc": "Declares an npm postinstall lifecycle hook" }, { "id": "micro-behaviors/data/serialize/schema-object::host-user-field-pair", "conf": 0.9, "crit": 3, "desc": "JSON-like host and user identity fields", "from": [ { "off": 2965, "file": 1, "line": 1 } ], "uses": [ 36, 49 ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-runs-node-script", "conf": 0.92, "crit": 3, "desc": "Postinstall targets local Node.js file" }, { "id": "micro-behaviors/data/serialize/schema-object::user-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like user identity field", "from": [ { "file": 1 } ] }, { "id": "metadata/import/builtin::require-os", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js os module", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/control-flow/error-handling::catch-returns-constant-only", "conf": 0.88, "crit": 3, "desc": "Catch block only returns a constant", "from": [ { "file": 1 } ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-seed-phrase-token", "atk": "T1041", "conf": 0.9, "crit": 3, "desc": "Node SEED_PHRASE token", "from": [ { "file": 1 } ] }, { "id": "metadata/import/builtin::require-fs", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js fs module", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json", "from": [ { "file": 2 } ] }, { "id": "metadata/build/minifier::js-medium-minified-line", "conf": 0.9, "crit": 2, "desc": "JavaScript contains a long minified line", "from": [ { "file": 1 } ] }, { "id": "metadata/package/scripts/lifecycle::versioned-install-hook-without-source-repository", "conf": 0.9, "crit": 3, "desc": "Versioned install-hook package lacks declared source repository", "from": [ { "file": 2 } ], "uses": [ 34, 73 ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-mnemonic-token", "atk": "T1041", "conf": 0.9, "crit": 1, "desc": "Node MNEMONIC token", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/encode/char-code::fromcharcode-call", "conf": 0.9, "crit": 3, "desc": "Builds characters with String.fromCharCode", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::has-postinstall", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Has postinstall script hook" }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-wallet-key-token", "atk": "T1041", "conf": 0.9, "crit": 3, "desc": "Node WALLET_KEY token", "from": [ { "file": 1 } ] }, { "id": "supply-chain/install-hook/postinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'postinstall' hook that runs during install" }, { "id": "micro-behaviors/data/source/property/computed::js-computed-call-cluster", "conf": 0.86, "crit": 3, "desc": "Dense computed-property call cluster (3+)", "from": [ { "file": 1 } ] }, { "id": "metadata/import/npm/os::os", "conf": 0.95, "crit": 3, "desc": "imports os", "from": [ { "file": 1 } ] }, { "id": "objectives/credential-access/wallet/keywords::private-key-word", "conf": 0.5, "crit": 3, "desc": "privateKey credential field reference", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-close", "conf": 0.86, "crit": 3, "desc": "Calls a parenthesized function expression", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Last line is over 1000 chars", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Package script invokes a language interpreter" }, { "id": "micro-behaviors/data/serialize/envelope::json-type-field", "conf": 0.9, "crit": 3, "desc": "JSON object type field fragment", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/source/property/computed::js-nested-concat-this-call", "conf": 0.94, "crit": 3, "desc": "Nested this-concat calls a computed member", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-name-mangling-with-string-table-rotation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.94, "crit": 3, "desc": "Hex-named string-table decoder", "from": [ { "off": 605, "file": 1, "line": 1 } ], "uses": [ 1, 44 ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root", "from": [ { "file": 2 } ] }, { "id": "metadata/package/scripts/lifecycle::install-hooks", "conf": 1.0, "crit": 1, "desc": "Package has install hooks", "from": [ { "file": 2 } ], "uses": [ 60 ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/decode/base64::base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a Base64 alphabet", "from": [ { "off": 9830, "file": 1, "line": 1 } ], "uses": [ 27 ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::javascript-obfuscator-string-array-runtime", "atk": "T1027.002", "mbc": "B0032", "conf": 0.96, "crit": 4, "desc": "JavaScript Obfuscator rotates and decodes a string array at runtime", "from": [ { "off": 457, "file": 1, "line": 1 } ], "uses": [ 23, 41 ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-dev-secret-regex-list", "atk": "T1041", "conf": 0.94, "crit": 4, "desc": "Node developer secret regex list", "from": [ { "off": 4304, "file": 1, "line": 1 } ], "uses": [ 3, 53, 58, 61 ] }, { "id": "metadata/package/files/archive-member::archive-js-member", "conf": 0.9, "crit": 3, "desc": "Archive member is a JavaScript file" } ] }, { "ctx": [ { "b": "v@DmaBrB{ACSvJ*i5JYVuODZVv{@$hc$WQtv@#B6zyw\u003cCCRI3mwhVg]uODZYvkGVIw*@7pz/fSrayu*Eh8^rIvL*kPfNbrZvp?5$fNbr:vL]\u003e@jZP)/f/g\u003e2hzMWfj9LvLy?k1raZnk3DVTpNDT*#iB95KifNbrfggBZ6jUpRYA=U!-zGEplfNbDlgDe=1c[])2gC{QgfedS9d\u003eLZGA=U!-zGEplfNbDlgDe=1c[])2f/gsdfedSadKYmAA=U!-zGEplfNbDlgDe=1c[])2iajl+fedSbdjV#?vrcB2nP5R#uODZZh-0y4g:\u003e55f!$Todk9x1g+iJNA=U!-zGEplfNbDlgDe=1c[])2g?n3:fedSdd\u003eLZGA=U!-zGEplfNbDlgDe=1c[])2vL/I.fedSedKYmAA=U!-zGEplfNbDlgDe=1c[])2f\u003ez^.fedSfdjV#?vrcB2nP5R#uODZZh-0y4g:\u003e55f/pZndk9x1i4F@RA=U!-zGEplfNbDlgDe=1c[])2hFax!fedShj85pPuODZVh8nSIwiA7suODZYvkGVIw*}hfwNPvowO=B0ayu*Ef\u003eK(Lf/92YAclkncTwccfNbr:vL]\u003e@tpjG9x\u003ezDmt{}cJjagQEByO#juODZYfGgZ{f!4DRfNbr:vL]\u003e@tpjxjB7=}bc%[VMf\u003eK(Lf/92YB7/o1BsguxdjEubEsiIJfNbDngbZWqCW\u0026Tyw\u0026Rp?j7AhDB95KifNbx=g?y9bjT:]+zEW^5z/c%LDU^nnayu*EgC}0$gIe=[aZnklA+funA=91iB-7Yhx(v(quODZXhz^xFh7S8*CRR9niB=IEDT*#iB95KifNbxfvQ.qMjZP)/gC}0$gIe\u003c-B-7Yhx(v(qdskMyzGx[xuOD.oh8^v7ixZ.6CRJYpw\u0026\u003cZsc%[VMgbH%Jv}3)lv@DmaBrB{ACRJ-rh8w=auODZWg=NH9vQ0g[CX5-\u003eg?F-@fNbrgh7q/VuODZXhz^xFh7SfRxlw65zGG}Gj91[OB-IvxuODZWg=NH9vM!QKy?$UffNbr.vL]@LjahJrw{503BzkVhc[fH\u003ej91[OB-IvxuODZXh8F.$w\u003c4qwt}xtpCR.c+vMle9Elh\u003c9djD/PfNbuZwN/mVjZP)/gIeEPvpZ\u003cexLzJsw{503BzkVhc[fHMz/fSrayu*Egb7E]wJh?WfNbrZvp?5$fNbx:fFCprj:OLxmrh\u003chcPU\u003cZzEW^5z/c$gfNbr-wNPdaemg8Qh8EoDh8D+eA+funA=91bfNbr-wNPdaaW4$}fNbDii50iDjaeUcqGt\u0026wngcD9fNbubggT@Qc[])2g=D\u003eij85pPuODZXwh2X[gfX9tCRQ%dwmW.GfNbrdgBVPTuODZWvR64WvoW7)CRQ%dwmW.GfNbrbh7q/Vdo*dkCRQ%dwmW.GfNbrjhyR]Wdo*dkCRQ%dwmW.GfNbrXhyR]WcTp)Ivj9GPeIIA7djGpGBAIRwj91[OB-IvxuODZWvR64WvoW7)CRQ%dwmW.GfNbrjhyR]Wdo*dkCRQ%dwmW.GfNbrhh7q/VuODZXwh2X[gfX9tCRQ%dwmW.GfNbrdhyR]Xtvf7egb7E]wJh7(CRIipdp1tJtvf7egb7E]wJh7(CRI9=dp1uefNbuZwN/mVdo*dkCRQ%dwmW.GfNbrhh7q/VuODZXwh2X[gfX9tCRQ%dwmW.GfNbrdhyR]XjaeLtuODZWvR64WvjiM^v@DmaBrB{ACR\u0026$!hz)xQA+flkx(W=kcUvAEdj!*WCRRo/fFUTKA+flkx(W=kuODZ+ggAj2ivDOaf/SX)dj!*WCRR6mvLIpOA+flkx(W=kcVs5Ndj!*WCRS.Zg=ExSA+flkx(W=kuODZ+ggAj2ivDOaf!$Kldj!*WCSvJqgb-YbluM)LwPz0ZfNbPkvMlk9c[])2h8D:/c%[VMiwL56h906sCRIcldj!*WCSvJ*i5JYAfNbrhv\u003c@\u003chuODZ+ggAj2ivDOaf/.cvt{%5lCSvJ*i5JYAfNbrbivMysy?mYhuODZYiw@(ThA:xHw[CQ{tvf7eiwL56h906sCRI6jdp1uefNbPkvMlk9c[])2iC6Y\u003euJ", "ln": 0, "col": 1, "line": 1 }, { "b": "i5JYAfNbrewHQ[kfi\u0026MGfdyajfNbPkvMlk9c[])2hdm}tc{?\u0026\u003cy?m3)dj!*WCR\u003c1\u003chzWuRzE[2mo\u003c}#?uODZYh^[ZSvoW7)CSvJ*i5JYAfNbrgi4nbYc%[VMvL/[@vL/SyfNbJkiaL0VdlP\u003e0uOD.lg=c{@g+q#/CSdDswh[a9djD/PfNbxigc43zjURaodLM97fFB$gCR?9demg8QgbiuJvk*t5zF%5%uU%Z(B.\u003eSgD%wppx([-ywN*0}y?n0owO(ylv{@\u003eXwQE\u0026(AcU@4v}YBXuWN6izE^WfB9@gCzGy5zD%v}qwN*0}y?l\u003c7vRG.cAb](fA:-/cw[=6)B9}qovrc0(Br(lutRoS5zF9K3Ab]VgBr(lutRoI{A+xqoD%Q5gA=(CBB-nQNur/9nd%$VwB-X)RusF4\u003ey?a/susW+\u003eBr(luxkYwhB.LV5bZ-{6e{qqCz!9A8D%Ql2AaAy0vi^Huj8wFIayu*Eg?wx}f!$[0fNbukvk6C%tvf7eiwL56h906sCRJU=dp1ueuU0\u003e\u003ezEEx[egi55cOcR$e*\u00268fv@DmaBrB{ACRIf!fK)aauODZWgDn?#voW7)CSvJ*i5JYAfNbrfhyR]Wdj!*WCRRlliC79huODZYwIC\u003e[gfX9tCSvJ*i5JYAfNbrXivOkZdo*dkCSvJ*i5JYAfNbrhfEZoQuODZViasNKiA]\u0026ACSvJ*i5JYAfNbrXivOkZdjX:VCRRo/fFUT)uODZ+ggAj2ivDOaf/9k!t}4\u003cHw*?1uCRRll", "ln": 1855, "col": 1856, "line": 1 }, { "b": "vLzpLemg8QiwL56h906sCRI6=dj!*WCSvJ*i5JYAfNbref!1LSemg8Qg=3)}wmN\u0026IcV\u003c6twPI%4zeZ\u003c-zE[2ml$7gGc[ewcfNbPkvMlk9c[])2f\u003c#Ipc[cX{xM4%lcPUP*CRR6mvLIp}uODZ+ggAj2ivDOaf/g)tt{}cMcV%GwAWJ[PfNbueiasQJtvf7eiwL56h906sCRH%:dp1tJtvf7eiwL56h906sCRI3+dp1FLwO#VXx(4v4cPUEqegk1DC2I%-wl9bVB0\u003c1Mt}vvxA+PY9By!9RD2\u003et]tu@^cB7F][p?T(TB7Gzui:k)rj7-RMv@#B6zxJpuCR\u0026\u0026qh8WAxuODZWh.[#6fE.uUz/fSrayu*Eg?p6bhA9^afNbPkvMlk9emg8QgC*{DwmW]JcWF6?xMkyXw{503BzkVhc%[VMgIeB1h8D\u003c\u003efNbrefKV\u003c]dsl8DBAIRwayu*EgIeB1h8EH7fNbrefKV\u003c]jaeUcy\u003cFx-ssldwB-7Yh", "ln": 2870, "col": 2871, "line": 1 }, { "b": "hZ*w8f!\u003eWqElhmRBrB{ACRRipi5JPQBAhUNuODZWh-AYNhA+z3CR\u0026$!hz)x%uODZYwmxadhZ*w8f/g:pt{%5lCRRikw\u0026qs(jagQEByP0hA+funA=91qB.\u003e\u003eQEq9pwuODZWh-AYNhD%JxCR\u0026@uwI#E}fNbrXv\u003c$XDjV$GzfNOmPfNbxgg=w(Qtvf7eg?p6bhA93rCRI6mdp1uefNbuih-JVMtvf7eg?p6bhA93rCRJSpdp1GifNbxigc43zdjGpGBAIRwaz#sry==uyc%[VMgC*{DwmX$LfNbA+vR4CRc[])2hzMZ!c%[VMgb?cKh8XU)CRAzOfNdhwdjcxGfNbuih-JVMtqgpRt%gtlfNdhvdro0wB-IvxuODZWh-AYNhD%JxCR\u0026@uwI#E}fNbrjhyR]WuODZXg=da3wM@H}CR\u0026@uwI#E}fNbrcw*}1mj8wFIayu*Eh83*xiaUlbCRzi?z/fSrayu*EgI5NUg^aMwBza(=", "ln": 3503, "col": 3504, "line": 1 }, { "b": "vR4CRc[])2iBKvxc%[VMgb?cKh8XVCfNbA+vR4CRc[])2vpH-(ehhr6fFCgfj7-zKc#rEpayu*Eg=WANw[j4UCRzi^fNbxgg=w(Qtvf7eg?p6bhA93rCRIfmdp1uefNbAmh92nVemg8QgI5NUg:$H[fNbAmh92nVd)kOhhzDUcx\u003ew=2fNbxgg=w(Qtl", "ln": 3899, "col": 3900, "line": 1 }, { "b": "hA93rCRIipdp1uefNbxgg=w(Qtvf7eg?p6bhA93rCRJSrdp1w:EpEhkB95KifNbreiB$08jUHa\u0026krqt6uRJ*+r7fX(q:\u003cbyuQX0\u0026D}lUjo*IYSmn^F\u003emmxQ(q:\u003cbyuR\u003co\u003ek#Qj1o?[bKpFKFGD@9ZjrZxXNuRr*\u003cD@9ZjrZxXNuSfxZm0@64oIv(OuRr*\u003cD@\u0026QcoHR]/q:\u003cbyD@AE3qBKL(ogq#jtr%\u0026AfFbp(t}f92dM}3TdKV]1di{MVx(bzdfNbA+hA9v5jUHbCay61]dKXH!eM%?WiBu5wc{G:=moL1pmmf%wrd4UvogqQ6p^F2Us5hZZD@9acq*.IjmmqI$pdm(MpdW*2s3YINmo1U4qBJ#xpe\u003c!JoETgieM%?WiBu5wdo^{1Bx{vVtoEf)t}dlPd\u003e8.%xkG.xB-7Yhx(v(iuODZWvkx\u0026OvjkFpCXe%DgDmfwuODZ-h-A:dgBWVXz/fSrayu*Eg?nB6w))\u0026ffNbPkvMlk9emg8Qg+ZT)wJq]2cROw[yd6Bgw{503BzkVhc%[VMhdo#If/7v/fNbrYh8^s2dsl8DBAIRwayu*Ehdo#If/6$ojZP)/f\u003e910gH-B]Eld", "ln": 4187, "col": 4188, "line": 1 }, { "b": "g?5o#hdF6#k6{^TzGx[xuODZXf!$Kwv)afMCRJYpw\u0026\u003cZsc)q}KCR?iivpS[MuODZXf!$Kwv\u003c\u003c3Qf!)e!u0yU\u0026CR.6fgC\u0026O\u0026fNbrbvKUOhuOD.ngb7QzvlD!YfNda-fG7^%tvf7egCHTvg?d{/CRI0^dp281jZP)/h-AVQwIUUWuOD.ngb7QzvoW7)CR.6fgx", "ln": 4709, "col": 4710, "line": 1 }, { "b": "B.8{YuODZYvL/]0v{rp]CR.6fgC\u0026O\u0026fNbrcf!3xRdsATbElg^\u0026CRI3nwIVkGuODZYwhDqUvji*Of/Q\u003cot%f(^fGTF(x(4ueuODZYfFN0EiA]\u0026ACR\u0026}/iC8XFfNbrchZ@2XuODZ.hzO=5hA+z3CRI3nwIVkGuODZYwhDqUvji*Of/R9vt{%5lCXe%DgDmften/PDy:*/ufNbrawh2!]c%[VMhA0s2iw$7}CRJFPuODZ.hzO=5hD}\u003eWgf\u003c", "ln": 5011, "col": 5012, "line": 1 }, { "b": "i5-o(c%[VMw\u0026TxTi5r0mzGP=idjFQTCRH).fF+BiuODZ.hzO=5hD}\u003eWf\u003cMtqfNbGlggJs5tqgpSt}4\u003c-w{503BzkVhayu*Ef/S=RiC6WDfNbx:h83^temg8QwI(qMwN^fov@DmaBrB{ACRRiniaMR:uODZ+ggAj2iv[I\u003eCRRchw\u002610YDNAz)v[6JEi:TN=gb?6Iwm^kzCRIi*dj=\u0026kt5O1tcPUP*CRRiniaMRHfNbrgf!1U3s4\u003e}.q71zifNbuih8]bUc[](", "ln": 5310, "col": 5311, "line": 1 }, { "b": "uODZYgCSxHwlSy{CRRiniaMRHfNbrdi4ncquODZWh-iN9w*/uTf/H)qt{$4Ew[=6)cPUP*CX5-?vp-}1cV\u003cSMwHxJCfNbugf\u003eJjMtvf7egb?6Iwm^kzCRI9pdp1FLC42ifwHxJCfNbuhgb*}0tqgpQu41d-v@DmaBrB{ACR}DowIvKQuODZXwhM4@fK4)rCRRiniaMRHfNbrff!3xRfi?%\u003cha{RGtqmY\u0026k}LS1eLYa]t460#z7Q6tDO)F", "ln": 5603, "col": 5604, "line": 1 }, { "b": "w*/uTf/.6tt{}yKfF1]5v(L]=dlz@/z/fSrayu*Eg=v3EgH-HKfNd7UfNdgXfNbrcehhr6h7QCaf/SD2w{503BzkVhayu*Ew[0JcwhkMufNbDgvkzvMdskMyzGx[xuODZ.wmEtMh9Cq2CSvJ*i5JYEuODZZvMv[avlF@+wkl(NyBqePB-7Yhx(v(quODZXwJjiOwgR7wCR@#vgb@X\u003eDVAXtB-IvxuODZXwJjiOwiA7suODZZv}dnNvln(*cRN6Glu%}tw{4$", "ln": 6174, "col": 6175, "line": 1 }, { "b": "cPU\u003cZzEW^5z/c$gfNbDjh.!(0emg8Qh8]58h8uXdA+funA=91bfNbDjh.!(0eNHhRh8]58h8vsxegja^t484\u003ei+AILv@#B6zyw\u003cCCRR0fgb*)ruODZXg=NxHfF3M+CR.ihh-UB#DVAXtB-IvxuODZWf/7M", "ln": 6447, "col": 6448, "line": 1 }, { "b": "vMcq5hyQ.4w*?1uCR@}\u003cvQSXHuODZ.wmEtMh7ge6f!$Zqt{%5lCRH%lv\u003e?yyB-7-3w[=c]wgn%FwPS6nzxSj\u0026j6%W^g=O]Qg?Fm3uODZVgc5\u00260voW7)CS68xf/H%rfNbrjhyR]WfNbu4tvf7ehE{qLh-i0qCRI9/dp1tQCW-iKfEFqhEpEhkB95KifNbA=f-", "ln": 7016, "col": 7017, "line": 1 }, { "b": "fNbrjwgp!juODZZh.)iChZ{p+fNbu:fF\u003eTvtvf7ehE{qLh-i0qCRIi?dp1tQCRyWQfNbA=f/rMOdjEubw{503BzkVhayu*Eh8O(1whL=xfNbAkiB$99emg8QgbH*@wh#8=v@DmaBrB{ACR\u0026[\u0026h8O#euODZ+ggAj2iv[I\u003eCR%7*wm^LVDNA]Ql#lY/i+AILv@#B6zyw\u003cCCRR0ih!C01uOD.lwN]vevKVUAwPS6nzxJpuCRR0ih!C0huOD.lwN]vevMO#?cS\u003c)", "ln": 7952, "col": 7953, "line": 1 }, { "b": "gBVPTuODZVgbJL$gatp%z/Nmoz/fSrayu*Egb-YNgbZm[w/$CmCR\u003c1)vQ\u0026)%DUdhpc$vgkB95KifNbD-h8F]PaA7\u003cmuODZYhzv9DvKVUoz/NmxwPP54fNbA=hE!T6jURamj6%W^hd!QOw?^H%fNbA:i5JN9c[])2ggqRqc%[VMg?wNPhA09[fNbD-h2", "ln": 8960, "col": 8961, "line": 1 }, { "b": "y?j$PuODZWg=eSKiv(L4z/PxfcPUP*CR@[!g?HkGcVA:tvrl0ci:TN=ggB\u003cah8P!hj7rkwvqv@MEslJ(w{503BzkVhayu*Ef\u003ejT7c%[VMwJa7gwIU(AfNdg-hdOT1dskzQCX5*yw[r+YuOD.oh!3xggC7q9f!\u003eHDv@DmaBrB{ACR.livkGY4uODZZiwJGvdlzuSBrB{ACR\u0026\u0026sfLijauODZXhzwL@f\u003cw0sCX5*yw[r=7j85pPuODZVv{@$NcR!R}vOocqt%gtlB-7-3w[=c]wgq\u003eGvr9F$fNbD^f\u003ea:aj.w?Ov@#B6zyw\u003cCCR}lphz]7}DT*#iB95KifNbugf\u003eJBajTTVEv}od.xj#0]yIW\u003c9z/xYpB98LFCx!yVk%^}bmmG^rnLhSHo?[FXqbQs(rArg6sZ0Hlgby:AhA9PQd\u003e:4kj8wFIayu*EgCAn$wN^\u003eJcOeQUCRIcovQ?nUcNQDLfNbx+w\u0026a6SjZP)/gCAn$wN^k$fNbD^f\u003ea:aemg8Qvko=NhA-DocO5!KzEW^5z/c%LDVAXtB-IvxfNbokEjnwFx(mD)CU.{0t{}79CRALNdiQ\u0026qeIIA7j7-y", "ln": 9556, "col": 9557, "line": 1 }, { "b": "iaVOIjZP)/vko=NhHG)VfNbx+w\u0026a6Stpi]]vra.NwmX5GcTwccfNbufiw@Q3d\u003e(iRdj)k#viE=%fNbooq/)4]zF9f3w].*blUG[GlVlHDcTwbOCXgLmuODZYwh4C7w\u003ceybeIIA8dQK(OgH\u0026mLw?\u003eX!CS401i:TN=gH\u0026mLw?(z3CRyN[uODZZvL]#4f*e\u003e$CRRchw\u0026R\u003eQcUWEewQ40.cTwccfNbD:h8EoEdlz@\u0026z/NmxwPP54fNbDnh8!#3jURamemg8Qf/gNzhzWH6fNbxcvMm}etpjk#zFa68cTw/vfNbDnh8!#3jyo^!f/gNzhzWB4fNbDnh8!#3d\u003er5}uODZVh-ChQh7H*qb{$h\u003ecONk4d{\u003c#PgCAn$wN!{(v}Yp\u003elVlHDl3aFWc%[VMh90JMvL/JrcV\u003co9BAh8kxd3$kfNbradjFEGB8kM2wHy+ieIIA8dlz@#wPS6nzxJF3v@C)?rz(yQz/6DizE)Zcc%[VMf/I42v(kX%Elg^\u0026CRJYpw)lSVB9Q.-oda1duODZZwIEUawH}gxCRJYpw)lSOxg\u003eNoyBryJDWNCLfNbrZvp\u0026Z\u003eph\u003c@SogpjljS$$Mt%0EAz/fSrayu*Eh90AIwIunOfNbxifKV^)tqgpQt@#yECRJYpw)lS^B8+/iB%*MsjW0daCR}GphF1M?cmAjPCRJYpw)lSOxg\u003eNoyBryJDWNCLfNbrZvp\u0026Z\u003et61W}ADSZnjZP)/h90AIwItL{v@DmaBrB{ACRJYpw?VebuODZVv{@$NcRm@zlu)n[u0yU\u0026CX5*yw[r=7j85pPuODZVv{@$6h:6q!B-7-3w[=c]wgq\u003enz/fSrayu*Eg=NB8v(ctXB-7Yhx(v(quODZWialnIivPq%xLzJ(cVK97mRkgst%hKGCRRl!vLx![Bzbxftpil!w{5l0cTw(tfNbr6fNbo5fNboSeoCMtB6y2cByF].zynZMw{503BzkVhc[fH-wPS6nzyoskCt\u0026P(By=*YEjPFNx(^Gas7bJpCVMm#jTTGVhdG)oh-B#^ggBHkgb8%TggsBjhdG)ogb@J-hdG)ogc5O", "ln": 10215, "col": 10216, "line": 1 }, { "b": "gb\u0026D.h!c9qgbr9VhdP%pgH:QlgIf)pgb8%TggsBjh!jo$Elg^\u0026CR?xswmED2cVB9ABz(nDAaHz5tpjn:p\u003cl#6cTw(EB-7Yhx(v(qdskMyzGx[xuODZViwAGFfG\u003cq+Cox^{xgm5:d0fcpB6y1[vprbWs0}o7Bzbxftpj8Zwnli%cTweLuODZVh-25Qh:7I4CRIh", "ln": 11141, "col": 11142, "line": 1 }, { "b": "BzkVhc%[VMvk/}@v(bSYx\u003ew+plt{^UwNPE8EQs^Nvk/}@v(bR-A+funA=91bfNd1+gbin}j91[OB-IvxBzbxftpi#NA-=sJcTwcxxLzJ(cVK97mRkgst}4\u003c-emg8Qg=NB8v(dyqAb](sz/*nzwHy+/cUk\u003e\u0026sxe/Tt%h!xzEW^5z/c$gfNbrfg=NDOdskVBAWU:nBrB{ACR?fiiC7fjfNbo5uODZVwhdNKgcG.)x(^Gap\u0026Q8\u0026BY*7$tpjk#zFa68cTw/vfNbAf", "ln": 11455, "col": 11456, "line": 1 }, { "b": "CR?fiiC7f1d\u003eb*!xLzJ(cS1!{B-*?mu0wW}B-Rjzt{@AQBza(aA=l8rwg7Uho\u003c@cStpjD1zE^W5cTwbHdjD/PfNbr.f\u003ei6@j-\u003evKB6y1*AB%uosTNGVcV0vixlm/mt%0EPwPS6nzxJpuCRI6ji5\u0026(CBzbxftpil!w{5l0cTx}gCRAzLjaeUdcNQARB-7Yhx(v\u003e", "ln": 11684, "col": 11685, "line": 1 }, { "b": "CR\u0026\u0026sfLijauODZVv{@$NcS1(fr8VBqt{%5lCR\u0026\u0026sfLii(emg8Qf\u003ejT7tpi0Pog0(scTx}-fNdd/vRfgct%hKGCR\u0026\u0026sfLij8EpWkowGUtlCR\u0026\u0026sfLijauODZVv{@$6h-(4\u003eBAIRwayu*Eg*%(Fw\u0026q-0y?mYhuODZWfLid3f*djnfF3M+CRJR!f/JVbfNbokw{503BzkVhayu*Ef\u003eB]Ni5-l)fNbrdg?epMemg8Qg=mcCgg.[Yv@DmaBrB{ACR.lihdQnYuODZ+ggAj2iv[I\u003eCR?ffwh2\u00266DNA-Grb1YEi+AILv@#B6zyw\u003cCCR.rpvkP${uODZWhzO-2dsl8DBAIRwayu*EgDmm2h8^ZafNbuhggAg7EjM:om]8L", "ln": 11920, "col": 11921, "line": 1 }, { "b": "CR.3:gDmcMuODZYwIMe3hD%JxCR.lihdQnDfNbreg:#YUuODZVgC\u0026O%w?noRCwhejmRMWIrc-B]B0\u003c0(aZnl2dlz@/vru0)DVAXtB-IvYEp1WMf\u003e06%h!sG\u0026j7-zKc$vgkB95KifNbxdvk8aBaA7\u003cmuODZXfK#$0gavMWz/fSrayu*Eg=NiEf/zg4fNbukvk6C%tl", "ln": 12599, "col": 12600, "line": 1 }, { "b": "fNbu-v{}8HdpWplBzkSnwJKlMCRQ%+g=Niud\u003eAtWtRoP9B$W6bfNbxifG0xLc[])2vkGAsc%[VMgCJq(vkq4]fNbxifG0xLc[])2g?FgxdjcxGfNbAgggsZ7tvf7egD3{AwmWeyCRJRXdp3d+fNbxifG0xLc[])2h.#)*d0)sNx(4udi:TN=g=NiEf/yNgv@DmbwO#Pqi:TN=ggT)6f/rfxfNbxifG0xLc[])2iw-f\u003cc[])1ehhr6gDmuyEjlZOfNbAffK#\u003c]tvf7egD3{AwmWeyCRH{hdp1uefNbuYgDe]Oemg8QggT)6f/pH?fNbAlf/pWzdj!*WCRIf\u0026wJsuJuODZWwmG45h7S8*CR?xmh2", "ln": 13122, "col": 13123, "line": 1 }, { "b": "g+{:}fF)0vfNbxifG0xLc[])2f/yE^c%[VMh8O(1whL]BfNbu-v{}8Hemg8Qg=NiEf/yExEslJNvru0)DWQr\u003cw{503BzkVhayu*Eh90AIc[fHMz/fSrayu*EhE[Z4gDvQ5cQyEssA^IgcOcS!w{en:f?iPxcV947sz*-7g\u003chI\u003et68CQqZTazlO-*UDs*RZlRRe@Du:oOegi!VC3mi/stChxcOcS*wJrKPpdDV.cV}g8q*ANAnnhZgokEs0t0:#3m)O[NhecYnsWL[}h76}5l1-hYl$4C]cWvErnjm5Ip\u003cMK$egi-dzE(aUyd@[eA-LL5od8nrAzga\u003cCx=+degk:SA.QZ\u0026C{+c\u003czb2sKA=\u003clSB8-MUcWwAWrEe73egkHLA.QZ?z6{\u003eZlV#{pC$.S]egkZ!ydHV=A-LH#vN$=soJal4AY4Mzw\u003ets4BW{.3yf0-EAyUp#yf0.%BW{.3yfC}ch85-Sw\u003etuBiAZS0vN$=tzzjBLw\u003eCE3vN$=tzzsHMAyUp#yb57hBW{.3zC2k1zDZ:!w\u003eEt7oIoXQh85-Sw\u003eEt7iwA\u0026}AyUp#zC0rwzCj+Sw\u003eCv4oIv\u0026GBW{.3zCUT?vN$=1iwA(SA.}3:vN$=2w?=O@yd@tOw\u003eCA+iA!^MvN$=2AyUp#zzjw2iAo^aw\u003eCE7iAZ6ew\u003eCE8yd{#Jzaw\u003e}zzjF5w(AzRw\u003eNz]vLzIew\u003eNCWvN$/TA.}3qAyUp#A.w+]C3j", "ln": 13418, "col": 13419, "line": 1 }, { "b": "nnh:loHzJlm[3cjrEeZ}hBoeUcOcSkCYDI%vj9PNl$XI{BUC*$l$*silqo/{egi!uiAgrAcOcS\u003eCqRc#giMuqw{N0nphIvfcWvErnjl(legkpRD00vRl%1zvyig*OcV\u0026]Sl3WVwcOcS\u003cCW::2CqS2vegi\u00260yevlpcOcS=fHP(2C1i]hcWvH.ha84$rWPBClu^PRlO-mGDt@", "ln": 31207, "col": 31208, "line": 1 }, { "b": "w*/uTf/g^qt{%5lCRJ=vh8)JCuODZVi5SSNv\u003eorUfEY8idj!*WCR?iivpS[MuODZ+ggAj2ivDOaf/y{st%hKGCRQ%+g=NivuODZYgCSxHwlSy{CSvJ*i5JYAfNbrgv\u003c$XDuODZVvl353wH}gxCR?iivpS[MuODZ+ggAj2ivDOaf/rI\u003et%i7pCoxpZBy=\u003cHtvf7eiwL56h906sCRH{Ydp1tJj7ihQzET/3B-7Yhx(v(iuODZXv}vCNfEQoZCRJRXwN]v6uODZVg+Z!0ivPq+z/fSrayu*EgC*%yfK^gLfNbPkvG", "ln": 33498, "col": 33499, "line": 1 }, { "b": "q!]5]ssldpfNbxgh83Z[c[])2vkPGZj91[OB-Ivxw[u6]xEEjwCR-}=vp.h#uODZXg=l%vvKJ{Pf/JR(t{%5lCR-}=vp.h#uODZXg=l%vvKJ{Pf/JR(t{%5lCR-}=ve", "ln": 34031, "col": 34032, "line": 1 }, { "b": "cPU\u003cZzEW^5z/c$gfNbu+h-rMMemg8Qgc5@Tw[rArA+funA=91bfNbu+h-rMMeNHhRgc5@Tw[s5Legi\u0026hnl6ZUi+AILv@#B6zyw\u003cCCW\u003etzwID4[uODZXwhX0Uh.nq\u0026CRRo/vk?WBDVAXtB-IvxuOD.mw\u0026si", "ln": 34677, "col": 34678, "line": 1 }, { "b": "pekHJi:TN=gD5-6w\u0026Ig)CRI6^dsBp1A^r1Cw*!*ffNbAmhAr=QdskMyzGx[xuODZVh.)s3w\u003c6NDvqf*auODZXhdH5HgfX9tCR.l/iC7l0fNbrjvKUOhw[u6]xE)HACR.i!vkfJwuODZXhE!:Vi4cF9f/SR\u003et{%5lCR.i!vkfJwuODZXhE!:Vi4cF9f/SR\u003et{%5lCR.i!vkfJwuODZXhE!:Vi4cF9f/SR\u003et{%5lCR.i!vkfJwuODZXhE!:Vi4cF9f/SR\u003et{%5lCR.i!vkfJwuODZXhE!:Vi4cF9f/p*qt}xtpCRR0egbI0uemg8QgC@VJf!#%ufNbxiv(XcXc[])2i5Jc\u003cdj!*WCSvJqgb-X)emg8QgC@U", "ln": 35431, "col": 35432, "line": 1 }, { "b": "fNbAgggsZ7tvf7egD5-6w\u0026Ig)CRJU+dp3d+fNbxiv(XcXc[])2vpH-(dsATbv@DmaBrB{ACRJYqfK!DNzE[2mmSir:l$7gCc[dk+fNbrZvLzn1tvf7egD5-6w\u0026Ig)CRH%cdp1uefNbxhv{}8Etvf7egD5-6w\u0026Ig)CRH%.dp1GifNbAmhAr=Qdj!*WCRJYqfK!D{uODZXhE!:Vi4cF9f!$Bit{%5lCR.i!vkfJwuODZXhE!:Vi4cF9f\u003e1Pwt}x(8Ck", "ln": 36765, "col": 36766, "line": 1 }, { "b": "v(XcXc[])2g?4[tc%[VMgD5-6w\u0026Ig)CRIikdj!*WCR?iivpS[MuODZXhE!:Vi4cF9f\u003e9c(t}4rLeHI$#l$7gGtvf7egD5-6w\u0026Ig)CRIc?dp1tJdj!*WCR.i!vkfJwuODZXhE!:Vi4cF9f\u003e8)!t}4iNvrVc]BrB{ACR.i!vkfJwuODZXhE!:Vi4cF9f/9n/t{%q@ByO#nuODZXhdH5HgfX9tCR.l/iC7l0fNbrjgBVPTuODZXhdH5HgfX9tCR.l/iC7l0fNbrevKUOhuODZXhdH5HgfX9tCR.l/iC7l0fNbrbhZ@2XuODZXhdH5HgfX9tCR.l/iC7l0fNbrfh7q/YuODZWf!$Hviv[I\u003eCR.i!vkfJwuODZXhE!:Vi4cF9f/R3tt}4sifNbPkhzNg4dj!*WCR.i!vkfJwuODZXhE!:Vi4cF9f/S.[t}4sKcV9BpxM4Aei:TN=gC@VJf!#%ufNbxiv(XcXc[])2gg.[uegj[Bwo/K-uODZVv}4c3vsoN^EpDYcv}Wn$fNdbtgb7y\u003cdslF\u003edjuR]i@", "ln": 37147, "col": 37148, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "_0x148d62" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "parseInt" ], [ "", "_0x5737b4" ], [ "", "_0x1fb513.push" ], [ "", "_0x1fb513.shift" ], [ "", "_0x1fb513.push" ], [ "", "_0x1fb513.shift" ], [ "", "_0xe574f9" ], [ "", "_0x3f4eae" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x202de8" ], [ "", "_0x2becda" ], [ "", "require" ], [ "", "require" ], [ "", "_0x92b859" ], [ "", "require" ], [ "", "require" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "Map" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "_0x92b859" ], [ "", "Date" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x4dbe67" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x31234c" ], [ "", "_0x4d49fa" ], [ "", "_0x4d49fa" ], [ "", "_0x4d49fa" ], [ "", "_0x10d031" ], [ "", "_0x4d49fa" ], [ "", "_0x4d49fa" ], [ "", "_0x4d49fa" ], [ "", "_0x10d031" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x2758df" ], [ "", "_0x213270" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x6dc175" ], [ "", "_0x10e55e" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x4c855f" ], [ "", "_0x5926" ], [ "", "_0x52965f.charAt" ], [ "", "_0x3ef4e6.charCodeAt" ], [ "", "String.fromCharCode" ], [ "", "_0x251f99.indexOf" ], [ "", "_0x30b8ec.charCodeAt.toString" ], [ "", "_0x30b8ec.charCodeAt" ], [ "", "decodeURIComponent" ], [ "", "RegExp" ], [ "", "_0x191810.test" ], [ "", "Boolean" ], [ "", "Math.round" ], [ "", "Math.random" ], [ "", "_0x154888" ], [ "", "_0x487dc4.mPPwsu" ], [ "", "_0x487dc4" ], [ "", "_0x1caf.PsyTSK" ], [ "", "_0x306922" ], [ "", "_0x587999" ], [ "", "_0x3ccdf3" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x3605de" ], [ "", "_0x18fe9f" ], [ "", "_0x3605de" ], [ "", "_0x5926" ], [ "", "_0x4de0e1" ], [ "", "_0x415f9f" ], [ "", "_0x415f9f" ], [ "", "Date" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "fetch" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x34500b" ], [ "", "_0x38694c" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0xcf6e15" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "_0x36c9f8" ], [ "", "FormData" ], [ "", "Blob" ], [ "", "fs" ], [ "", "os" ] ], "mbr": [ "Math.random", "Math.round", "String.fromCharCode", "_0x191810.test", "_0x1caf.IgKBxk", "_0x1caf.NpjbKE", "_0x1caf.PsyTSK", "_0x1caf.Zsqfqv", "_0x1fb513.push", "_0x1fb513.shift", "_0x251f99.indexOf", "_0x2c4de4.id", "_0x30b8ec.charCodeAt", "_0x30b8ec.charCodeAt.toString", "_0x30b8ec.length", "_0x3ef4e6.charCodeAt", "_0x487dc4.mPPwsu", "_0x487dc4.prototype", "_0x487dc4.prototype.eIrXUb", "_0x487dc4.prototype.mPPwsu", "_0x487dc4.prototype.owWbra", "_0x52965f.charAt" ], "tgt": [ "Blob", "Boolean", "Date", "FormData", "Map", "Math.random", "Math.round", "RegExp", "String.fromCharCode", "_0x10d031", "_0x10e55e", "_0x148d62", "_0x154888", "_0x18fe9f", "_0x191810.test", "_0x1caf.PsyTSK", "_0x1fb513.push", "_0x1fb513.shift", "_0x202de8", "_0x213270", "_0x251f99.indexOf", "_0x2758df", "_0x2becda", "_0x306922", "_0x30b8ec.charCodeAt", "_0x30b8ec.charCodeAt.toString", "_0x31234c", "_0x34500b", "_0x3605de", "_0x36c9f8", "_0x38694c", "_0x3ccdf3", "_0x3ef4e6.charCodeAt", "_0x3f4eae", "_0x415f9f", "_0x487dc4", "_0x487dc4.mPPwsu", "_0x4c855f", "_0x4d49fa", "_0x4dbe67", "_0x4de0e1", "_0x52965f.charAt", "_0x5737b4", "_0x587999", "_0x5926", "_0x6dc175", "_0x92b859", "_0xcf6e15", "_0xe574f9", "decodeURIComponent", "fetch", "parseInt", "require" ], "funcs": [ [ "anonymous", 25 ], [ "anonymous", 594 ], [ "anonymous", 631 ], [ "anonymous", 687 ], [ "anonymous", 836 ], [ "anonymous", 912 ], [ "anonymous", 966 ], [ "anonymous", 1947 ], [ "_0x4aa568", 3123 ], [ "anonymous", 3198 ], [ "anonymous", 3265 ], [ "anonymous", 3359 ], [ "anonymous", 3426 ], [ "_0x2a37fa", 4518 ], [ "anonymous", 4603 ], [ "anonymous", 4695 ], [ "_0xd2065a", 4793 ], [ "_0x18fe9f", 5374 ], [ "_0xfb2fd2", 6238 ], [ "anonymous", 6313 ], [ "anonymous", 6382 ], [ "anonymous", 6449 ], [ "anonymous", 6516 ], [ "anonymous", 6604 ], [ "anonymous", 6696 ], [ "anonymous", 6764 ], [ "_0x55c3d5", 8016 ], [ "anonymous", 8101 ], [ "anonymous", 8168 ], [ "anonymous", 8236 ], [ "anonymous", 8303 ], [ "anonymous", 8370 ], [ "_0x24a39c", 9412 ], [ "_0x1caf", 9620 ], [ "anonymous", 9793 ], [ "anonymous", 9970 ], [ "anonymous", 10886 ], [ "anonymous", 10975 ], [ "anonymous", 11212 ], [ "anonymous", 11451 ], [ "anonymous", 11585 ], [ "anonymous", 11831 ], [ "_0x1ee587", 12072 ], [ "anonymous", 12157 ], [ "anonymous", 12222 ], [ "anonymous", 12310 ], [ "anonymous", 12377 ], [ "anonymous", 12445 ], [ "_0x5926", 13486 ], [ "anonymous", 33224 ], [ "_0x18658c", 33300 ], [ "anonymous", 33357 ], [ "_0x3ce350", 33671 ], [ "anonymous", 33762 ], [ "anonymous", 33829 ], [ "anonymous", 33896 ], [ "anonymous", 34414 ], [ "anonymous", 34469 ], [ "anonymous", 34537 ], [ "anonymous", 34679 ], [ "anonymous", 34746 ], [ "anonymous", 34859 ], [ "anonymous", 34926 ], [ "anonymous", 35118 ], [ "anonymous", 35185 ], [ "anonymous", 35277 ], [ "anonymous", 35344 ] ], "metrics": { "ast": { "op.eq": 15, "op.ge": 2, "op.gt": 2, "op.le": 1, "op.lt": 5, "op.ne": 5, "op.add": 40, "op.div": 10, "op.lor": 2, "op.mod": 2, "op.mul": 7, "op.shr": 1, "op.sub": 14, "op.band": 2, "op.bnot": 2, "op.land": 11, "op.lnot": 17, "max_depth": 37, "call_count": 494, "node_count": 8607, "member_count": 22, "max_array_len": 170, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.div": 0, "op_density.lor": 0, "op_density.mod": 0, "op_density.mul": 0, "op_density.shr": 0, "op_density.sub": 0, "sequence_count": 11, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "op_density.lnot": 0, "max_concat_chain": 16, "member_depth_max": 3, "max_numeric_array": 5, "infinite_loop_count": 1, "const_return_function_count": 4, "const_return_function_ratio": 0.06, "string_return_function_count": 1, "string_return_function_ratio": 0.01 }, "file": { "size": 37580, "entropy": 5.89 }, "text": { "lines": 1, "top_char": 48, "max_ws_run": 1, "digit_ratio": 0.26, "space_count": 168, "char_entropy": 5.89, "unique_chars": 91, "top_char_null": 0, "escape_density": 0.1, "lines_over_200": 1, "lines_over_500": 1, "string_density": 345, "top_char_ratio": 0.05, "avg_line_length": 37580, "lines_over_1000": 1, "max_line_length": 37580, "hex_escape_count": 38, "last_line_length": 37580, "long_token_count": 56, "whitespace_ratio": 0, "identifier_density": 1051, "encoded_string_ratio": 0.03, "normalized_string_count": 345, "suspicious_identifier_ratio": 0 }, "binds": { "count": 125 }, "binary": { "peak_region_bytes": 25600, "peak_region_entropy": 5.67 }, "source": { "function_count": 9 }, "imports": { "count": 2, "stdlib_count": 2, "stdlib_ratio": 1 }, "strings": { "bytes": 20162, "count": 345, "very_long": 1, "avg_length": 58.44, "max_length": 17487, "avg_entropy": 2.58, "empty_count": 6, "entropy_stddev": 0.8, "base64_candidates": 11, "high_entropy_count": 3 }, "functions": { "count": 9, "nested": 16, "density": 6700, "anonymous": 58, "avg_params": 1.57, "code_ratio": 67, "max_params": 3, "one_liners": 67, "avg_name_length": 8.56, "no_params_count": 14, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 0.85, "max_nesting_depth": 2, "numeric_suffix_names": 2, "avg_param_name_length": 8.99 }, "identifiers": { "count": 1051, "unique": 246, "avg_length": 8.83, "max_length": 18, "min_length": 3, "avg_entropy": 2.86, "reuse_ratio": 0.23, "length_stddev": 1.05, "has_digit_ratio": 0.93, "all_lowercase_ratio": 0.02, "all_uppercase_ratio": 0, "numeric_suffix_count": 150, "keyboard_pattern_names": 1, "underscore_prefix_count": 231 } } }, "id": 1, "mol": "O₂(As₄Eu)H₅(Cm₃CrDb₉FOs)Md₂(In₂)Th", "path": "dotenv-precheck-1.1.1.tgz!!package/index.js", "pid": 0, "risk": 91, "sha": "d309a636d30fc5bce05090b91d212c9da4e438fc0abcb544ed7dd5a9672abc70", "size": 37580, "traits": [ { "id": "metadata/import/npm/fs::fs", "conf": 0.95, "crit": 3, "desc": "imports fs", "spans": [ [ 1392, 2 ] ] }, { "id": "metadata/import/npm/os::os", "conf": 0.95, "crit": 3, "desc": "imports os", "spans": [ [ 1452, 2 ] ] }, { "id": "metadata/file/encoded::large-base64-like-literal", "conf": 0.8, "crit": 3, "desc": "Large Base64-like string literal", "spans": [ [ 13740, 128 ] ] }, { "id": "metadata/import/builtin::require-fs", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js fs module", "spans": [ [ 1384, 0 ] ] }, { "id": "metadata/import/builtin::require-os", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js os module", "spans": [ [ 1444, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 0, 0 ], [ 3948, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 0, 0 ], [ 907, 0 ] ] }, { "id": "micro-behaviors/communications/http/request/computed::js-fetch-computed-helper-argument", "conf": 0.93, "crit": 3, "desc": "Fetch API passed to computed helper", "spans": [ [ 35495, 103 ], [ 37273, 103 ] ] }, { "id": "micro-behaviors/crypto/asymmetric/key::private-key-identifier", "conf": 0.75, "crit": 3, "desc": "Private-key identifier", "spans": [ [ 0, 11 ], [ 4304, 11 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-function-derived-computed-call", "conf": 0.9, "crit": 3, "desc": "Calls computed member from function result", "spans": [ [ 761, 19 ], [ 1065, 19 ], [ 1093, 19 ], [ 1113, 19 ], [ 1133, 19 ], [ 1209, 19 ], [ 1276, 19 ], [ 1510, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-catch-block", "conf": 0.9, "crit": 3, "desc": "JavaScript silently discards caught errors", "spans": [ [ 13482, 2 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-close", "conf": 0.86, "crit": 3, "desc": "Calls a parenthesized function expression", "spans": [ [ 0, 4 ], [ 37574, 4 ] ] }, { "id": "micro-behaviors/data/decode/base64::lower-first-base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a lower-first Base64 alphabet", "spans": [ [ 9830, 65 ] ] }, { "id": "micro-behaviors/data/serialize/envelope::json-type-field", "conf": 0.9, "crit": 3, "desc": "JSON object type field fragment", "spans": [ [ 0, 7 ], [ 5667, 7 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::content-object-field", "conf": 0.8, "crit": 3, "desc": "JSON content object field", "spans": [ [ 0, 10 ], [ 13273, 10 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like host identity field", "spans": [ [ 0, 7 ], [ 2965, 7 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::user-field-key", "conf": 0.9, "crit": 3, "desc": "JSON-like user identity field", "spans": [ [ 0, 7 ], [ 3002, 7 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-call-cluster", "conf": 0.86, "crit": 3, "desc": "Dense computed-property call cluster (3+)", "spans": [ [ 457, 18 ], [ 475, 19 ], [ 752, 28 ], [ 1056, 28 ], [ 1084, 28 ], [ 1180, 28 ], [ 1504, 25 ], [ 1919, 28 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-decoder-call-prefix", "conf": 0.9, "crit": 3, "desc": "Computed call uses a decoder function", "spans": [ [ 752, 28 ], [ 1056, 28 ], [ 1084, 28 ], [ 1180, 28 ], [ 1504, 25 ], [ 1919, 28 ], [ 2246, 28 ], [ 2311, 28 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-member-variable-assignment", "conf": 0.9, "crit": 3, "desc": "Assigns through a computed JavaScript member", "spans": [ [ 0, 11 ], [ 10629, 11 ], [ 10786, 11 ], [ 10919, 11 ], [ 11984, 11 ], [ 33562, 11 ], [ 33600, 11 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-nested-concat-this-call", "conf": 0.94, "crit": 3, "desc": "Nested this-concat calls a computed member", "spans": [ [ 0, 20 ], [ 11519, 20 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::shift-string-literal", "conf": 0.6, "crit": 3, "desc": "String literal names the shift method", "spans": [ [ 486, 5 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "spans": [ [ 10504, 29 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 0, 8 ], [ 10540, 8 ] ] }, { "id": "micro-behaviors/fs/build-artifacts::compiled-artifact-cleanup", "conf": 1.0, "crit": 3, "desc": "Deletes only compiled/cache build artifacts", "spans": [ [ 0, 11 ], [ 2069, 11 ] ] }, { "id": "micro-behaviors/time/query::js-triple-new-date", "conf": 0.4, "crit": 3, "desc": "3+ new Date() calls", "spans": [ [ 0, 9 ], [ 2934, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/hex::hex-byte-token-ff", "mbc": "B0032", "conf": 0.5, "crit": 3, "desc": "0xff hex byte token", "spans": [ [ 0, 4 ], [ 3763, 4 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-mangled-bracket-rotation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Mangled array self-rotates via bracket access", "spans": [ [ 0, 34 ], [ 457, 34 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-mangled-parseint-rotation-guard", "atk": "T1027.002", "mbc": "B0032", "conf": 0.95, "crit": 3, "desc": "Mangled parseInt checksum drives rotation loop", "spans": [ [ 0, 41 ], [ 101, 41 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::aes-key-field-token", "atk": "T1573.001,T1027", "mbc": "C0027", "conf": 0.8, "crit": 3, "desc": "AES or generic key field name", "spans": [ [ 0, 10 ], [ 4352, 10 ] ] }, { "id": "objectives/anti-static/obfuscation/payload/encrypted::js-secret-key-name", "atk": "T1027.013", "mbc": "B0032", "conf": 0.75, "crit": 3, "desc": "Secret key identifier", "spans": [ [ 0, 10 ], [ 4352, 10 ] ] }, { "id": "objectives/credential-access/wallet/keywords::private-key-word", "conf": 0.5, "crit": 3, "desc": "privateKey credential field reference", "spans": [ [ 3089, 11 ] ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-mnemonic-token", "atk": "T1041", "conf": 0.9, "crit": 1, "desc": "Node MNEMONIC token", "spans": [ [ 0, 0 ], [ 4295, 0 ] ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-seed-phrase-token", "atk": "T1041", "conf": 0.9, "crit": 3, "desc": "Node SEED_PHRASE token", "spans": [ [ 0, 11 ], [ 4283, 11 ] ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-wallet-key-token", "atk": "T1041", "conf": 0.9, "crit": 3, "desc": "Node WALLET_KEY token", "spans": [ [ 0, 10 ], [ 4329, 10 ] ] }, { "id": "metadata/build/minifier::js-medium-minified-line", "conf": 0.9, "crit": 2, "desc": "JavaScript contains a long minified line", "spans": [ [ 0, 37580 ] ] }, { "id": "metadata/file/naming::numeric-suffix-identifiers", "conf": 0.75, "crit": 3, "desc": "At least 100 numeric-suffixed identifier names" }, { "id": "micro-behaviors/communications/http/form::formdata-class", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "Constructs browser FormData", "spans": [ [ 0, 13 ], [ 36829, 13 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::catch-returns-constant-only", "conf": 0.88, "crit": 3, "desc": "Catch block only returns a constant", "spans": [ [ 0, 19 ], [ 3581, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 0, 18 ], [ 37556, 18 ] ] }, { "id": "micro-behaviors/data/encode/char-code::fromcharcode-call", "conf": 0.9, "crit": 3, "desc": "Builds characters with String.fromCharCode", "spans": [ [ 10279, 19 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-date-method-call", "conf": 0.82, "crit": 3, "desc": "Calls a Date method through bracket notation", "spans": [ [ 0, 23 ], [ 37211, 23 ] ] }, { "id": "micro-behaviors/fs/path/construct::script-dirname-ref", "conf": 0.6, "crit": 3, "desc": "References script directory path", "spans": [ [ 0, 128 ], [ 2274, 9 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/line-shape::js-near-zero-whitespace", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "JavaScript near-zero whitespace" }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Last line is over 1000 chars" }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Exactly one line exceeds 1000 chars" }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-function-names", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Hex-prefixed function names (_0x pattern)", "spans": [ [ 0, 19 ], [ 3123, 19 ], [ 4518, 19 ], [ 5374, 19 ], [ 6238, 19 ], [ 8016, 19 ], [ 9620, 17 ], [ 12072, 19 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-variable-names", "atk": "T1027", "mbc": "B0032", "conf": 0.85, "crit": 3, "desc": "Hex-prefixed variable names (_0x pattern)", "spans": [ [ 0, 16 ], [ 55, 16 ], [ 117, 16 ], [ 577, 16 ], [ 605, 14 ], [ 661, 16 ], [ 698, 16 ], [ 736, 16 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::push-shift-bracket-pattern", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Bracket-notation push/shift self-rotation", "spans": [ [ 0, 39 ], [ 457, 39 ] ] }, { "id": "objectives/credential-access/wallet/keywords::seed-phrase-word", "conf": 0.5, "crit": 3, "desc": "seedPhrase credential field reference", "spans": [ [ 0, 128 ], [ 3106, 10 ] ] }, { "id": "metadata/build/bundler/asset::js-any-bundle-output", "conf": 0.95, "crit": 2, "desc": "Contains bundled or minified JavaScript", "uses": [ 35 ], "spans": [ [ 0, 37580 ] ] }, { "id": "micro-behaviors/data/decode/base64::base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a Base64 alphabet", "uses": [ 12 ], "spans": [ [ 9830, 65 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::host-user-field-pair", "conf": 0.9, "crit": 3, "desc": "JSON-like host and user identity fields", "uses": [ 15, 16 ], "spans": [ [ 0, 7 ] ] }, { "id": "micro-behaviors/os/module/require::node-system-module-import-set", "conf": 0.88, "crit": 3, "desc": "Imports at least two Node system modules", "uses": [ 3, 4 ], "spans": [ [ 1444, 7 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::javascript-obfuscator-string-array-runtime", "atk": "T1027.002", "mbc": "B0032", "conf": 0.96, "crit": 4, "desc": "JavaScript Obfuscator rotates and decodes a string array at runtime", "uses": [ 27, 28 ], "spans": [ [ 0, 41 ], [ 101, 41 ], [ 457, 34 ] ] }, { "id": "objectives/exfiltration/stealer/credential/multi-source::node-dev-secret-regex-list", "atk": "T1041", "conf": 0.94, "crit": 4, "desc": "Node developer secret regex list", "uses": [ 8, 32, 33, 34 ], "spans": [ [ 0, 8 ] ] }, { "id": "micro-behaviors/communications/http/post::post-form", "atk": "T1071.001", "mbc": "C0002", "conf": 0.75, "crit": 3, "desc": "HTTP form submission encoding", "uses": [ 37 ], "spans": [ [ 0, 13 ], [ 36829, 13 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-name-mangling", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Hex-prefixed identifier names (obfuscation)", "uses": [ 46, 47 ], "spans": [ [ 0, 19 ], [ 55, 16 ], [ 117, 16 ], [ 577, 16 ], [ 605, 14 ], [ 661, 16 ], [ 698, 16 ], [ 736, 16 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::any-name-mangling", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Obfuscator-style name mangling", "uses": [ 57 ], "spans": [ [ 0, 19 ], [ 55, 16 ], [ 117, 16 ], [ 577, 16 ], [ 605, 14 ], [ 661, 16 ], [ 698, 16 ], [ 736, 16 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::hex-name-mangling-with-string-table-rotation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.94, "crit": 3, "desc": "Hex-named string-table decoder", "uses": [ 48, 57 ], "spans": [ [ 0, 19 ], [ 55, 16 ], [ 117, 16 ], [ 457, 39 ], [ 577, 16 ], [ 605, 14 ], [ 698, 16 ], [ 736, 16 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::obfuscated-base64-codec", "atk": "T1027.002", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Obfuscated JavaScript embeds a Base64 alphabet", "uses": [ 51, 58 ], "spans": [ [ 0, 19 ], [ 55, 16 ], [ 117, 16 ], [ 577, 16 ], [ 605, 14 ], [ 661, 16 ], [ 698, 16 ], [ 736, 16 ] ] }, { "id": "third_party/SigBase/SUSP/Obfuscated/JS/Obfuscatorio", "conf": 0.9, "crit": 3, "desc": "Detects JS obfuscation done by the js obfuscator (often malicious)", "spans": [ [ 101, 11 ], [ 134, 11 ], [ 166, 11 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DKp(rb5Q?awG\u003ceTb4LRlwO#VyAb]J1xK$W?a$K6zar\u003e#uA=U@kzx.a:a#7Y8e?[L33lQDnwmY*(A+PGmx(v(kiV]RAB-8mywn=N3zGWdwA+e\u003c0x\u003eIa3ay/7@v@3cdvrrSazGx]dy?$kox(dA9ed9Hxb5H+5zx.a:b57}9wQ2?xB0rdxarR\u003eHv@=p5BAnS!aBsCrarR^JAbP/tx(n0lvqG:7iV]R:z!9A4x(mD)CRi-La{]CnEjLZFar\u003ePjD3sgEwoe}Qax]f}arR^Jwn=N3zGWiP3lQDlar\u003exmB%nEAarR^Hb5?Nlw]8f]xMLBH3lQDlar\u003exmC4\u003e#nzF-%5BrR5maycJ9arR\u003eAx\u003e7Z(B7DKRar\u003cJKr3zV$3i", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 297, "entropy": 4.42 }, "binary": { "peak_region_bytes": 297, "peak_region_entropy": 4.42 } } }, "id": 2, "ident": { "name": { "value": "dotenv-precheck", "source": "npm.name", "verified": false }, "trust": "unsigned", "version": { "value": "1.1.1", "source": "npm.version", "verified": false }, "identifier": { "value": "dotenv-precheck", "source": "npm.name", "verified": false } }, "mol": "O₂(S₃Xe)H(Po)Md(Pa₂)", "path": "dotenv-precheck-1.1.1.tgz!!package/package.json", "pid": 0, "refs": [ { "to": "index.js", "off": 129, "file": 1, "kind": "local" } ], "risk": 7, "sha": "8c140a383c6b07b42a77110fed365917c7100297e77bfb4e239d96d1735bba17", "size": 297, "traits": [ { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field", "spans": [ [ 0, 21 ] ] }, { "id": "supply-chain/install-hook/postinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'postinstall' hook that runs during install", "spans": [ [ 159, 13 ] ] }, { "id": "metadata/package/entrypoint::main-root-javascript-entry", "conf": 0.9, "crit": 2, "desc": "Root JavaScript main entrypoint", "spans": [ [ 120, 0 ] ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root" }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.95, "crit": 3, "desc": "Filename is package.json" }, { "id": "objectives/supply-chain/install-hook/scripts/import-chain::scripts-postinstall-executor-node", "atk": "T1195.002", "conf": 0.75, "crit": 3, "desc": "postinstall invokes node", "spans": [ [ 159, 13 ] ] }, { "id": "metadata/package/versioning/scheme::mature-version", "conf": 0.7, "crit": 2, "desc": "Major version is 1 or higher", "spans": [ [ 33, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Package script invokes a language interpreter", "spans": [ [ 142, 13 ] ] }, { "id": "objectives/execution/interpreter/script/npm::npm-postinstall-script", "conf": 1.0, "crit": 3, "desc": "Declares an npm postinstall lifecycle hook", "spans": [ [ 159, 13 ] ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-hook-key", "conf": 0.85, "crit": 3, "desc": "Declares a package postinstall hook", "spans": [ [ 159, 13 ] ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::postinstall-runs-node-script", "conf": 0.92, "crit": 3, "desc": "Postinstall targets local Node.js file", "spans": [ [ 159, 13 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::has-postinstall", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Has postinstall script hook", "spans": [ [ 159, 13 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/declaration::postinstall-hook-declaration", "atk": "T1195.002", "conf": 0.96, "crit": 3, "desc": "Package declares a postinstall hook", "spans": [ [ 159, 13 ] ] }, { "id": "metadata/package/scripts/lifecycle::install-hooks", "conf": 1.0, "crit": 1, "desc": "Package has install hooks", "uses": [ 11 ], "spans": [ [ 159, 0 ] ] }, { "id": "metadata/package/scripts/lifecycle::versioned-install-hook-without-source-repository", "conf": 0.9, "crit": 3, "desc": "Versioned install-hook package lacks declared source repository", "uses": [ 6, 13 ], "spans": [ [ 33, 5 ], [ 159, 13 ] ] }, { "id": "objectives/supply-chain/install-hook/package/manifest::versioned-install-hook-without-source-repository", "atk": "T1195.002", "conf": 0.9, "crit": 3, "desc": "Versioned install-hook package lacks a declared source repository", "uses": [ 6, 13 ], "spans": [ [ 33, 5 ], [ 159, 13 ] ] } ], "type": "package.json" }, { "depth": 1, "facts": { "metrics": { "file": { "size": 800, "entropy": 4.73 }, "binary": { "peak_region_bytes": 800, "peak_region_entropy": 4.73 }, "registry": { "age_days": 0, "file_count": 2, "maintainers": 1, "published_at": 1790691654, "releases_24h": 3, "releases_48h": 3, "is_deprecated": 0, "release_count": 3, "security_hold": 0, "unpacked_size": 37877, "version_removed": 0, "package_age_days": 0, "first_published_at": 1790690384, "has_install_script": 0, "previous_published_at": 1790691581, "publisher_in_maintainers": 1, "days_since_previous_release": 0 } } }, "id": 3, "mol": "Md(Re)", "path": "dotenv-precheck@1.1.1.registry.json", "pid": 0, "rel": "registry", "risk": 1, "role": "sidecar", "sha": "afdee85638281dd8e7b0c76dbef0908bf814cd74971020f6bc382bc183a33dd2", "size": 800, "traits": [ { "id": "metadata/registry::brand-new-package", "conf": 1.0, "crit": 3, "desc": "Package first published within seven days" }, { "id": "metadata/registry::few-releases", "conf": 1.0, "crit": 3, "desc": "Three or fewer releases" }, { "id": "metadata/registry::publish-burst-24h", "conf": 1.0, "crit": 3, "desc": "Three releases published within 24 hours" }, { "id": "metadata/registry::publish-burst-48h", "conf": 1.0, "crit": 3, "desc": "Three releases published within 48 hours" }, { "id": "metadata/registry::recent-package", "conf": 1.0, "crit": 3, "desc": "Package under two months old" }, { "id": "metadata/registry::single-maintainer", "conf": 1.0, "crit": 3, "desc": "Registry package lists one maintainer" }, { "id": "metadata/registry::freshly-published", "conf": 1.0, "crit": 3, "desc": "Release published within seven days" }, { "id": "metadata/registry::new-package-publish-burst", "conf": 0.6, "crit": 3, "desc": "Brand-new package with publish burst", "uses": [ 0, 2 ] } ], "type": "registry" } ], "rev": "c1ea9", "v": "8" } }