{ "ml": { "v": "7", "eng": "2.3.1-beta.0", "lvl": -1, "conf": 0, "mods": [ { "cls": 0, "raw": 0.00006060799, "rte": "az", "prob": 0.00006060799 }, { "cls": 0, "raw": 0.00013959408, "rte": "az/zip", "prob": 0.00013959408 } ], "prob": 0.079265274, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.07926527410745621, "type": "zip" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.000013083219528198242, "type": "github_actions" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000012755393981933594, "type": "github_actions" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.000013997157111589331, "type": "text" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000014175971045915503, "type": "markdown" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000008245308890764136, "type": "ruby" }, { "id": 6, "lvl": -1, "conf": 0, "prob": 0.000011165936484758276, "type": "shell" }, { "id": 7, "lvl": -1, "conf": 0, "prob": 0.00000860293675941648, "type": "ruby" }, { "id": 8, "lvl": -1, "conf": 0, "prob": 0.000009347994819108862, "type": "ruby" }, { "id": 9, "lvl": -1, "conf": 0, "prob": 0.000009526808753435034, "type": "ruby" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000010500351891096216, "type": "ruby" }, { "id": 11, "lvl": -1, "conf": 0, "prob": 0.000008761882781982422, "type": "ruby" }, { "id": 12, "lvl": -1, "conf": 0, "prob": 0.00001284480094909668, "type": "ruby" }, { "id": 13, "lvl": -1, "conf": 0, "prob": 0.000007381041996268323, "type": "ruby" }, { "id": 14, "lvl": -1, "conf": 0, "prob": 0.000007202228061942151, "type": "ruby" }, { "id": 15, "lvl": -1, "conf": 0, "prob": 0.000007887681022111792, "type": "ruby" }, { "id": 16, "lvl": -1, "conf": 0, "prob": 0.0000065267086029052734, "type": "ruby" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000006993611805228284, "type": "ruby" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000008493661880493164, "type": "ruby" }, { "id": 19, "lvl": -1, "conf": 0, "prob": 0.000010242064490739722, "type": "ruby" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.0000057021775319299195, "type": "ruby" }, { "id": 21, "lvl": -1, "conf": 0, "prob": 0.000005890925876883557, "type": "ruby" }, { "id": 22, "lvl": -1, "conf": 0, "prob": 0.0000059604644775390625, "type": "ruby" }, { "id": 23, "lvl": -1, "conf": 0, "prob": 0.018570682033896446, "type": "npm" }, { "id": 24, "lvl": -1, "conf": 0, "prob": 0.000030269226044765674, "type": "javascript" }, { "id": 25, "lvl": -1, "conf": 0, "prob": 0.000025232633561245166, "type": "javascript" }, { "id": 26, "lvl": -1, "conf": 0, "prob": 0.00001574555972183589, "type": "javascript" }, { "id": 27, "lvl": -1, "conf": 0, "prob": 0.000012636184692382812, "type": "javascript" }, { "id": 28, "lvl": -1, "conf": 0, "prob": 0.000019252300262451172, "type": "package.json" }, { "id": 29, "lvl": -1, "conf": 0, "prob": 0.000021477540940395556, "type": "markdown" }, { "id": 30, "lvl": -1, "conf": 0, "prob": 0.000013947486877441406, "type": "javascript" }, { "id": 31, "lvl": -1, "conf": 0, "prob": 0.000012834866538469214, "type": "javascript" }, { "id": 32, "lvl": -1, "conf": 0, "prob": 0.050271790474653244, "type": "npm" }, { "id": 33, "lvl": -1, "conf": 0, "prob": 0.000010828177437360864, "type": "package.json" }, { "id": 34, "lvl": -1, "conf": 0, "prob": 0.000029106935471645556, "type": "javascript" }, { "id": 35, "lvl": -1, "conf": 0, "prob": 0.000026007493943325244, "type": "javascript" }, { "id": 36, "lvl": -1, "conf": 0, "prob": 0.07926527410745621, "type": "javascript" }, { "id": 37, "lvl": -1, "conf": 0, "prob": 0.000018050273865810595, "type": "javascript" }, { "id": 38, "lvl": -1, "conf": 0, "prob": 0.00003806750100920908, "type": "javascript" }, { "id": 39, "lvl": -1, "conf": 0, "prob": 0.000019371509552001953, "type": "javascript" }, { "id": 40, "lvl": -1, "conf": 0, "prob": 0.000025163093596347608, "type": "javascript" }, { "id": 41, "lvl": -1, "conf": 0, "prob": 0.00001615285873413086, "type": "javascript" }, { "id": 42, "lvl": -1, "conf": 0, "prob": 0.00002100070378219243, "type": "javascript" }, { "id": 43, "lvl": -1, "conf": 0, "prob": 0.000015576681107631885, "type": "javascript" }, { "id": 44, "lvl": -1, "conf": 0, "prob": 0.00001481175422668457, "type": "javascript" }, { "id": 45, "lvl": -1, "conf": 0, "prob": 0.00001422564218955813, "type": "javascript" }, { "id": 46, "lvl": -1, "conf": 0, "prob": 0.000016788641005405225, "type": "javascript" }, { "id": 47, "lvl": -1, "conf": 0, "prob": 0.000017176071196445264, "type": "javascript" }, { "id": 48, "lvl": -1, "conf": 0, "prob": 0.000016689300537109375, "type": "javascript" }, { "id": 49, "lvl": -1, "conf": 0, "prob": 0.000018437704056850635, "type": "javascript" }, { "id": 50, "lvl": -1, "conf": 0, "prob": 0.000017523765563964844, "type": "javascript" }, { "id": 51, "lvl": -1, "conf": 0, "prob": 0.000015070040717546362, "type": "javascript" }, { "id": 52, "lvl": -1, "conf": 0, "prob": 0.000016729036360629834, "type": "javascript" }, { "id": 53, "lvl": -1, "conf": 0, "prob": 0.000015566745787509717, "type": "javascript" }, { "id": 54, "lvl": -1, "conf": 0, "prob": 0.00001284480094909668, "type": "javascript" }, { "id": 55, "lvl": -1, "conf": 0, "prob": 0.00001286466886085691, "type": "markdown" }, { "id": 56, "lvl": -1, "conf": 0, "prob": 0.000014096498489379883, "type": "text" }, { "id": 57, "lvl": -1, "conf": 0, "prob": 0.00001241763402504148, "type": "markdown" }, { "id": 58, "lvl": -1, "conf": 0, "prob": 0.000014940897926862817, "type": "registry" }, { "id": 59, "lvl": -1, "conf": 0, "prob": 0.000015020370483398438, "type": "registry" }, { "id": 60, "lvl": -1, "conf": 0, "prob": 0.000015020370483398438, "type": "registry" }, { "id": 61, "lvl": -1, "conf": 0, "prob": 0.00002146760562027339, "type": "registry" }, { "id": 62, "lvl": -1, "conf": 0, "prob": 0.00002004702946578618, "type": "registry" }, { "id": 63, "lvl": -1, "conf": 0, "prob": 0.000015020370483398438, "type": "registry" } ], "version": "v18.18", "analyzed_at": "2026-07-18T04:53:53Z" }, "path": "github.com-rubocop-rubocop-thread_safety-v0.5.1.zip", "raw": { "fetched": [ { "kind": "command", "size": 11081, "cached": true, "status": 200, "headers": [ [ "date", "Fri, 17 Jul 2026 23:19:46 GMT" ], [ "content-type", "application/octet-stream" ], [ "content-length", "11081" ], [ "connection", "keep-alive" ], [ "set-cookie", "__cf_bm=355dczjBlXPerkP3c8A4s55NqkJ2QeO59LKKA5vzZ8o-1784330386.50601-1.0.1.1-vLvD8jzUb96FAtWcSjySSbYOd4Mt17eJmex4TbcwRyRO_6mw9NYi2K1rkX6QlE1WJqwsVvS7eoCX6dzy.MZNgywhc2PmOj5QYrC1UKqAXMtsFPyxSPOQqRmVwj3kLzkL; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org; Expires=Fri, 17 Jul 2026 23:49:46 GMT" ], [ "set-cookie", "_cfuvid=QGpDY5Z2YzL42Ky9IBHVG1UtPmx6b04huidVidtbEGU-1784330386.50601-1.0.1.1-wrls6g_FxDxJ2r8JxTsMogggLvmNQimKxDN6ohhD1T4; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org" ], [ "cf-ray", "a1ccf933ab91c3cb-IAD" ], [ "cf-cache-status", "HIT" ], [ "accept-ranges", "bytes" ], [ "access-control-allow-origin", "*" ], [ "age", "1922628" ], [ "cache-control", "public, immutable, max-age=31557600" ], [ "etag", "\"76d7d5b9e47cda8386d1784cbe884791\"" ], [ "last-modified", "Sat, 26 May 2018 19:10:48 GMT" ], [ "server", "cloudflare" ] ], "locator": "pkg:npm/bundler@0.8.0", "outcome": "ok", "final_url": "https://registry.npmjs.org/bundler/-/bundler-0.8.0.tgz", "fetched_at": 1784330386, "resolved_url": "https://registry.npmjs.org/bundler/-/bundler-0.8.0.tgz", "source_offset": 52, "source_sha256": "9bebbfeb3f5a8cb970b3220b6b6ecf425d60a3d9330770d34628b31197bff294", "content_sha256": "14d358a78c779615af98fd62bbe6cf38a344650063fbdfd493010d0a2cc62008" }, { "kind": "command", "cached": false, "locator": "pkg:npm/rubocop-thread_safety", "outcome": "unresolved", "fetched_at": 0, "source_offset": 76, "source_sha256": "9bebbfeb3f5a8cb970b3220b6b6ecf425d60a3d9330770d34628b31197bff294" }, { "kind": "command", "size": 16197, "cached": true, "status": 200, "headers": [ [ "date", "Fri, 17 Jul 2026 18:57:28 GMT" ], [ "content-type", "application/octet-stream" ], [ "content-length", "16197" ], [ "connection", "keep-alive" ], [ "set-cookie", "__cf_bm=zHVgWnlR1I59bArL2SEqTPifAaGEQKwXTfwsz58fFXc-1784314648.2597718-1.0.1.1-SWlhd6px.0VmmbzywbRV9hdyY_u7DHo_lDUsEKsTW80medZxvcx9Vy_xTPkm_9WE_RhI4Px8eu4lUCgrnwnq.fVc2_M1KN_aYMdxKCrF5OySEs1e5VoRVqIFBxeZD8E3; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org; Expires=Fri, 17 Jul 2026 19:27:28 GMT" ], [ "set-cookie", "_cfuvid=9zviEv4a4hkaA8W38Nx5.jwJFQ7GXCOfUYocD1rc8TA-1784314648.2597718-1.0.1.1-Qf4Us8eHq.1NNYBP8fro4TxW38gQnNWypGF_UpbbxOc; HttpOnly; SameSite=None; Secure; Path=/; Domain=npmjs.org" ], [ "cf-ray", "a1cb78f79d0582ba-IAD" ], [ "cf-cache-status", "HIT" ], [ "accept-ranges", "bytes" ], [ "access-control-allow-origin", "*" ], [ "age", "1701610" ], [ "cache-control", "public, immutable, max-age=31557600" ], [ "etag", "\"46bcbaffc9fe28ce92d38fc47dcc2f18\"" ], [ "last-modified", "Mon, 11 May 2020 12:35:01 GMT" ], [ "server", "cloudflare" ] ], "locator": "pkg:npm/pry@0.8.12", "outcome": "ok", "final_url": "https://registry.npmjs.org/pry/-/pry-0.8.12.tgz", "fetched_at": 1784314648, "resolved_url": "https://registry.npmjs.org/pry/-/pry-0.8.12.tgz", "source_offset": 262, "source_sha256": "9bebbfeb3f5a8cb970b3220b6b6ecf425d60a3d9330770d34628b31197bff294", "content_sha256": "4f20faf542314abfb81da8a13d43aa1402791c944f208dd989c1d263bb14ec42" }, { "kind": "command", "cached": false, "locator": "pkg:npm/rubocop", "outcome": "unresolved", "fetched_at": 0, "source_offset": 31, "source_sha256": "1f2d1563575d740e16aa436674f425ade9a8afba52118f7886560b0bba63f58d" }, { "kind": "command", "cached": false, "locator": "pkg:npm/spec_helper", "outcome": "unresolved", "fetched_at": 0, "source_offset": 31, "source_sha256": "d1d65264b9afb24c8d43f551be4ea1bbe830aa8d5e11930f598a6a57b8342a64" } ], "files": [ { "id": 0, "ctx": [ { "b": "p!H([6Awys2MK\u00268000000000000000002E*003UCBzb/ae[n*pflhhAz!0Z8flhhAz!0Z8eP+VDwNPaRB75V(BA{b{fFkjnf!Ud(x([3hvLqn6AaJ]$vpBd%e{RqIb/\u0026mU.YPG]^7MvLj6ec5\u003c\u003eN(vcMcwJiaE\u0026Pfsn{%zvUdL1Kw^9Lai\u003c1/L)WmRKXVEW}i\u003c]aNXKnD#gsA{gu2Vk*^BmEjNWi@laVEgaRDlk:#\u0026ISs4TujNm)-8VP)r%4(t[2NZumnm.=30cOtx08Mq\u003c1qy?w00\u0026M80000000000000000000\u00260001ix([3hvLd", "n": [ { "c": 2, "d": "Zip archive path", "i": "metadata/package/files/included::zip-archive-path", "o": 0, "z": 51, "cf": 0.949999988079071 } ], "ln": 0 } ], "mol": "O(As)H(Db)", "sha": "7d45b754ad479d96b28d86d2bae8ddb6f4d548933245349e60226f60ba5e2f01", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip", "risk": 2, "size": 24676, "type": "zip", "facts": { "metrics": { "file": { "size": 24676.0, "entropy": 7.51, "size_bytes": 24676.0 }, "binary": { "overall_entropy": 7.51, "peak_region_bytes": 16384.0, "peak_region_entropy": 7.82 }, "archive": { "file_count": 33.0, "member_count": 33.0, "script_count": 15.0, "zip_bomb_ratio": 9.12, "directory_count": 0.0, "executable_count": 0.0, "extra_field_size": 0.0, "noise_file_count": 0.0, "total_compressed": 16496.0, "compression.ratio": 0.25, "hidden_file_count": 7.0, "total_uncompressed": 66030.0, "crc_collision_count": 0.0, "entry_comment_count": 0.0, "max_filename_length": 120.0, "rtlo_filename_count": 0.0, "format.regular_count": 33.0, "nested_archive_count": 0.0, "path_traversal_count": 0.0, "symlink_escape_count": 0.0, "security.setgid_count": 0.0, "security.setuid_count": 0.0, "security.sticky_count": 0.0, "double_extension_count": 0.0, "duplicate_member_count": 0.0, "security.symlink_count": 0.0, "unicode_filename_count": 0.0, "homoglyph_filename_count": 0.0, "security.encrypted_count": 0.0, "misplaced_executable_count": 0.0, "timing.mtime_dominant_count": 33.0, "timing.sentinel_mtime_count": 33.0, "security.world_writable_count": 0.0, "timing.mtime_dominant_fraction": 1.0, "compression.method_counts.deflate": 33.0 } } }, "traits": [ { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory", "from": [ { "file": 16 } ], "spans": [ [ 0, 97 ] ] }, { "id": "micro-behaviors/data/source/language::ruby-dynamic-method-definition", "conf": 0.800000011920929, "crit": 3, "desc": "Ruby defines methods dynamically", "from": [ { "file": 18 } ], "spans": [ [ 2724, 19 ] ] }, { "id": "metadata/package/testing/harness/runtime::is-test", "conf": 0.8999999761581421, "crit": 2, "desc": "Test, spec, or fixture file", "from": [ { "file": 16 }, { "file": 17 }, { "file": 18 }, { "file": 19 }, { "file": 20 }, { "file": 21 }, { "file": 22 } ], "spans": [ [ 0, 97 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/scripting::define-method", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 3, "desc": "Dynamic method definition", "from": [ { "file": 9 } ], "spans": [ [ 1008, 59 ], [ 2663, 20 ], [ 2710, 37 ], [ 2722, 25 ], [ 5976, 50 ], [ 6366, 14 ] ] }, { "id": "metadata/package/testing/presence/harness::spec-path-basename", "conf": 1.0, "crit": 1, "desc": "Spec path basename", "from": [ { "file": 16 } ], "spans": [ [ 0, 60 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File in a test directory", "from": [ { "file": 16 }, { "file": 17 }, { "file": 18 }, { "file": 19 }, { "file": 20 }, { "file": 21 }, { "file": 22 } ], "spans": [ [ 0, 97 ] ] }, { "id": "metadata/package/files/included::github-module-zip-basename", "conf": 0.8600000143051147, "crit": 1, "desc": "GitHub versioned zip filename", "spans": [ [ 0, 51 ] ] } ] }, { "id": 1, "sha": "b189d1d7cc2546a13055831bac749b11b5e0cce084e3180d0f789407e286b2e0", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/.github/workflows/ci.yml", "risk": 1, "size": 638, "type": "github_actions", "depth": 1 }, { "id": 2, "sha": "93fe91096728241340058f3775ccc5f6788877726979489ee4dde44b35aa3397", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/.github/workflows/lint.yml", "risk": 1, "size": 357, "type": "github_actions", "depth": 1 }, { "id": 3, "sha": "5aac47ba0fe51f705b48ea1612e43c6c68b12a62ffa281216ede1a596ad47581", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/LICENSE.txt", "risk": 1, "size": 1123, "type": "text", "depth": 1 }, { "id": 4, "sha": "06227de51bcb81dd99b23dd7f55c999a01ab50faa5992eca924eda668e235612", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/README.md", "risk": 1, "size": 3485, "type": "markdown", "depth": 1 }, { "id": 5, "sha": "9bebbfeb3f5a8cb970b3220b6b6ecf425d60a3d9330770d34628b31197bff294", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/bin/console", "risk": 1, "size": 315, "type": "ruby", "depth": 1 }, { "id": 6, "sha": "fd77ebc47e250cf86e1b7c2b7df7392ca8aae7e468b50a4f16a5549cf4bc602b", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/bin/setup", "risk": 1, "size": 74, "type": "shell", "depth": 1 }, { "id": 7, "sha": "1f2d1563575d740e16aa436674f425ade9a8afba52118f7886560b0bba63f58d", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop-thread_safety.rb", "risk": 1, "size": 452, "type": "ruby", "depth": 1 }, { "id": 8, "sha": "813c2a8ef495819758d83047082fc0cf3d4be1843879754b628a23104c8f3c83", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/cop/thread_safety/class_and_module_attributes.rb", "risk": 1, "size": 2116, "type": "ruby", "depth": 1 }, { "ctx": [ { "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwEn=Yz!a0bwGT([vSaRLA0^ZgzeS%cy?j.Rz/u4aarR!zz!a0bwGT@=A+eV\u0026q^\u003coHBA[ioarR^Har@0{C5I89azC.mByx5%wGVe8A+O@\u003ey?mVgx(k56y*?yaao", "n": [ { "c": 2, "d": "Source file has low overall entropy", "i": "metadata/file/metrics::low-overall-entropy-source", "o": 0, "z": 29, "cf": 0.8999999761581421 } ], "ln": 0, "col": 1, "line": 1 }, { "b": "v@bN{B0aF7wPwb2arR^Har@0KarR!qwO96awO+%hzF%Shw{C!szF0/o3lQDlarR^KarR^HarR^(x(mK3auZ\u0026\u003cvqGT*vru6ex(mK3dgdguarR^HboO9KarR^Hph+k*w[.", "n": [ { "c": 1, "d": "Notification-related notify or sender keyword", "i": "micro-behaviors/ui/window/notify/keywords::notification-config-word", "o": 217, "z": 6, "cf": 0.8600000143051147 } ], "ln": 185, "col": 11, "line": 10 }, { "b": "vlU(2q=C!sq!o\u0026Sph:VO3jm)#arR^HarR^HarU9gv}x.6z/NEuxLzo[A+fbvw[=pbBs}6wzeAZ0wiRg$wmYv!zE)f(wPRQ7wc%C4arR^HarR^HwO#2=arR^HarR^HwO#2=3lQDlarR^Hay]4}aAI*Cv}Y[3zFsAdwiRFWz!9Ad3lQDlarR^HarR!Az!9AivqYN^B98tvB1R6szE:(2zY\u003cBozEWm0Bz(hE3lQDlarR^HarR^Haz$+nBrCZzy?mWeao", "n": [ { "c": 3, "d": "Dynamic method definition", "i": "objectives/anti-static/obfuscation/eval/scripting::define-method", "o": 4615, "z": 13, "cf": 0.8999999761581421 } ], "ln": 4551, "col": 52, "line": 164 } ], "depth": 1, "facts": { "imp": [ [ "", "freeze" ], [ "", "def_node_matcher" ], [ "", "def_node_matcher" ], [ "", "class_method_definition?" ], [ "", "method_definition?" ], [ "", "synchronized?" ], [ "", "add_offense" ], [ "", "name" ], [ "", "loc" ], [ "", "instance_variable_call?" ], [ "", "class_method_definition?" ], [ "", "method_definition?" ], [ "", "synchronized?" ], [ "", "add_offense" ], [ "", "method_definition?" ], [ "", "in_defs?" ], [ "", "in_def_sclass?" ], [ "", "in_def_class_methods?" ], [ "", "in_def_module_function?" ], [ "", "singleton_method_definition?" ], [ "", "any?" ], [ "", "ancestors" ], [ "", "find" ], [ "", "ancestors" ], [ "", "any?" ], [ "", "ancestors" ], [ "", "in_def_class_methods_dsl?" ], [ "", "in_def_class_methods_module?" ], [ "", "any?" ], [ "", "ancestors" ], [ "", "block_type?" ], [ "", "is_a?" ], [ "", "first" ], [ "", "children" ], [ "", "command?" ], [ "", "first" ], [ "", "children" ], [ "", "find" ], [ "", "ancestors" ], [ "", "find" ], [ "", "ancestors" ], [ "", "include?" ], [ "", "type" ], [ "", "class_methods_module?" ], [ "", "find" ], [ "", "ancestors" ], [ "", "any?" ], [ "", "left_siblings" ], [ "", "module_function_bare_access_modifier?" ], [ "", "any?" ], [ "", "right_siblings" ], [ "", "module_function_for?" ], [ "", "method_name" ], [ "", "any?" ], [ "", "ancestors" ], [ "", "is_a?" ], [ "", "first" ], [ "", "children" ], [ "", "command?" ], [ "", "first" ], [ "", "children" ], [ "", "any?" ], [ "", "ancestors" ], [ "", "is_a?" ], [ "", "first" ], [ "", "children" ], [ "", "command?" ], [ "", "first" ], [ "", "children" ], [ "", "find" ], [ "", "ancestors" ], [ "", "block_type?" ], [ "", "first" ], [ "", "children" ], [ "", "send_type?" ], [ "", "last" ], [ "", "children" ], [ "", "instance_variable_set_call?" ], [ "", "instance_variable_get_call?" ], [ "", "respond_to?" ], [ "", "send_type?" ], [ "", "bare_access_modifier?" ], [ "", "method?" ], [ "", "to_sym" ], [ "", "to_sym" ], [ "", "def_node_matcher" ], [ "", "def_node_matcher" ] ], "mbr": [ "ancestor.block_type?", "ancestor.children", "ancestor.children.first", "ancestor.children.first.command?", "ancestor.children.first.is_a?", "ancestor.type", "arg_name.to_sym", "defn.ancestors", "defn.ancestors.any?", "defn.ancestors.find", "defn.left_siblings", "defn.left_siblings.any?", "defn.method_name", "defn.right_siblings", "defn.right_siblings.any?", "method_name.to_sym", "node.ancestors", "node.ancestors.any?", "node.ancestors.find", "node.bare_access_modifier?", "node.loc", "node.loc.name", "node.method?", "node.respond_to?", "node.send_type?", "s.children", "s.children.last", "s.send_type?" ], "tgt": [ "add_offense", "ancestors", "any?", "bare_access_modifier?", "block_type?", "children", "class_method_definition?", "class_methods_module?", "command?", "def_node_matcher", "find", "first", "freeze", "in_def_class_methods?", "in_def_class_methods_dsl?", "in_def_class_methods_module?", "in_def_module_function?", "in_def_sclass?", "in_defs?", "include?", "instance_variable_call?", "instance_variable_get_call?", "instance_variable_set_call?", "is_a?", "last", "left_siblings", "loc", "method?", "method_definition?", "method_name", "module_function_bare_access_modifier?", "module_function_for?", "name", "respond_to?", "right_siblings", "send_type?", "singleton_method_definition?", "synchronized?", "to_sym", "type" ], "metrics": { "ast": { "op.eq": 2.0, "op.lor": 7.0, "op.land": 3.0, "max_depth": 18.0, "op.concat": 59.0, "bind_count": 7.0, "call_count": 87.0, "node_count": 869.0, "member_count": 28.0, "op_density.eq": 0.0, "op_density.lor": 0.01, "op_density.land": 0.0, "identifier_count": 61.0, "member_depth_max": 4.0, "op_density.concat": 0.07, "string_literal_count": 7.0 }, "file": { "size": 5759.0, "entropy": 4.19, "size_bytes": 5759.0 }, "text": { "digit_ratio": 0.0, "space_count": 1807.0, "total_lines": 205.0, "char_entropy": 4.19, "unique_chars": 66.0, "string_density": 0.03, "avg_line_length": 27.09, "max_line_length": 98.0, "empty_line_ratio": 0.16, "last_line_length": 3.0, "whitespace_ratio": 0.35, "most_common_ratio": 0.08, "identifier_density": 0.99, "line_length_stddev": 21.69, "normalized_string_count": 0.49, "repeated_char_sequences": 58.0, "suspicious_string_ratio": 0.29, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 0.02, "max_inline_whitespace_run": 9.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.02, "normalized_unique_identifiers": 7.94 }, "binds": { "count": 7.0 }, "calls": { "count": 87.0 }, "binary": { "overall_entropy": 4.19, "peak_region_bytes": 3711.0, "peak_region_entropy": 4.48 }, "source": { "class_count": 4.0, "function_count": 15.0 }, "members": { "count": 28.0 }, "strings": { "total": 7.0, "avg_length": 60.57, "max_length": 86.0, "avg_entropy": 3.91, "total_bytes": 424.0, "entropy_stddev": 0.28, "embedded_code_candidates": 2.0 }, "comments": { "chars": 1077.0, "lines": 55.0, "total": 64.0, "to_code_ratio": 0.37, "empty_comments": 9.0, "high_entropy_comments": 1.0 }, "functions": { "count": 19.0 }, "identifiers": { "count": 61.0, "total": 202.0, "avg_length": 11.82, "max_length": 37.0, "min_length": 1.0, "avg_entropy": 2.82, "reuse_ratio": 0.3, "unique_count": 61.0, "length_stddev": 8.41, "sequential_names": 1.0, "single_char_count": 1.0, "single_char_ratio": 0.02, "high_entropy_count": 15.0, "high_entropy_ratio": 0.25, "all_lowercase_ratio": 0.43, "all_uppercase_ratio": 0.05 } } }, "id": 9, "mol": "O(As)", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/cop/thread_safety/instance_variable_in_class_method.rb", "pid": 13, "rel": "fetched", "risk": 1, "sha": "1c2e5f12bf3615ce5b9cfa10b63cc93d2fefc0c7b50c7cbc6c26f46a5bfd6fe0", "size": 5759, "traits": [ { "id": "objectives/anti-static/obfuscation/eval/scripting::define-method", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 3, "desc": "Dynamic method definition", "spans": [ [ 4615, 13 ] ] } ], "type": "ruby", "via": "https://rubygems.org/downloads/rubocop-thread_safety-0.5.1.gem" }, { "id": 10, "mol": "O(As)", "sha": "98f3765e93d9cef0b4a60ad3340db2fba72d1a04cad2d6d2815297fe722ce0e0", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/cop/thread_safety/mutable_class_instance_variable.rb", "risk": 1, "size": 8888, "type": "ruby", "depth": 1 }, { "id": 11, "sha": "d668155aa1207a42ab6352321fb0fbf0a5ce5de47b1e55aad2399fa1a6307c30", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/cop/thread_safety/new_thread.rb", "risk": 1, "size": 666, "type": "ruby", "depth": 1 }, { "id": 12, "sha": "d43f8a93fd1cf26d7cca09f2d3f9a45eb79d0fa891a47adebc8c51c241db0db4", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/thread_safety.rb", "size": 399, "type": "ruby", "depth": 1 }, { "id": 13, "sha": "2deb3a4cebe7d3ea01ef339a2708aa4406c77d428ac300ee66ebf31f2fe239f5", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/thread_safety/inject.rb", "risk": 1, "size": 819, "type": "ruby", "depth": 1 }, { "id": 14, "sha": "8f39478a6a0b8dff25a317dd0bef1ba7f08ab8462ab80777074ea555d25dceaa", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/lib/rubocop/thread_safety/version.rb", "risk": 1, "size": 100, "type": "ruby", "depth": 1 }, { "id": 15, "sha": "30c60b088c3fd6b70cc9e08af174d7c50e4f622a39d297cdba6add08652193f0", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/rubocop-thread_safety.gemspec", "risk": 1, "size": 1329, "type": "ruby", "depth": 1 }, { "id": 16, "sha": "d1d65264b9afb24c8d43f551be4ea1bbe830aa8d5e11930f598a6a57b8342a64", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/license_spec.rb", "risk": 1, "size": 508, "type": "ruby", "depth": 1 }, { "id": 17, "sha": "39940cd642c47d5e3a2b5419b9e01c8219d21af97865c20f6235f3afe86c2af9", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/rubocop/cop/thread_safety/class_and_module_attributes_spec.rb", "risk": 1, "size": 3616, "type": "ruby", "depth": 1 }, { "ctx": [ { "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwD", "n": [ { "c": 3, "d": "Recognized Python SSL-unverified marker", "i": "objectives/evasion/security-bypass/tls::python-ssl-unverified-recognized-marker", "o": 0, "z": 120, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 30 }, { "b": "qD4KCv\u003eIq6B7ol8vR3VWBZ/nRz/v-#lVl{8i-G^kwNPaFvp\u003c7)C@^#TzGx]dzEWlUvrc6\u003cvR/QEzBnkGB8$5!BzbP6efD#-z/ff3xcp-6", "ln": 3, "addr": 31 }, { "b": "arUxuaszhvxk8BewPz\u0026mvqWiaw[CQ(B7DFaz/M$eB8#5dzFs03aARJAvqWi4C42zlx(k54ay/j@B8@EvwPRQ7wg5HgzV", "n": [ { "c": 2, "d": "Contains frequent English function words", "i": "metadata/file/profile/language::lang-english", "o": 143, "z": 3, "cf": 0.800000011920929 } ], "ln": 4, "addr": 116 }, { "b": "arR^HwQ5f9v@#6@w[CQ(B7D:ZjBQgdlrL-", "ln": 5, "addr": 190 }, { "b": "arR^HqDl4^", "ln": 37, "addr": 986 }, { "b": "arUlkwb", "ln": 38, "addr": 995 }, { "b": "", "ln": 39, "addr": 1001 }, { "b": "arUxuaszhvxk8BewPz\u0026mzF{Uow[CQ(B7DFaz/M$eB8#5dzFs03ayPdgx)9{9azCZowmYv!zE)f(wPRQ7wg5HgzV", "n": [ { "c": 3, "d": "Dynamic method definition", "i": "objectives/anti-static/obfuscation/eval/scripting::define-method", "o": 1008, "z": 59, "cf": 0.8999999761581421 } ], "ln": 40, "addr": 1002 }, { "b": "arR^HwQ5f9v@#6}z^NA{w[t\u003e3wPGmZjBQgdlrL-", "ln": 41, "addr": 1072 }, { "b": "arR^HarUfgvrlGjraQb)", "ln": 42, "addr": 1104 }, { "b": "arR^HarR^HwmYu}B7Gf1e[OK4Bz(hBuU%v@xM4z", "ln": 43, "addr": 1121 }, { "b": "arR^HarR^HarUiaw[=c]uU%v@xM4Afi=/jRwNxp=BzbP6diJetaBFcpA:-*aD\u0026", "n": [ { "c": 3, "d": "Ruby defines methods dynamically", "i": "micro-behaviors/data/source/language::ruby-dynamic-method-definition", "o": 1163, "z": 26, "cf": 0.800000011920929 } ], "ln": 44, "addr": 1153 }, { "b": "arR^HarR^HarR^HkYydLvqQ6djS[YLA:-*a", "ln": 45, "addr": 1203 }, { "b": "arR^HarR^HarUlkwb", "ln": 46, "addr": 1232 }, { "b": "arR^HarR^HwO#2", "ln": 47, "addr": 1246 }, { "b": "arUlkwb", "ln": 220, "addr": 5963 }, { "b": "", "ln": 221, "addr": 5969 }, { "b": "arUxuaszhvxk8BewPz\u0026mzF{Uow[CQ(B7DFaz/M$mC42z#B7GCox(k57wObT]wNxp=BzbP6cM(@r", "n": [ { "c": 3, "d": "Dynamic method definition", "i": "objectives/anti-static/obfuscation/eval/scripting::define-method", "o": 5976, "z": 50, "cf": 0.8999999761581421 } ], "ln": 222, "addr": 5970 }, { "b": "arR^HwQ5f9v@#6}z^NA{w[t\u003e3wPGmZjBQgdlrL-", "ln": 223, "addr": 6031 }, { "b": "arR^HarUfgvrlGjraQb)", "ln": 224, "addr": 6063 } ], "depth": 1, "facts": { "imp": [ [ "", "describe" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "it" ], [ "", "expect_no_offenses" ] ], "mbr": [ "RSpec.describe" ], "tgt": [ "describe", "expect_no_offenses", "expect_offense", "it" ], "metrics": { "ast": { "max_depth": 9.0, "op.concat": 1.0, "call_count": 53.0, "node_count": 545.0, "member_count": 1.0, "identifier_count": 9.0, "member_depth_max": 2.0, "op_density.concat": 0.0, "string_literal_count": 52.0 }, "file": { "size": 8254.0, "entropy": 4.3, "size_bytes": 8254.0 }, "text": { "space_count": 2309.0, "total_lines": 317.0, "char_entropy": 4.3, "unique_chars": 60.0, "string_density": 0.16, "avg_line_length": 25.04, "max_line_length": 97.0, "empty_line_ratio": 0.1, "last_line_length": 3.0, "whitespace_ratio": 0.32, "most_common_ratio": 0.08, "identifier_density": 0.18, "line_length_stddev": 24.19, "normalized_string_count": 2.92, "repeated_char_sequences": 70.0, "suspicious_string_ratio": 0.69, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "normalized_unique_identifiers": 1.08 }, "calls": { "count": 53.0 }, "binary": { "overall_entropy": 4.3, "peak_region_bytes": 8192.0, "peak_region_entropy": 4.48 }, "members": { "count": 1.0 }, "strings": { "total": 52.0, "avg_length": 132.6, "max_length": 278.0, "avg_entropy": 3.84, "email_count": 16.0, "total_bytes": 6895.0, "entropy_stddev": 0.16, "embedded_code_candidates": 36.0 }, "comments": { "chars": 28.0, "lines": 1.0, "total": 1.0, "to_code_ratio": 0.0 }, "identifiers": { "count": 9.0, "total": 58.0, "avg_length": 10.89, "max_length": 29.0, "min_length": 2.0, "avg_entropy": 2.62, "reuse_ratio": 0.16, "unique_count": 9.0, "length_stddev": 8.09, "high_entropy_count": 1.0, "high_entropy_ratio": 0.11, "all_lowercase_ratio": 0.44 } } }, "id": 18, "mol": "O(As)H(Db)", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/rubocop/cop/thread_safety/instance_variable_in_class_method_spec.rb", "pid": 0, "risk": 2, "sha": "b5fb464c4cd0e32e1fbbaa7b69824610d7ea755d19ab821bc9b503abdfc3be0a", "size": 8254, "traits": [ { "id": "metadata/package/testing/presence/harness::spec-path-basename", "conf": 1.0, "crit": 1, "desc": "Spec path basename", "spans": [ [ 0, 78 ] ] }, { "id": "micro-behaviors/data/source/language::ruby-dynamic-method-definition", "conf": 0.800000011920929, "crit": 3, "desc": "Ruby defines methods dynamically", "spans": [ [ 1163, 26 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory", "spans": [ [ 0, 120 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/scripting::define-method", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 3, "desc": "Dynamic method definition", "spans": [ [ 1008, 59 ], [ 5976, 50 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File in a test directory", "spans": [ [ 0, 120 ] ] } ], "type": "ruby" }, { "ctx": [ { "b": "boQPsz*C#juVQsfx(mM\u003cy?X05A:-=BaARTDwD", "n": [ { "c": 3, "d": "Recognized Python SSL-unverified marker", "i": "objectives/evasion/security-bypass/tls::python-ssl-unverified-recognized-marker", "o": 0, "z": 118, "cf": 0.8999999761581421 } ], "ln": 1, "addr": 0 }, { "b": "", "ln": 2, "addr": 30 }, { "b": "qD4KCv\u003eIq6B7ol8vR3VWBZ/nRz/v-#lVl{8i-G^kwNPaFvp\u003c7)C@^#XB-.53y?k$IvrlGYzGx]dzEWlUvrc6\u003cvR/Qb", "ln": 3, "addr": 31 }, { "b": "arR^HarR^HarR^HarR^/v@Dl%x\u003eFM0zV", "ln": 4, "addr": 104 }, { "b": "arU-svrb{\u0026uUaE\u003cze:r5B08\u0026EB-.53y?j-cvRPE:BAn/Lwn-Prz*R", "ln": 17, "addr": 421 }, { "b": "arR^Hv@DmbwQ5qtcWflnzxJweB7]o8x(mMaCwhejau.7{wn.", "n": [ { "c": 2, "d": "Contains frequent English function words", "i": "metadata/file/profile/language::lang-english", "o": 492, "z": 4, "cf": 0.800000011920929 } ], "ln": 18, "addr": 464 }, { "b": "arR^HarUxuar\u003e\u0026qxk8BewPz\u0026mvqWiaw[CQ(B7DFaz/M%BDVarPvrlH7xkRo\u003eaARJAvix5@vrlGjx)9{9a%pAm", "ln": 19, "addr": 503 }, { "b": "arR^HarUxuuT^OWvrMj6uU\u003cB(wGSvmzeBAqvpB4:aA7.7wN/?6cOcw/tqmVKgf(m", "ln": 101, "addr": 2589 }, { "b": "arR^HwO#2", "ln": 102, "addr": 2641 }, { "b": "", "ln": 103, "addr": 2649 }, { "b": "arR^Hv@DmbwQ5qtcUWEtx\u003eg=$wmYv!zE)f(wPRQ7wg5HgzV", "n": [ { "c": 3, "d": "Dynamic method definition", "i": "objectives/anti-static/obfuscation/eval/scripting::define-method", "o": 2663, "z": 20, "cf": 0.8999999761581421 } ], "ln": 104, "addr": 2650 }, { "b": "arR^HarUGiBsog?A+e\u0026%CQT+Zar\u003erivrlGjraQb)tY7VbwmYv!zE)f(wPRQ7wgfGRvqPN8ay]ymaBK", "n": [ { "c": 3, "d": "Dynamic method definition", "i": "objectives/anti-static/obfuscation/eval/scripting::define-method", "o": 2710, "z": 37, "cf": 0.8999999761581421 } ], "ln": 105, "addr": 2688 }, { "b": "arR^HarUGiBsog\u003eB.kl1CQT+Zar?{JwO#3-zE)Y@a%qp", "ln": 106, "addr": 2751 }, { "b": "arR^HarUGiBsog:zE^r@BswtVaswoOarS3OEe", "ln": 107, "addr": 2787 }, { "b": "", "ln": 108, "addr": 2817 }, { "b": "arR^HarR^HarUxgay]4}x(mG)kpxALvSaRLA5{3Vvrc0(Bw^l\u003cC{%\u003c.ci", "ln": 256, "addr": 7542 }, { "b": "arR^HarR^HarR^Hax0t\u003ez:OCZiYZkGA+w%9qGVC]e]#eOAbP=swN]d\u003ewPz\u003caz/fRGx(mA%B.25Fc]rLgdf", "ln": 257, "addr": 7588 }, { "b": "arR^HarR^HarR^Hv@DmbwQ5qtcWflnzxK4mwGV86A+w%9aAzQlC{4owA=U@kzxIbaat+Y8cM(@r", "n": [ { "c": 1, "d": "Ruby interpreter keyword", "i": "micro-behaviors/process/interpreter/ruby::ruby-keyword", "o": 7691, "z": 4, "cf": 0.699999988079071 } ], "ln": 258, "addr": 7654 }, { "b": "arR^HarR^HarR^HarUGiBsog\u003cBZ/S6C4CYnx(v(raBtj/e?!z@", "ln": 259, "addr": 7715 }, { "b": "", "ln": 260, "addr": 7756 }, { "b": "arR^HarR^HarUxuuT^OWvrMj6uU\u003cB(wGSvmzeBAqvpB4:aA7.7wN/?6cOb", "ln": 426, "addr": 13722 }, { "b": "arR^HarR^HarR^HarR^HarR^HarR^HarS40z/f6cA=L-eBuhDZxMvV)wkEh.y^\u0026OWv%8)iAXqlvCpmxGBzkVhB15E", "n": [ { "c": 2, "d": "References to worker pools", "i": "micro-behaviors/process/create/workers::worker-pool", "o": 13808, "z": 10, "cf": 0.6000000238418579 } ], "ln": 427, "addr": 13769 }, { "b": "arR^HarR^HarUxuuT^OWvrMj6uU\u003cB(wGSvmzeBAqvpB4:aA7.7wN/?6cOb", "ln": 428, "addr": 13841 } ], "depth": 1, "facts": { "imp": [ [ "", "describe" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "join" ], [ "", "compact" ], [ "", "map" ], [ "", "split" ], [ "", "shared_examples" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "shared_examples" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "surround" ], [ "", "context" ], [ "", "context" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "each" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "surround" ], [ "", "context" ], [ "", "let" ], [ "", "let" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "context" ], [ "", "include?" ], [ "", "supported_versions" ], [ "", "context" ], [ "", "let" ], [ "", "context" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "let" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "surround" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "surround" ], [ "", "expect_correction" ], [ "", "context" ], [ "", "let" ], [ "", "each" ], [ "", "context" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "it_behaves_like" ], [ "", "context" ], [ "", "it" ], [ "", "expect_no_offenses" ], [ "", "context" ], [ "", "context" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "shared_examples" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "describe" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ], [ "", "it" ], [ "", "expect_offense" ], [ "", "expect_correction" ] ], "mbr": [ "RSpec.describe", "code.split", "code.split.map" ], "tgt": [ "compact", "context", "describe", "each", "expect_correction", "expect_no_offenses", "expect_offense", "include?", "it", "it_behaves_like", "join", "let", "map", "shared_examples", "split", "supported_versions", "surround" ], "metrics": { "ast": { "op.mul": 1.0, "op.land": 1.0, "max_depth": 31.0, "op.concat": 9.0, "call_count": 344.0, "node_count": 3858.0, "member_count": 3.0, "op_density.mul": 0.0, "op_density.land": 0.0, "identifier_count": 31.0, "member_depth_max": 3.0, "op_density.concat": 0.0, "string_literal_count": 362.0, "array_literal_max_length": 3.0 }, "file": { "size": 21745.0, "entropy": 4.36, "size_bytes": 21745.0 }, "text": { "digit_ratio": 0.02, "space_count": 7547.0, "total_lines": 668.0, "char_entropy": 4.36, "unique_chars": 82.0, "string_density": 0.54, "avg_line_length": 31.55, "max_line_length": 80.0, "empty_line_ratio": 0.16, "last_line_length": 3.0, "whitespace_ratio": 0.38, "most_common_ratio": 0.07, "identifier_density": 0.61, "line_length_stddev": 22.87, "normalized_string_count": 14.01, "repeated_char_sequences": 384.0, "suspicious_string_ratio": 0.06, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 4.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.03, "normalized_unique_identifiers": 3.3 }, "calls": { "count": 344.0 }, "binary": { "overall_entropy": 4.36, "peak_region_bytes": 13312.0, "peak_region_entropy": 4.56 }, "source": { "function_count": 1.0 }, "members": { "count": 3.0 }, "strings": { "total": 362.0, "avg_length": 31.13, "max_length": 182.0, "avg_entropy": 3.15, "email_count": 26.0, "empty_count": 1.0, "total_bytes": 11269.0, "entropy_stddev": 0.9, "embedded_code_candidates": 21.0 }, "comments": { "chars": 400.0, "lines": 37.0, "total": 37.0, "todo_count": 1.0, "to_code_ratio": 0.06 }, "functions": { "count": 1.0 }, "identifiers": { "count": 31.0, "total": 408.0, "avg_length": 8.19, "max_length": 28.0, "min_length": 1.0, "avg_entropy": 2.4, "reuse_ratio": 0.08, "unique_count": 31.0, "length_stddev": 6.07, "sequential_names": 1.0, "single_char_count": 1.0, "single_char_ratio": 0.03, "high_entropy_count": 1.0, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.77 } } }, "id": 19, "mol": "O(As)H(Db)", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/rubocop/cop/thread_safety/mutable_class_instance_variable_spec.rb", "pid": 0, "risk": 2, "sha": "7c1156e2e0857ac03f3d10d61b816bc64b262df01a79bd14119d1864b7f5eb33", "size": 21745, "traits": [ { "id": "metadata/package/testing/presence/harness::spec-path-basename", "conf": 1.0, "crit": 1, "desc": "Spec path basename", "spans": [ [ 0, 78 ] ] }, { "id": "micro-behaviors/data/source/language::ruby-dynamic-method-definition", "conf": 0.800000011920929, "crit": 3, "desc": "Ruby defines methods dynamically", "spans": [ [ 2724, 19 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory", "spans": [ [ 0, 118 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/scripting::define-method", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 3, "desc": "Dynamic method definition", "spans": [ [ 2663, 20 ], [ 2710, 37 ], [ 2722, 25 ] ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File in a test directory", "spans": [ [ 0, 118 ] ] } ], "type": "ruby" }, { "id": 20, "sha": "b242b24016c7fcd722a6dd20eeae63c636953e8de2cdb61f311cc9a643b88436", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/rubocop/cop/thread_safety/new_thread_spec.rb", "risk": 1, "size": 604, "type": "ruby", "depth": 1 }, { "id": 21, "sha": "f7ea40feba2dda342f216826697256db92436349d8c97900c0b3a8b258ac525c", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/rubocop/thread_safety_spec.rb", "risk": 1, "size": 169, "type": "ruby", "depth": 1 }, { "id": 22, "sha": "570d5baa195fd3b4fbd673add12de6e82ac3ab92ed24dddaa30a8ccb48bddb17", "path": "/data/samples/unknown/foraged/go/googleusercontent.com/pkg.go.dev/github.com/rubocop/rubocop-thread_safety/github.com-rubocop-rubocop-thread_safety-v0.5.1.zip!!github.com/rubocop/rubocop-thread_safety@v0.5.1/spec/spec_helper.rb", "risk": 1, "size": 841, "type": "ruby", "depth": 1 }, { "ctx": [ { "b": "abZy8B5FYb00zRpyJAYIMybBIZV4\u003c:WrJk=2#D\u003c+GY$)myIg3)tDjJ9L)NZ0uLlD3WlK.I", "n": [ { "c": 2, "d": "GZIP compressed file magic", "i": "metadata/file/magic/identity::gzip", "o": 0, "z": 8, "cf": 1.0 } ], "ln": 0 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 11081.0, "entropy": 7.98, "size_bytes": 11081.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.98, "peak_region_bytes": 11081.0, "peak_region_entropy": 7.84 }, "consistency": { "unused_runtime_deps": 0.0 } } }, "id": 23, "ident": { "name": { "value": "bundler", "source": "npm.name", "verified": false }, "urls": [ { "url": "https://github.com/mihaild/ybundler", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "emails": [ "mihail.dektyarow@gmail.com" ], "authors": [ { "name": "Mikhail Dektyarev", "role": "author", "email": "mihail.dektyarow@gmail.com", "source": "npm.author" } ], "version": { "value": "0.8.0", "source": "npm.version", "verified": false }, "identifier": { "value": "bundler", "source": "npm.name", "verified": false } }, "mol": "H(Db)Md₂(Pa₂)", "path": "bundler-0.8.0.tgz", "risk": 8, "sha": "14d358a78c779615af98fd62bbe6cf38a344650063fbdfd493010d0a2cc62008", "size": 11081, "traits": [ { "id": "micro-behaviors/data/source/dynamic/load::node-computed-require-call", "conf": 0.8799999952316284, "crit": 3, "desc": "Loads a computed module with Node.js require", "from": [ { "file": 5 } ] }, { "id": "metadata/package/testing/presence/harness::test-directory", "conf": 1.0, "crit": 2, "desc": "File in a test directory", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "objectives/anti-analysis/timing/jitter::js-subtraction-func-regex", "conf": 1.0, "crit": 1, "desc": "Function returning simple subtraction", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/string/split::js-split-call", "conf": 0.800000011920929, "crit": 1, "desc": "JavaScript split() method call", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/parse/vocabulary::auth-route-vocabulary", "conf": 0.8799999952316284, "crit": 1, "desc": "Four or more auth/login/session/token words", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::conventional-version-base", "conf": 1.0, "crit": 2, "desc": "Package version uses numeric SemVer format" }, { "id": "metadata/package/manifest/homepage::has-homepage-field", "conf": 0.800000011920929, "crit": 2, "desc": "Package has homepage URL" }, { "id": "objectives/anti-static/obfuscation/string/array::test-script-basename", "conf": 0.9800000190734863, "crit": 1, "desc": "Test script basename", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/os/random/prng/stdlib::math-random-call", "conf": 1.0, "crit": 2, "desc": "Calls Math.random()", "from": [ { "file": 4 } ] }, { "id": "metadata/package/quality/empty::npm-has-licenses-array", "conf": 0.8999999761581421, "crit": 3, "desc": "npm package uses legacy licenses array" }, { "id": "metadata/package/dependencies::has-dev-deps", "conf": 0.800000011920929, "crit": 1, "desc": "Package declares development dependencies" }, { "id": "micro-behaviors/data/control-flow/analysis::string-literal-equality-check", "conf": 0.9200000166893005, "crit": 1, "desc": "String literal equality or membership check", "from": [ { "file": 5 } ] }, { "id": "objectives/anti-static/obfuscation/string/encoding::js-array-join-symbol", "crit": 1, "desc": "Join using empty string delimiter", "from": [ { "file": 4 } ] }, { "id": "metadata/file/extension/identity::markdown-file-basename", "conf": 1.0, "crit": 1, "desc": "Markdown document file extension", "from": [ { "file": 6 } ] }, { "id": "metadata/file/profile/identity::sequential-identifiers", "conf": 0.800000011920929, "crit": 2, "desc": "Sequential source identifier names", "from": [ { "file": 4 } ] }, { "id": "metadata/library/runtime::js-module-exports", "conf": 1.0, "crit": 2, "desc": "Exports a JavaScript module", "from": [ { "file": 3 } ], "spans": [ [ 0, 15 ], [ 1674, 18 ], [ 27112, 24 ] ] }, { "id": "metadata/package/manifest/author/domain::npm-author-gmail", "atk": "T1195.002", "conf": 0.6499999761581421, "crit": 2, "desc": "npm package author uses Gmail" }, { "id": "metadata/package/testing/presence/harness::test-directory-path", "conf": 1.0, "crit": 1, "desc": "File is in common test directory", "from": [ { "file": 2 } ], "spans": [ [ 0, 38 ] ] }, { "id": "micro-behaviors/data/string/search::js-includes-indexof-call", "conf": 0.8199999928474426, "crit": 2, "desc": "Searches strings with includes or indexOf", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/scripted::js-require-binding", "conf": 0.4000000059604645, "crit": 1, "desc": "CommonJS require() binding declaration", "from": [ { "file": 2 } ], "spans": [ [ 443, 25 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call", "conf": 0.7200000286102295, "crit": 1, "desc": "JavaScript array sort call", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/encode/permutation/loop::js-permutation-loop", "conf": 0.8999999761581421, "crit": 2, "desc": "Contains nested JavaScript for loops", "from": [ { "file": 4 } ] }, { "id": "metadata/lang/scripted::undefined-literal", "conf": 1.0, "crit": 1, "desc": "JavaScript undefined literal", "from": [ { "file": 4 } ] }, { "id": "metadata/file/metrics::file-under-12-lines", "conf": 0.800000011920929, "crit": 1, "desc": "Very short file (under 12 lines)", "from": [ { "file": 7 } ], "spans": [ [ 0, 23 ] ] }, { "id": "metadata/file/profile/language::script-cyrillic", "conf": 0.800000011920929, "crit": 3, "desc": "Contains a Cyrillic script sequence", "from": [ { "file": 4 } ], "spans": [ [ 16, 10 ] ] }, { "id": "metadata/package/documentation::md-docs-javascript-code-fence", "conf": 0.8999999761581421, "crit": 2, "desc": "Markdown JavaScript code-fence marker", "from": [ { "file": 6 } ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 4 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/runtime-indirection::computed-call-property-access-ast", "atk": "", "mbc": "", "conf": 0.949999988079071, "crit": 2, "desc": "Computed property access through decoder calls" }, { "id": "metadata/package/dependencies::has-runtime-deps", "conf": 0.8500000238418579, "crit": 1, "desc": "Package has runtime dependencies" }, { "id": "metadata/package/config::short-sidecar-file", "conf": 0.800000011920929, "crit": 1, "desc": "Short sidecar-sized source", "from": [ { "file": 7 } ], "spans": [ [ 0, 23 ] ] }, { "id": "metadata/package/quality/empty::npm-has-maintainers", "conf": 1.0, "crit": 1, "desc": "npm package has maintainers field" }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.8500000238418579, "crit": 1, "desc": "File is a test or type-declaration source file", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "metadata/lang/scripted::length-prop", "conf": 1.0, "crit": 1, "desc": "References the JavaScript .length property", "from": [ { "file": 4 } ] }, { "id": "metadata/package/manifest/freeform::minimal-cli-stub", "conf": 0.8999999761581421, "crit": 1, "desc": "Tiny package.json with declared CLI binary", "from": [ { "file": 1 } ] }, { "id": "metadata/file/metrics::tiny-javascript-file-lines", "conf": 0.8999999761581421, "crit": 1, "desc": "Tiny JavaScript file lines", "from": [ { "file": 7 } ] }, { "id": "micro-behaviors/communications/url/encoded::encoded-url-benign-context", "atk": "T1027", "mbc": "B0032", "conf": 0.949999988079071, "crit": 1, "desc": "Encoded URL benign documentation or test context", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "metadata/lang/scripted::require-symbol", "conf": 1.0, "crit": 1, "desc": "CommonJS require symbol", "from": [ { "file": 7 } ] }, { "id": "metadata/file/metrics::js-readable-source-context", "conf": 0.8999999761581421, "crit": 1, "desc": "Readable JavaScript source context", "from": [ { "file": 3 } ], "spans": [ [ 0, 28 ] ] }, { "id": "objectives/exfiltration/serialization::javascript-test-harness-path", "conf": 1.0, "crit": 2, "desc": "JavaScript test harness path", "from": [ { "file": 2 } ], "spans": [ [ 0, 38 ] ] }, { "id": "metadata/file/metrics::javascript-small-file-5k", "conf": 0.699999988079071, "crit": 1, "desc": "JavaScript file under 5KB", "from": [ { "file": 7 } ], "spans": [ [ 0, 38 ] ] }, { "id": "metadata/file/metrics::tiny-javascript-file-size", "conf": 0.8999999761581421, "crit": 1, "desc": "Tiny JavaScript file size", "from": [ { "file": 8 } ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-property-call", "conf": 0.8199999928474426, "crit": 2, "desc": "Calls a property using bracket notation", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/process/info/commandline::check-argv", "conf": 0.800000011920929, "crit": 2, "desc": "Reads Node.js arguments through process.argv", "from": [ { "file": 7 } ] }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "package.json defines a package name" }, { "id": "metadata/package/testing/harness/runtime::is-test", "conf": 0.8999999761581421, "crit": 2, "desc": "Test, spec, or fixture file", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "micro-behaviors/os/console/io::js-console-object", "conf": 1.0, "crit": 1, "desc": "References the JavaScript console object", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/string/concat::array-join-empty-separator-text", "conf": 0.7799999713897705, "crit": 1, "desc": "Array expression joined without separator", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/source/dynamic/load::node-dynamic-require-call", "conf": 0.8199999928474426, "crit": 3, "desc": "Node dynamic require call", "from": [ { "file": 5 } ] }, { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 1, "desc": "Common web or JSON file extension", "from": [ { "file": 2 } ], "spans": [ [ 0, 9 ] ] }, { "id": "metadata/file/extension/identity::javascript-source-extension", "conf": 1.0, "crit": 1, "desc": "JavaScript source filename extension", "from": [ { "file": 2 } ], "spans": [ [ 0, 9 ] ] }, { "id": "metadata/package/testing/presence/fixture::test-filename-pattern", "conf": 0.6000000238418579, "crit": 2, "desc": "Common test filename pattern", "from": [ { "file": 2 } ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.949999988079071, "crit": 1, "desc": "Filename is package.json", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/description::has-description", "conf": 0.75, "crit": 2, "desc": "Package has meaningful description" }, { "id": "metadata/file/invisible-unicode::benign-invisible-unicode-text-context", "atk": "T1027", "conf": 0.8500000238418579, "crit": 1, "desc": "Benign invisible Unicode source text", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "metadata/package/manifest/entrypoint::main-runtime-tree-entrypoint", "conf": 0.8500000238418579, "crit": 2, "desc": "Package main targets runtime tree" }, { "id": "micro-behaviors/data/control-flow/analysis::for-loop-content", "conf": 0.30000001192092896, "crit": 2, "desc": "for loop (content)", "from": [ { "file": 4 } ] }, { "id": "metadata/file/profile/identity::install-doc-basename", "conf": 0.8500000238418579, "crit": 1, "desc": "Installation documentation basename", "from": [ { "file": 6 } ] }, { "id": "metadata/lang/scripted::plain-js-identifier-assignment", "conf": 1.0, "crit": 1, "desc": "Plain JavaScript identifier assignment", "from": [ { "file": 4 } ], "spans": [ [ 8, 13 ], [ 1748, 28 ] ] }, { "id": "metadata/package/quality/empty::npm-no-keywords", "crit": 2, "desc": "package.json has no keywords" }, { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.8999999761581421, "crit": 1, "desc": "File has 30 or more lines", "from": [ { "file": 2 } ], "spans": [ [ 0, 25 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.8500000238418579, "crit": 1, "desc": "JavaScript empty-string accumulator initializer" }, { "id": "metadata/lang/javascript-features::cjs-exports-pattern", "conf": 0.6000000238418579, "crit": 3, "desc": "Defines CommonJS named exports", "from": [ { "file": 3 } ], "spans": [ [ 1673, 19 ] ] }, { "id": "micro-behaviors/os/telemetry/logging/llm::console-log-json-stringify-call", "mbc": "C0069", "conf": 0.8600000143051147, "crit": 1, "desc": "Console logs JSON stringified payload", "from": [ { "file": 4 } ] }, { "id": "metadata/package/config::small-sidecar-file", "conf": 0.800000011920929, "crit": 1, "desc": "Small sidecar-sized file", "from": [ { "file": 7 } ] }, { "id": "metadata/package/maintainers::npm-no-maintainers", "atk": "T1195.002", "conf": 0.800000011920929, "crit": 3, "desc": "npm package lacks maintainers field" }, { "id": "micro-behaviors/process/fd/stdio::stdout-string", "conf": 0.30000001192092896, "crit": 2, "desc": "References the stdout stream name", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/fs/path/extension::js-reference", "conf": 0.699999988079071, "crit": 1, "desc": "JavaScript extension reference", "from": [ { "file": 7 } ], "spans": [ [ 468, 17 ] ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.949999988079071, "crit": 2, "desc": "Manifest sits at npm publish root", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/source::js-test-or-spec-basename", "conf": 0.8999999761581421, "crit": 2, "desc": "JavaScript test spec basename", "from": [ { "file": 2 } ] }, { "id": "metadata/package/testing/presence/harness::tests-path-basename", "conf": 1.0, "crit": 1, "desc": "Tests path basename", "from": [ { "file": 2 } ] }, { "id": "objectives/anti-static/obfuscation/eval/loader::indexed-decoder-stage-call", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "Indexed alias calls nested decoder stage", "from": [ { "file": 4 } ] }, { "id": "metadata/package/testing/presence/harness::tests-path-filename", "conf": 0.8500000238418579, "crit": 1, "desc": "File path or name indicates test code", "from": [ { "file": 2 } ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.8999999761581421, "crit": 1, "desc": "Low string density in source", "from": [ { "file": 4 } ] }, { "id": "metadata/package/quality/profile::has-tests", "crit": 2, "desc": "Embedded test-code markers present", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "metadata/package/testing/presence/harness::test-spec-path-benign-context", "conf": 1.0, "crit": 1, "desc": "Test or spec path context", "from": [ { "file": 2 }, { "file": 3 } ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-call", "crit": 2, "desc": "Calls JSON.stringify()", "from": [ { "file": 4 } ] }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "package.json defines a package version" }, { "id": "metadata/file/string/file::tmp", "conf": 0.20000000298023224, "crit": 1, "desc": "tmp keyword", "from": [ { "file": 4 } ] }, { "id": "metadata/file/metrics::script-peak-region-over-1k", "conf": 0.800000011920929, "crit": 1, "desc": "Peak-entropy source region exceeds 1KB", "from": [ { "file": 2 } ], "spans": [ [ 0, 35 ] ] }, { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "File uses a document or configuration extension", "from": [ { "file": 6 } ] }, { "id": "metadata/package/testing/presence/harness::pkg-build-or-test-helper-script", "conf": 0.949999988079071, "crit": 2, "desc": "Packaging build or test helper script", "from": [ { "file": 2 }, { "file": 3 } ], "spans": [ [ 0, 38 ] ] }, { "id": "micro-behaviors/data/buffer::array-index-i", "conf": 0.699999988079071, "crit": 1, "desc": "Array index i access", "from": [ { "file": 4 } ] }, { "id": "metadata/file/metrics::few-comment-lines", "crit": 1, "desc": "Five or fewer comment lines in file", "from": [ { "file": 5 } ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::author-retained-original", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.699999988079071, "crit": 1, "desc": "author retained original" }, { "id": "metadata/lang/source::js-ts-source-basename", "conf": 0.949999988079071, "crit": 2, "desc": "JavaScript or TypeScript source filename", "from": [ { "file": 2 } ], "spans": [ [ 0, 9 ] ] }, { "id": "metadata/package/config::vscode-contributes-absent", "conf": 0.8999999761581421, "crit": 1, "desc": "Manifest has no contributes section" }, { "id": "micro-behaviors/data/source/property/computed::js-computed-property-alias", "conf": 0.75, "crit": 2, "desc": "Binds computed property to variable", "from": [ { "file": 4 } ], "spans": [ [ 1182, 33 ] ] }, { "id": "micro-behaviors/data/encode/permutation/nested::js-nested-index-array-write", "conf": 0.8500000238418579, "crit": 1, "desc": "Computed-index array element write", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-empty-join-call", "conf": 0.7200000286102295, "crit": 1, "desc": "JavaScript array empty join call", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/source/prototype::js-path-split-single", "conf": 0.800000011920929, "crit": 2, "desc": "Dot path splitting single quote", "from": [ { "file": 5 } ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "from": [ { "file": 7 } ], "spans": [ [ 0, 29 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/loader::temp-var-array-swap", "atk": "T1027", "mbc": "B0032", "conf": 0.8600000143051147, "crit": 1, "desc": "Temp variable array swap", "from": [ { "file": 4 } ] }, { "id": "metadata/package/documentation::package-doc-reference-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Package documentation basename", "from": [ { "file": 6 } ] }, { "id": "metadata/package/files/included::archive-container-path", "conf": 0.949999988079071, "crit": 2, "desc": "Archive container path", "spans": [ [ 0, 17 ] ] }, { "id": "metadata/file/magic/identity::gzip", "conf": 1.0, "crit": 2, "desc": "GZIP compressed file magic", "spans": [ [ 0, 8 ] ] }, { "id": "metadata/file/metrics::npm-compressed-wrapper-parse-error", "conf": 0.949999988079071, "crit": 2, "desc": "npm gzip wrapper parse error", "spans": [ [ 0, 24 ] ] }, { "id": "metadata/package/files/included::npm-runtime-code-member", "conf": 0.949999988079071, "crit": 2, "desc": "npm archive ships runtime-tree code" }, { "id": "metadata/package/files/included::wheel-lacks-start-shell", "conf": 0.8999999761581421, "crit": 1, "desc": "Wheel has no start.sh launcher member" }, { "id": "metadata/build/archive::archive-native-bin-dir-entry", "conf": 0.8399999737739563, "crit": 1, "desc": "Member under bin/native/prebuilds dir" } ], "type": "npm" }, { "id": 24, "mol": "H(Db)", "sha": "218757c8e6cff73b0cf136f6766333d9396ae5fbacd1a0ecbe568975374f08d3", "path": "bundler-0.8.0.tgz!!package/lib/bundler.js", "risk": 2, "size": 3147, "type": "javascript", "depth": 3 }, { "id": 25, "mol": "Md", "sha": "3e9f2fd1ef647fda51787ea403cff53529496cd071773cdf5c8f30d9be39c0af", "path": "bundler-0.8.0.tgz!!package/lib/generators.js", "risk": 1, "size": 27219, "type": "javascript", "depth": 3 }, { "id": 26, "mol": "K(Am)", "sha": "ee75eca41b50bbf92ef2cb01cf4609afe5fd89efaba602bd5fe5e413ea4aa90e", "path": "bundler-0.8.0.tgz!!package/tests/data_for_bundle_all_1.js", "risk": 2, "size": 659, "type": "javascript", "depth": 3 }, { "id": 27, "mol": "K(Am)", "sha": "4d1a6fb17524ec31dfaca42937bdc192d795ce157665dd18eb5fe0703d55a00b", "path": "bundler-0.8.0.tgz!!package/tests/test.js", "risk": 2, "size": 1147, "type": "javascript", "depth": 3 }, { "id": 28, "mol": "Md(Pa₂)", "sha": "6280ca836799ff9eb8515b8fd99b5a6cd999fb280cefc0e816d9606d21ad5150", "path": "bundler-0.8.0.tgz!!package/package.json", "risk": 2, "size": 698, "type": "package.json", "depth": 3 }, { "id": 29, "mol": "Md", "sha": "f29c0e55e1a7a70a9f8b8cc2a81935579b397ad95d32705566ec0c238442ff8f", "path": "bundler-0.8.0.tgz!!package/README.md", "risk": 1, "size": 7922, "type": "markdown", "depth": 3 }, { "id": 30, "sha": "c7029e1d4c1884bba7e151175d8bb95987f13666e44ce6957dc71a3adbee8f9e", "path": "bundler-0.8.0.tgz!!package/bin/bundler", "risk": 1, "size": 84, "type": "javascript", "depth": 3 }, { "id": 31, "sha": "e85dcf66e26010c87d85a30062896977697b2a3bf7a810786aa63058c774f9a8", "path": "bundler-0.8.0.tgz!!package/lib/config.js", "risk": 1, "size": 101, "type": "javascript", "depth": 3 }, { "ctx": [ { "b": "abZy80000000zRptu-4bW=\u0026hl\u003c9r^vIL[!M4-R)]NsMI0NVF2a\u003e-uts(d(OTR)3Mc-jgh{", "n": [ { "c": 2, "d": "GZIP compressed file magic", "i": "metadata/file/magic/identity::gzip", "o": 0, "z": 8, "cf": 1.0 } ], "ln": 0 } ], "depth": 2, "facts": { "metrics": { "file": { "size": 16197.0, "entropy": 7.98, "size_bytes": 16197.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.98, "peak_region_bytes": 16197.0, "peak_region_entropy": 7.84 }, "consistency": { "unused_runtime_deps": 0.0 } } }, "id": 32, "ident": { "name": { "value": "pry", "source": "npm.name", "verified": false }, "urls": [ { "url": "https://github.com/thisredone/pry.js", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://github.com/thisredone/pry.js", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "authors": [ { "name": "thisredone", "role": "author", "source": "npm.author" } ], "version": { "value": "0.8.12", "source": "npm.version", "verified": false }, "identifier": { "value": "pry", "source": "npm.name", "verified": false } }, "mol": "H₄(DbF₄OsPo₃)Md₂(LiPa₂)", "path": "pry-0.8.12.tgz", "refs": [ { "to": "pkg:github/thisredone/pry.js", "off": 0, "kind": "repository" } ], "risk": 15, "sha": "4f20faf542314abfb81da8a13d43aa1402791c944f208dd989c1d263bb14ec42", "size": 16197, "traits": [ { "id": "micro-behaviors/data/source/property/computed::js-computed-property-call", "conf": 0.8199999928474426, "crit": 2, "desc": "Calls a property using bracket notation", "from": [ { "file": 16 } ], "spans": [ [ 762, 28 ] ] }, { "id": "metadata/lang/scripted::length-prop", "conf": 1.0, "crit": 1, "desc": "References the JavaScript .length property", "from": [ { "file": 3 } ] }, { "id": "metadata/import/builtin::require-fs", "conf": 0.699999988079071, "crit": 2, "desc": "Imports the Node.js fs module", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/communications/url/encoded::encoded-url-public-doc-context", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "Encoded URL public documentation", "from": [ { "file": 9 } ] }, { "id": "metadata/package/versioning::npm-has-version", "conf": 1.0, "crit": 2, "desc": "package.json defines a package version" }, { "id": "metadata/lang/scripted::startswith-method", "conf": 1.0, "crit": 1, "desc": "JavaScript startsWith method", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/data/control-flow/analysis::string-literal-equality-check", "conf": 0.9200000166893005, "crit": 1, "desc": "String literal equality or membership check", "from": [ { "file": 16 } ], "spans": [ [ 441, 13 ], [ 1135, 8 ], [ 2238, 14 ], [ 3449, 11 ], [ 5417, 13 ] ] }, { "id": "metadata/package/license::mit-license-text", "conf": 0.800000011920929, "crit": 2, "desc": "MIT License text", "from": [ { "file": 11 } ] }, { "id": "metadata/package/quality/profile::try-catch-handling", "conf": 0.699999988079071, "crit": 2, "desc": "Try/catch error handling patterns", "from": [ { "file": 16 }, { "file": 20 } ] }, { "id": "metadata/package/quality/recognized-contexts::mdn-date-reference-api", "conf": 1.0, "crit": 3, "desc": "References MDN documentation for Date.prototype", "from": [ { "file": 9 } ] }, { "id": "metadata/package/manifest/description::has-description", "conf": 0.75, "crit": 2, "desc": "Package has meaningful description" }, { "id": "metadata/lang/scripted::undefined-literal", "conf": 1.0, "crit": 1, "desc": "JavaScript undefined literal", "from": [ { "file": 20 } ] }, { "id": "metadata/package/manifest/homepage::has-homepage-field", "conf": 0.800000011920929, "crit": 2, "desc": "Package has homepage URL" }, { "id": "metadata/package/error-handling::finally-keyword", "crit": 2, "desc": "Contains a finally cleanup handler", "from": [ { "file": 20 } ] }, { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 1, "desc": "Common web or JSON file extension", "from": [ { "file": 1 } ], "spans": [ [ 0, 11 ] ] }, { "id": "micro-behaviors/os/env/vars/access::node-home-access", "conf": 0.8999999761581421, "crit": 3, "desc": "Node reads HOME directory environment variable", "from": [ { "file": 6 } ] }, { "id": "metadata/package/config::vscode-contributes-absent", "conf": 0.8999999761581421, "crit": 1, "desc": "Manifest has no contributes section" }, { "id": "micro-behaviors/os/console/io::js-console-object", "conf": 1.0, "crit": 1, "desc": "References the JavaScript console object", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/data/serialize/json::json-parse-call", "crit": 2, "desc": "Calls JSON.parse()", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-call", "crit": 2, "desc": "Calls JSON.stringify()", "from": [ { "file": 22 } ] }, { "id": "micro-behaviors/data/manipulation::string-replace-call", "conf": 0.800000011920929, "crit": 2, "desc": "Calls a string replacement method", "from": [ { "file": 6 } ] }, { "id": "metadata/file/extension/identity::markdown-file-basename", "conf": 1.0, "crit": 1, "desc": "Markdown document file extension", "from": [ { "file": 25 } ], "spans": [ [ 0, 12 ] ] }, { "id": "objectives/anti-static/obfuscation/eval/loader::nested-decoder-call", "atk": "T1027", "mbc": "B0032", "conf": 0.8799999952316284, "crit": 1, "desc": "Nested decoder call feeds stage builder", "from": [ { "file": 23 } ], "spans": [ [ 8033, 22 ] ] }, { "id": "micro-behaviors/communications/url/encoded::encoded-url-benign-context", "atk": "T1027", "mbc": "B0032", "conf": 0.949999988079071, "crit": 1, "desc": "Encoded URL benign documentation or test context", "from": [ { "off": 2338, "file": 9, "line": 63 } ] }, { "id": "metadata/package/documentation::package-doc-reference-basename", "conf": 0.8999999761581421, "crit": 1, "desc": "Package documentation basename", "from": [ { "file": 25 } ] }, { "id": "metadata/library/runtime::js-module-exports", "conf": 1.0, "crit": 2, "desc": "Exports a JavaScript module", "from": [ { "file": 9 } ] }, { "id": "metadata/file/profile/identity::documentation-page-term", "conf": 0.8199999928474426, "crit": 1, "desc": "Documentation page terminology", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/fs/write/stream::open-method-call", "conf": 1.0, "crit": 1, "desc": "Calls an object's open() method", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/backdoor/proxy/mcp::stdin-line-handler", "atk": "T1557", "conf": 0.6000000238418579, "crit": 1, "desc": "Handles stdin lines via event", "from": [ { "file": 6 } ] }, { "id": "objectives/anti-static/obfuscation/string/encoding::js-array-join-symbol", "crit": 1, "desc": "Join using empty string delimiter", "from": [ { "file": 6 } ] }, { "id": "objectives/command-and-control/reverse-shell/dup::cmd-exe-string", "atk": "T1059", "conf": 0.75, "crit": 1, "desc": "cmd.exe shell string", "from": [ { "file": 9 } ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-max-string-length-short", "conf": 0.800000011920929, "crit": 1, "desc": "JavaScript strings capped at five", "from": [ { "file": 3 } ] }, { "id": "metadata/lang/scripted::js-export-boundary", "crit": 1, "desc": "JS module export syntax", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/directory/traverse::traverse-readdir-walk-find", "conf": 0.8500000238418579, "crit": 2, "desc": "Traverses directories using common APIs", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/buffer::array-index-i", "conf": 0.699999988079071, "crit": 1, "desc": "Array index i access", "from": [ { "file": 3 } ] }, { "id": "metadata/package/files/included::package-json-basename", "conf": 0.949999988079071, "crit": 1, "desc": "Filename is package.json", "from": [ { "file": 10 } ] }, { "id": "metadata/package/quality/empty::npm-has-name", "conf": 1.0, "crit": 2, "desc": "package.json defines a package name" }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.8500000238418579, "crit": 2, "desc": "package.json declares a repository URL" }, { "id": "micro-behaviors/data/control-flow/module-exec::js-trailing-iife-closure", "conf": 0.8500000238418579, "crit": 1, "desc": "JavaScript file ends with an IIFE", "from": [ { "file": 1 } ], "spans": [ [ 2575, 5 ] ] }, { "id": "metadata/file/extension/identity::json-extension", "conf": 0.30000001192092896, "crit": 1, "desc": "JSON file extension", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/fs/file/binary::file-manipulation", "conf": 0.75, "crit": 3, "desc": "File content manipulation (read/write/seek)", "from": [ { "off": 787, "file": 4, "line": 21 }, { "off": 1234, "file": 5, "line": 44 }, { "off": 4658, "file": 6, "line": 159 } ], "spans": [ [ 1234, 15 ] ] }, { "id": "micro-behaviors/fs/path/construct::script-dirname-ref", "conf": 0.6000000238418579, "crit": 1, "desc": "References script directory path", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/string/recovery::chained-replace-calls", "conf": 0.8999999761581421, "crit": 1, "desc": "Chained string replacement calls", "from": [ { "file": 9 } ] }, { "id": "metadata/package/manifest/entrypoint::main-runtime-tree-entrypoint", "conf": 0.8500000238418579, "crit": 2, "desc": "Package main targets runtime tree" }, { "id": "micro-behaviors/fs/file/read::package-json-path-reference", "conf": 0.8399999737739563, "crit": 1, "desc": "References a package.json path", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/string/concat::array-join-empty-separator-text", "conf": 0.7799999713897705, "crit": 1, "desc": "Array expression joined without separator", "from": [ { "file": 6 } ] }, { "id": "metadata/file/extension/identity::doc-or-config-extension", "conf": 1.0, "crit": 1, "desc": "File uses a document or configuration extension", "from": [ { "file": 25 } ], "spans": [ [ 0, 12 ] ] }, { "id": "metadata/file/extension/identity::javascript-source-extension", "conf": 1.0, "crit": 1, "desc": "JavaScript source filename extension", "from": [ { "file": 1 } ], "spans": [ [ 0, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/eval::js-eval-variable-text", "atk": "T1059.007", "conf": 0.8999999761581421, "crit": 3, "desc": "Calls eval() with an identifier argument" }, { "id": "objectives/anti-static/obfuscation/eval/dynamic::loader-iife-tail", "conf": 0.8500000238418579, "crit": 1, "desc": "Loader IIFE follows dynamic loader code", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/path/extension::exe-dup", "crit": 2, "desc": "References a Windows .exe filename or extension", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/communications/url/encoded::js-commented-url-line-context", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "JavaScript comment contains a URL", "from": [ { "file": 9 } ] }, { "id": "metadata/package/dependencies::has-dev-deps", "conf": 0.800000011920929, "crit": 1, "desc": "Package declares development dependencies" }, { "id": "micro-behaviors/data/control-flow/analysis::for-loop-content", "conf": 0.30000001192092896, "crit": 2, "desc": "for loop (content)", "from": [ { "file": 3 } ] }, { "id": "micro-behaviors/data/source/prototype::js-proto-guard-proto", "conf": 0.8999999761581421, "crit": 2, "desc": "Quoted __proto__ key check", "from": [ { "file": 20 } ] }, { "id": "metadata/package/scripts::has-build-script-build", "conf": 0.699999988079071, "crit": 2, "desc": "Package declares build script" }, { "id": "metadata/file/metrics::js-readable-source-context", "conf": 0.8999999761581421, "crit": 1, "desc": "Readable JavaScript source context", "from": [ { "file": 1 } ], "spans": [ [ 0, 28 ] ] }, { "id": "micro-behaviors/data/string/search::js-includes-indexof-call", "conf": 0.8199999928474426, "crit": 2, "desc": "Searches strings with includes or indexOf", "from": [ { "file": 3 } ], "spans": [ [ 1611, 9 ] ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.8999999761581421, "crit": 1, "desc": "Low string density in source", "from": [ { "file": 16 } ], "spans": [ [ 0, 26 ] ] }, { "id": "metadata/package/scripts::has-test-script", "conf": 1.0, "crit": 1, "desc": "package.json declares a test script" }, { "id": "micro-behaviors/fs/write/file/direct::append-file-async", "conf": 0.800000011920929, "crit": 3, "desc": "Appends to file asynchronously", "from": [ { "file": 6 } ] }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "Package declares a build script" }, { "id": "micro-behaviors/fs/file/read::read-node", "conf": 0.8999999761581421, "crit": 3, "desc": "Reads files with Node.js", "from": [ { "file": 5 } ] }, { "id": "micro-behaviors/data/string/split::js-split-call", "conf": 0.800000011920929, "crit": 1, "desc": "JavaScript split() method call", "from": [ { "file": 5 } ], "spans": [ [ 838, 16 ], [ 974, 22 ], [ 1492, 13 ], [ 1665, 21 ], [ 2204, 17 ], [ 4751, 10 ] ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "Contains common English function words", "from": [ { "file": 11 } ], "spans": [ [ 26, 3 ], [ 249, 3 ], [ 300, 4 ] ] }, { "id": "micro-behaviors/process/interpreter/eval::js-eval-raw", "conf": 0.699999988079071, "crit": 3, "desc": "Executes JavaScript dynamically with eval()", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.8500000238418579, "crit": 1, "desc": "JavaScript empty-string accumulator initializer" }, { "id": "metadata/package/testing/harness/runtime::joyent-copyright", "conf": 1.0, "crit": 2, "desc": "Joyent copyright header Node.js", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/fs/file/read::readfilesync-call", "conf": 0.8999999761581421, "crit": 3, "desc": "Calls readFileSync", "from": [ { "file": 4 } ], "spans": [ [ 1234, 15 ] ] }, { "id": "micro-behaviors/fs/file/read::read-package-relative-file", "conf": 0.8799999952316284, "crit": 2, "desc": "Reads a package-relative file", "from": [ { "file": 4 } ] }, { "id": "objectives/execution/interpreter/eval/dynamic::code-bearing-object-field-reference", "conf": 0.8799999952316284, "crit": 1, "desc": "References an object script or code field", "from": [ { "file": 16 } ] }, { "id": "metadata/package/error-handling::catch-keyword", "crit": 2, "desc": "Contains a catch error handler", "from": [ { "file": 16 } ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-empty-join-call", "conf": 0.7200000286102295, "crit": 1, "desc": "JavaScript array empty join call", "from": [ { "file": 16 } ], "spans": [ [ 1124, 11 ], [ 1153, 11 ], [ 1233, 10 ], [ 6533, 9 ] ] }, { "id": "metadata/file/metrics::script-peak-region-over-1k", "conf": 0.800000011920929, "crit": 1, "desc": "Peak-entropy source region exceeds 1KB", "from": [ { "file": 13 } ], "spans": [ [ 0, 34 ] ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.949999988079071, "crit": 2, "desc": "Manifest sits at npm publish root", "from": [ { "file": 10 } ] }, { "id": "micro-behaviors/data/control-flow/loop::javascript-infinite-loop-metric", "conf": 1.0, "crit": 2, "desc": "JavaScript contains an infinite loop", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/data/control-flow/loop::infinite-loop-header", "conf": 1.0, "crit": 2, "desc": "Contains an unconditional loop header", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/process/create/load/remote-code::js-dom-script-literal", "atk": "T1105", "conf": 0.800000011920929, "crit": 1, "desc": "Script string literal", "from": [ { "file": 12 } ], "spans": [ [ 64, 12 ], [ 406, 10 ], [ 1687, 42 ] ] }, { "id": "micro-behaviors/ui/terminal::ansi-csi-escape", "conf": 0.8600000143051147, "crit": 1, "desc": "ANSI CSI escape prefix in text", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/data/encode/tostring::tostring-call", "conf": 1.0, "crit": 1, "desc": ".toString() method call", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/source/prototype::js-proto-guard-constructor", "conf": 0.8999999761581421, "crit": 2, "desc": "Quoted constructor key check", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/os/env/access::javascript", "conf": 0.800000011920929, "crit": 2, "desc": "Access environment variables", "from": [ { "file": 16 } ], "spans": [ [ 4674, 16 ] ] }, { "id": "micro-behaviors/data/source/syntax/keyword::js-keyword-function-constructor", "conf": 0.699999988079071, "crit": 2, "desc": "Function constructor keyword", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-try-catch-error-method-call", "conf": 0.800000011920929, "crit": 3, "desc": "Calls nested caught-error object method" }, { "id": "micro-behaviors/process/interpreter/eval::js-eval-variable-argument", "conf": 0.8999999761581421, "crit": 3, "desc": "JavaScript eval executes a variable argument", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/fs/file/read-write::filesync-api-suffix", "conf": 0.75, "crit": 1, "desc": "Synchronous file API suffix", "from": [ { "file": 4 } ] }, { "id": "metadata/library/runtime::cmd-proto-command", "conf": 1.0, "crit": 2, "desc": "Command.prototype.command symbol", "from": [ { "file": 21 } ] }, { "id": "metadata/lang/scripted::plain-js-identifier-assignment", "conf": 1.0, "crit": 1, "desc": "Plain JavaScript identifier assignment", "from": [ { "file": 12 } ], "spans": [ [ 158, 14 ], [ 266, 15 ], [ 305, 12 ], [ 1021, 14 ], [ 1447, 10 ], [ 1452, 22 ], [ 1533, 18 ], [ 1598, 18 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.8999999761581421, "crit": 2, "desc": "package.json declares repository metadata" }, { "id": "metadata/file/profile/locale::i18n-lang-code-js-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "JavaScript language code basename", "from": [ { "file": 2 } ], "spans": [ [ 0, 6 ] ] }, { "id": "metadata/package/dependencies::has-runtime-deps", "conf": 0.8500000238418579, "crit": 1, "desc": "Package has runtime dependencies" }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.8999999761581421, "crit": 3, "desc": "Repository identifies major Git host" }, { "id": "metadata/package/dependencies::npm-many-dev-dependencies", "conf": 0.699999988079071, "crit": 1, "desc": "npm manifest has many devDependencies" }, { "id": "micro-behaviors/ui/window/manage/dom::dom-element-value-read", "conf": 0.8999999761581421, "crit": 2, "desc": "Reads the value of a DOM element", "from": [ { "file": 9 } ] }, { "id": "micro-behaviors/process/fd/stdio::js-stdin-read", "conf": 0.8799999952316284, "crit": 3, "desc": "Reads Node process stdin", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/encode/charcode::charcode-at", "conf": 0.699999988079071, "crit": 1, "desc": "charCodeAt() method call", "from": [ { "file": 6 } ] }, { "id": "metadata/encoded-payload/unicode-escape", "conf": 0.8999999761581421, "crit": 2, "desc": "Decoded unicode-escape content" }, { "id": "metadata/package/manifest/repository::has-bugs-url-field", "conf": 0.800000011920929, "crit": 2, "desc": "Package has bugs/issues URL" }, { "id": "metadata/lang/source::js-ts-source-basename", "conf": 0.949999988079071, "crit": 2, "desc": "JavaScript or TypeScript source filename", "from": [ { "file": 1 } ], "spans": [ [ 0, 11 ] ] }, { "id": "micro-behaviors/os/env/access::process-env", "conf": 0.800000011920929, "crit": 2, "desc": "Node process.env access", "from": [ { "file": 16 } ] }, { "id": "metadata/package/quality/empty::npm-no-keywords", "crit": 2, "desc": "package.json has no keywords" }, { "id": "micro-behaviors/data/encode/tostring::tostring-token", "conf": 1.0, "crit": 1, "desc": "References the toString method", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/create/shell/path::shell-executable-reference", "conf": 0.8999999761581421, "crit": 3, "desc": "References a shell executable", "from": [ { "file": 9 } ] }, { "id": "metadata/package/manifest/entrypoint::bin-js-entry", "conf": 0.800000011920929, "crit": 2, "desc": "Package bin points to JavaScript" }, { "id": "metadata/library/console::js-console-method-preservation", "conf": 0.949999988079071, "crit": 3, "desc": "Preserves original JavaScript console methods", "from": [ { "file": 8 } ] }, { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.8999999761581421, "crit": 1, "desc": "File has 30 or more lines", "from": [ { "file": 1 } ], "spans": [ [ 0, 24 ] ] }, { "id": "micro-behaviors/fs/enumerate/directory::node-readdir-sync-call", "conf": 0.8399999737739563, "crit": 3, "desc": "Calls Node.js synchronous directory enumeration", "from": [ { "file": 3 } ] }, { "id": "metadata/file/metrics::javascript-small-file-5k", "conf": 0.699999988079071, "crit": 1, "desc": "JavaScript file under 5KB", "from": [ { "file": 1 } ], "spans": [ [ 0, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-function-call-method", "conf": 0.8399999737739563, "crit": 2, "desc": "Invokes function with .call()", "from": [ { "file": 1 } ], "spans": [ [ 114, 18 ], [ 1199, 19 ], [ 1733, 27 ], [ 2404, 18 ], [ 4149, 12 ] ] }, { "id": "objectives/command-and-control/backdoor/proxy/mcp::readline-stdin-interface", "atk": "T1557", "conf": 0.699999988079071, "crit": 1, "desc": "readline interface on process.stdin", "from": [ { "file": 6 } ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "from": [ { "file": 1 } ], "spans": [ [ 0, 29 ] ] }, { "id": "metadata/package/versioning::conventional-version-base", "conf": 1.0, "crit": 2, "desc": "Package version uses numeric SemVer format" }, { "id": "metadata/package/config::short-sidecar-file", "conf": 0.800000011920929, "crit": 1, "desc": "Short sidecar-sized source", "from": [ { "file": 3 } ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::js-rot-n-charcode--rx-4", "atk": "T1027", "mbc": "B0032", "conf": 0.9200000166893005, "crit": 1, "desc": "Calls charCodeAt()", "from": [ { "file": 6 } ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-undefined-string-compare", "conf": 0.6000000238418579, "crit": 2, "desc": "Compares value against the undefined string", "from": [ { "file": 9 } ] }, { "id": "metadata/package/license::copyright-word", "conf": 0.6000000238418579, "crit": 2, "desc": "Copyright notice", "from": [ { "file": 11 } ] }, { "id": "metadata/lang/scripted::require-symbol", "conf": 1.0, "crit": 1, "desc": "CommonJS require symbol", "from": [ { "file": 1 } ] }, { "id": "objectives/command-and-control/remote-command/control::current-script-filename-marker", "atk": "T1105", "conf": 0.9399999976158142, "crit": 1, "desc": "Current script filename marker", "from": [ { "file": 23 } ] }, { "id": "micro-behaviors/process/exit/terminate::exit-call", "conf": 0.30000001192092896, "crit": 2, "desc": "Generic exit call", "from": [ { "file": 14 } ] }, { "id": "metadata/package/manifest/freeform::minimal-cli-stub", "conf": 0.8999999761581421, "crit": 1, "desc": "Tiny package.json with declared CLI binary", "from": [ { "file": 10 } ] }, { "id": "metadata/file/metrics::npm-compressed-wrapper-parse-error", "conf": 0.949999988079071, "crit": 2, "desc": "npm gzip wrapper parse error", "spans": [ [ 0, 24 ] ] }, { "id": "metadata/package/documentation::readme-heading-name-differs", "conf": 0.9300000071525574, "crit": 2, "desc": "README heading differs from package name" }, { "id": "metadata/package/files/included::wheel-lacks-start-shell", "conf": 0.8999999761581421, "crit": 1, "desc": "Wheel has no start.sh launcher member" }, { "id": "metadata/file/magic/identity::gzip", "conf": 1.0, "crit": 2, "desc": "GZIP compressed file magic", "spans": [ [ 0, 8 ] ] }, { "id": "metadata/package/files/included::npm-runtime-code-member", "conf": 0.949999988079071, "crit": 2, "desc": "npm archive ships runtime-tree code" }, { "id": "metadata/package/files/included::archive-container-path", "conf": 0.949999988079071, "crit": 2, "desc": "Archive container path", "spans": [ [ 0, 14 ] ] } ], "type": "npm" }, { "id": 33, "sha": "343e871f05d92cf3d9169449deaca3c179402ba0cadb7d915a0fc19beda12113", "path": "pry-0.8.12.tgz!!package/package.json", "risk": 1, "size": 1175, "type": "package.json", "depth": 3 }, { "id": 34, "mol": "H(Po)", "sha": "e44845f5bb74167641e4483f9dcfb5a8139c91b30e09a2d6ac869c7cb71dd250", "path": "pry-0.8.12.tgz!!package/lib/pry.js", "risk": 1, "size": 749, "type": "javascript", "depth": 3 }, { "id": 35, "mol": "H(Po)", "sha": "b9d1b2d4178bb9b5882edac2de51c553f3157fc25690f39445258649583e6596", "path": "pry-0.8.12.tgz!!package/lib/pry.bin.js", "risk": 1, "size": 769, "type": "javascript", "depth": 3 }, { "ctx": [ { "b": "c$WQtv@#B6zyu}RDJ", "n": [ { "c": 2, "d": "Benign encoded JavaScript context", "i": "metadata/lang/encoded/unicode-escape::javascript-benign-context", "o": 0, "z": 14, "cf": 1.0 } ], "ln": 1, "addr": 0 }, { "b": "arU\u0026oAV^!]wO#PUze19lwPxsAo)7n]x(4H3wM9XVBy^0CqE$2.A=U!\u003cwNPQ?xE\u003eo8x(mN1wO=6#wM9XVBy^0Cq*Am\u003cp\u0026ZF\u003eAc9SNv}Yp!yB*PswNPU9zEUjuw]/HCA+eV\u0026y?W=#ec", "ln": 2, "addr": 14 }, { "b": "arR^HvRGZ\u003cauZ\u0026VB-7Yhx(v(qw]odxzdLeyaAz4nB-Ivxw{503BzkVhc[fG=A+funA=91izz2vpAbo!FzdLmvvrc16zdNQbB16f[EleN1ec", "ln": 3, "addr": 124 }, { "b": "arR^HwQ5rdzE:\u003eMazb+lv@#B6zyx1dx(4rhaAg+fwO#PsaBtkyz/M%GC42zlyH}=lx(k5jvrb{%BswtVazCBgc$)4gp\u0026ZF[e[nsay::mhA+fcgefF.tC{$f+v}YN)wlS?XD0IKQaAg+fwO#P]yH}=%j0n}]w{503BzkVhay/IiAWSvVDMWAzx(+[pz/fSrA=\u003e(lz/M%-ay/80y?bQIEir3wz/NEHA=l5rBA}?pauZ\u0026^vrb{%Bs}JMz//]tD2NsRay/80y?beqA=l5rBA}?pauZ\u0026+wP]nbBz(gFdlwUZxLzo[e)?$bB-p]juTB{saAg+fwO#PxAb](sz/*nzwJI2PwPS6nzxJC5x(4rwaBL^", "n": [ { "c": 2, "d": "Contains common English function words", "i": "metadata/file/profile/language::lang-english", "o": 249, "z": 3, "cf": 0.800000011920929 }, { "c": 2, "d": "Invokes function with .call()", "i": "micro-behaviors/data/control-flow/analysis::js-function-call-method", "o": 286, "z": 18, "cf": 0.8399999737739563 } ], "ln": 4, "addr": 210 }, { "b": "arR^HxKL%UA=k[tjS]91e[!WmpJ{XMA=k]dA==N*", "ln": 5, "addr": 498 }, { "b": "", "ln": 6, "addr": 531 }, { "b": "arUYovpTg*zE\u003c}NaAz4kB.L(cc)%4DvpTg*zE\u003egAi@", "ln": 7, "addr": 532 }, { "b": "", "ln": 8, "addr": 566 }, { "b": "arUoqauZ\u0026/wPq\u003cbA+cTDw]/sGi@", "n": [ { "c": 2, "d": "Imports the Node.js fs module", "i": "metadata/import/builtin::require-fs", "o": 574, "z": 7, "cf": 0.699999988079071 } ], "ln": 9, "addr": 567 }, { "b": "", "ln": 10, "addr": 589 }, { "b": "arT9@wO#PUze19lwPw[RasInwADL#owHF{qC4CMkB0\u0026y=e\u003e6}{zGFr:x([DdAYT", "ln": 11, "addr": 590 }, { "b": "arR^Ho)7n]x(4H3wM9XVBy^7zA=l5rBA}?pe]U\u0026Hze:OtjS[uVzEW^5z/c$qzG6-uefF[Lz/6DndiJ%", "ln": 33, "addr": 1126 }, { "b": "arR^HarUxgasItBx(+[qvrt{2jV$}JcNQt=DJ", "ln": 34, "addr": 1190 }, { "b": "arR^HarR^Hx(m)jBs}6tx!BErBwN0@ze:OBAb](lAc9ZMwPhD]v}v5wtv6H0c{F\u003e2dkbr+asw-*djEs", "n": [ { "c": 2, "d": "Calls a string replacement method", "i": "micro-behaviors/data/manipulation::string-replace-call", "o": 1254, "z": 9, "cf": 0.800000011920929 } ], "ln": 35, "addr": 1220 }, { "b": "arR^HarV7PwO=B0aBs", "ln": 36, "addr": 1284 }, { "b": "arR^HarR^Hx(m)jBs}6tx!BErBwN0@ze:OBAb](lAc9ZMwPhD]v}v5we*@}cbQ\u003exVefDq)cN*Ga", "ln": 37, "addr": 1299 }, { "b": "arR^HarR^Hx(m)jBs}SRvru6ecV-\u003ccA:@=gdlv", "ln": 51, "addr": 1614 }, { "b": "arR^HarR^HA+funA=91lzG6-ue]U\u0026Hze:OBdlv", "ln": 52, "addr": 1645 }, { "b": "arR^HarV7PwO=B0azCBgc$u}0A=Su^jV%]ntY?.Of/yydaBs", "n": [ { "c": 2, "d": "Decoded unicode-escape content", "i": "metadata/encoded-payload/unicode-escape", "o": 1676, "z": 30, "cf": 0.8999999761581421 } ], "ln": 53, "addr": 1676 }, { "b": "arR^HarR^Hx(m)jBs}SRvru6ecVa0xBzi9Ki@", "ln": 54, "addr": 1715 }, { "b": "arR^HarR^HA+funA=91lzG6-ue]U\u0026Hze:OBdlv", "ln": 55, "addr": 1745 }, { "b": "arR^HarUuiB98tvC{2l)x(m)jBs}6tx!B7kB98tvC@(", "ln": 98, "addr": 2857 }, { "b": "arR^HarU(wx(4u6c$%!^aztFgBz(hBe]k9pxlm/feG=+%aBs", "ln": 99, "addr": 2892 }, { "b": "arR^HarR^Hx\u003ewFoxLzKfz/Qbcd\u003etste[]ilwQ40.c#0NrB-YlCy?UIrx(mGhau*]4diJ%", "n": [ { "c": 2, "d": "Searches strings with includes or indexOf", "i": "micro-behaviors/data/string/search::js-includes-indexof-call", "o": 2956, "z": 8, "cf": 0.8199999928474426 } ], "ln": 100, "addr": 2931 }, { "b": "arR^HarR^HarU=tx(+[vzE^s6auZ\u0026Yi@", "ln": 101, "addr": 2987 }, { "b": "arR^HarR^HarUclwNPvo", "ln": 102, "addr": 3013 }, { "b": "arR^HarV7Yi@", "ln": 157, "addr": 4621 }, { "b": "arR^HarU=DC{4C", "ln": 158, "addr": 4631 }, { "b": "arR^HarR^HxLzKfauZ\u0026VB1RGAvpR\u0026wy?lK\u003czEU8lA=kD0B8@%BzGWT6pFBn2d\u003cc2?e]U\u0026Ryi9-}x(!xmA^n\u0026Te{82gBAh8kxdbh\u003c", "n": [ { "c": 3, "d": "Reads files with Node.js", "i": "micro-behaviors/fs/file/read::read-node", "o": 4658, "z": 15, "cf": 0.8999999761581421 }, { "c": 3, "d": "Node reads HOME directory environment variable", "i": "micro-behaviors/os/env/vars/access::node-home-access", "o": 4674, "z": 16, "cf": 0.8999999761581421 } ], "ln": 159, "addr": 4643 }, { "b": "arR^HarR^HBzbxfe[nZie[!%uBz(hBauZ\u0026Xx(!wGB8U@fBsnIwzyl\u003e=A+fA9A=U!udlv", "ln": 160, "addr": 4724 }, { "b": "arR^HarV7Pv{%E?xDOZmA=M8sdiJ%", "ln": 161, "addr": 4779 }, { "b": "arR^HarR^HA+funA=91iB-7Yhx(v(qy?W=#diJ%", "ln": 166, "addr": 4908 }, { "b": "arR^HarR^HarUxgasI5uzE\u003c}qclNbszE\u003eCpwO#d5xDOSGaz++fwGScVjS[MHB978\u0026zE\u003emtDJ", "ln": 167, "addr": 4940 }, { "b": "arR^HarR^HarR^Hw]/OkAbYxawjyoHwHIIrz!0v1B1R3wB$MrYo*{fPar\u0026D\u003eAb{ksB6\u0026P{B98tvC{j^Zb3Y1fas!NJx(mGkazb+lv@#B6zyu}RDWNt8", "n": [ { "c": 3, "d": "JavaScript file write operation", "i": "micro-behaviors/fs/write/file/direct::js-file-write", "o": 5012, "z": 12, "cf": 0.8999999761581421 } ], "ln": 168, "addr": 4998 }, { "b": "arR^HarR^HarR^Hy*?yboLFxQauZ\u0026-x(mGz", "ln": 169, "addr": 5091 }, { "b": "arR^HarR^HarV7", "ln": 170, "addr": 5120 }, { "b": "arR^HarR^HEld", "ln": 172, "addr": 5167 }, { "b": "arR^HarV7Yd0fcpB15L1", "ln": 173, "addr": 5178 }, { "b": "arR^HarUSzz!0v1B1RJQwnb{lz/c%JwmoN*cOcxZxLzJuyH}^gA+frkdlv", "n": [ { "c": 3, "d": "Reads Node process stdin", "i": "micro-behaviors/process/fd/stdio::js-stdin-read", "o": 5201, "z": 16, "cf": 0.8799999952316284 } ], "ln": 174, "addr": 5195 }, { "b": "arR^HEe", "ln": 175, "addr": 5242 }, { "b": "", "ln": 176, "addr": 5248 }, { "b": "", "ln": 214, "addr": 6315 }, { "b": "arR^Hq*Am\u003cp\u0026ZF\u003eAc9ZKA=l5rBA}?pe]U\u0026Hze:OtjS[uVzEW^5z/c%LaBs", "ln": 215, "addr": 6316 }, { "b": "arR^HarUYoBAIRwaARphB1RJQvru6edk2NWz/6Dnd0fcpB1wCrb3Mlld\u003ce}Ex(+[pz/]@tas!MUt{7sxaARphB1RrFwmV(DjV%]nyi7:BkoKDHvqGZiCw7YjwHF{BA^qzvcN*f0ay/7[y?\u003eUjy\u0026%qqcVB9Kyi7:KefG4Fx(+[vzE^r@BrA^\u003ca$sYVas!NRxLzJux(mD)zGE0Zasxt}cTwutz!T8qcNQt(i@", "n": [ { "c": 3, "d": "Joins array values without separator", "i": "micro-behaviors/data/string/concat::array-join-empty-separator", "o": 6532, "z": 10, "cf": 0.800000011920929 } ], "ln": 216, "addr": 6363 }, { "b": "arR^HEld", "ln": 217, "addr": 6545 }, { "b": "", "ln": 218, "addr": 6552 } ], "depth": 3, "facts": { "imp": [ [ "", "EventEmitter" ], [ "", "MultilineState" ], [ "", "ReverseSearch" ], [ "", "SinglelineState" ], [ "", "SyncPrompt" ], [ "", "chalk" ], [ "", "deasync" ], [ "", "fs" ], [ "", "readline" ], [ "", "bind" ], [ "", "fn.apply" ], [ "", "extend" ], [ "", "hasProp.call" ], [ "", "child.key" ], [ "", "ctor.prototype" ], [ "", "child.prototype" ], [ "", "child.__super__" ], [ "", "hasProp" ], [ "", "readline" ], [ "", "require" ], [ "", "fs" ], [ "", "require" ], [ "", "EventEmitter" ], [ "", "require" ], [ "", "deasync" ], [ "", "require" ], [ "", "chalk" ], [ "", "require" ], [ "", "MultilineState" ], [ "", "MultilineState.prototype.data" ], [ "", "MultilineState.prototype.keypress" ], [ "", "input.state" ], [ "", "input.send_data" ], [ "", "chars.match" ], [ "", "input.prompt" ], [ "", "MultilineState.prototype.prompt" ], [ "", "input.cli.setPrompt" ], [ "", "prompt.replace" ], [ "", "input.cli.setPrompt" ], [ "", "prompt.replace" ], [ "", "input.cli._refreshLine" ], [ "", "SinglelineState" ], [ "", "SinglelineState.prototype.keypress" ], [ "", "input.state" ], [ "", "input.prompt" ], [ "", "input.state" ], [ "", "input.prompt" ], [ "", "chars.match" ], [ "", "input.send_data" ], [ "", "SinglelineState.prototype.prompt" ], [ "", "input.cli.setPrompt" ], [ "", "input.cli.prompt" ], [ "", "ReverseSearch" ], [ "", "ReverseSearch.prototype.init" ], [ "", "ReverseSearch.prototype.quit" ], [ "", "input.state" ], [ "", "input.prompt" ], [ "", "input.cli._moveCursor" ], [ "", "input.cli._refreshLine" ], [ "", "ReverseSearch.prototype.keypress" ], [ "", "history" ], [ "", "chars.charCodeAt" ], [ "", "input.cli.history.shift" ], [ "", "input.cli.history.unshift" ], [ "", "input.type" ], [ "", "history" ], [ "", "input.prompt" ], [ "", "ReverseSearch.prototype.prompt" ], [ "", "pre" ], [ "", "pre" ], [ "", "input.cli.setPrompt" ], [ "", "input.cli._refreshLine" ], [ "", "SyncPrompt" ], [ "", "extend" ], [ "", "SyncPrompt.prototype.lines" ], [ "", "SyncPrompt.prototype.count" ], [ "", "SyncPrompt.prototype.done" ], [ "", "SyncPrompt.prototype._state" ], [ "", "SyncPrompt.prototype.states" ], [ "", "error" ], [ "", "hist" ], [ "", "lastLine" ], [ "", "typeahead" ], [ "", "typeahead" ], [ "", "bind" ], [ "", "bind" ], [ "", "bind" ], [ "", "bind" ], [ "", "bind" ], [ "", "bind" ], [ "", "bind" ], [ "", "SyncPrompt.__super__.constructor.apply" ], [ "", "readline.createInterface" ], [ "", "hist" ], [ "", "fs.readFileSync.toString" ], [ "", "fs.readFileSync" ], [ "", "hist.split.reverse" ], [ "", "hist.split" ], [ "", "lastLine" ], [ "", "fs.appendFile" ], [ "", "lastLine" ], [ "", "this.line" ], [ "", "process.stdin.on" ], [ "", "SyncPrompt.prototype.state" ], [ "", "base" ], [ "", "base" ], [ "", "base.init" ], [ "", "SyncPrompt.prototype.line" ], [ "", "line.charCodeAt" ], [ "", "line" ], [ "", "line.slice" ], [ "", "SyncPrompt.prototype.keypress" ], [ "", "chars.toString" ], [ "", "SyncPrompt.prototype.send_data" ], [ "", "next" ], [ "", "res" ], [ "", "next" ], [ "", "this.lines" ], [ "", "this.prompt" ], [ "", "res" ], [ "", "res.then" ], [ "", "next" ], [ "", "SyncPrompt.prototype.prompt" ], [ "", "chalk.white" ], [ "", "chalk.blue" ], [ "", "SyncPrompt.prototype.open" ], [ "", "results" ], [ "", "results" ], [ "", "results.push" ], [ "", "deasync.runLoopOnce" ], [ "", "SyncPrompt.prototype.type" ], [ "", "SyncPrompt.prototype.close" ], [ "", "process.stdin.removeListener" ], [ "", "module.exports" ], [ "", "chalk" ], [ "", "deasync" ], [ "", "events" ], [ "", "fs" ], [ "", "readline" ] ], "mbr": [ "MultilineState.prototype", "MultilineState.prototype.data", "MultilineState.prototype.keypress", "MultilineState.prototype.prompt", "ReverseSearch.prototype", "ReverseSearch.prototype.init", "ReverseSearch.prototype.keypress", "ReverseSearch.prototype.prompt", "ReverseSearch.prototype.quit", "SinglelineState.prototype", "SinglelineState.prototype.keypress", "SinglelineState.prototype.prompt", "SyncPrompt.__super__", "SyncPrompt.__super__.constructor", "SyncPrompt.__super__.constructor.apply", "SyncPrompt.prototype", "SyncPrompt.prototype._state", "SyncPrompt.prototype.close", "SyncPrompt.prototype.count", "SyncPrompt.prototype.done", "SyncPrompt.prototype.keypress", "SyncPrompt.prototype.line", "SyncPrompt.prototype.lines", "SyncPrompt.prototype.open", "SyncPrompt.prototype.prompt", "SyncPrompt.prototype.send_data", "SyncPrompt.prototype.state", "SyncPrompt.prototype.states", "SyncPrompt.prototype.type", "_this.line", "_this.lines", "_this.prompt", "arg.mode", "arg.typeahead", "base.init", "chalk.blue", "chalk.white", "chars.charCodeAt", "chars.match", "chars.toString", "child.__super__", "child.prototype", "ctor.prototype", "deasync.runLoopOnce", "fn.apply", "fs.appendFile", "fs.readFileSync", "fs.readFileSync().toString", "hasProp.call", "hist.split", "hist.split().reverse", "history.length", "input.cli", "input.cli._moveCursor", "input.cli._refreshLine", "input.cli.history", "input.cli.history.shift", "input.cli.history.unshift", "input.cli.line", "input.cli.line.length", "input.cli.prompt", "input.cli.setPrompt", "input.prompt", "input.send_data", "input.state", "input.type", "line.charCodeAt", "line.length", "line.slice", "module.exports", "parent.prototype", "process.env", "process.env.HOME", "process.stdin", "process.stdin.on", "process.stdin.removeListener", "process.stdout", "prompt.replace", "readline.createInterface", "res.then", "results.push" ], "tgt": [ "MultilineState", "ReverseSearch", "SinglelineState", "SyncPrompt.__super__.constructor.apply", "_this.line", "_this.prompt", "base.init", "bind", "chalk.blue", "chalk.white", "chars.charCodeAt", "chars.match", "chars.toString", "ctor", "deasync.runLoopOnce", "extend", "fn.apply", "fs.appendFile", "fs.readFileSync", "fs.readFileSync().toString", "hasProp.call", "hist.split", "hist.split().reverse", "input.cli._moveCursor", "input.cli._refreshLine", "input.cli.history.shift", "input.cli.history.unshift", "input.cli.prompt", "input.cli.setPrompt", "input.prompt", "input.send_data", "input.state", "input.type", "line.charCodeAt", "line.slice", "next", "process.stdin.on", "process.stdin.removeListener", "prompt.replace", "readline.createInterface", "require", "res.then", "results.push" ], "metrics": { "ast": { "op.eq": 12.0, "op.gt": 1.0, "op.lt": 1.0, "op.ne": 3.0, "op.add": 15.0, "op.lor": 3.0, "op.sub": 3.0, "op.land": 3.0, "op.lnot": 1.0, "max_depth": 33.0, "bind_count": 51.0, "call_count": 90.0, "node_count": 2736.0, "member_count": 81.0, "op_density.eq": 0.0, "op_density.gt": 0.0, "op_density.lt": 0.0, "op_density.ne": 0.0, "op_density.add": 0.01, "op_density.lor": 0.0, "op_density.sub": 0.0, "sequence_count": 1.0, "op_density.land": 0.0, "op_density.lnot": 0.0, "identifier_count": 105.0, "member_depth_max": 4.0, "string_literal_count": 49.0, "array_literal_max_length": 3.0, "string_concat_chain_max_length": 7.0 }, "file": { "size": 7168.0, "entropy": 4.6, "size_bytes": 7168.0 }, "text": { "digit_ratio": 0.01, "space_count": 1650.0, "total_lines": 247.0, "char_entropy": 4.6, "unique_chars": 78.0, "escape_density": 0.03, "lines_over_200": 1.0, "string_density": 0.2, "avg_line_length": 28.02, "max_line_length": 287.0, "empty_line_ratio": 0.17, "last_line_length": 14.0, "whitespace_ratio": 0.26, "most_common_ratio": 0.07, "identifier_density": 1.87, "line_length_stddev": 29.29, "octal_escape_count": 1.0, "non_printable_ratio": 0.0, "unicode_escape_count": 1.0, "normalized_string_count": 3.12, "repeated_char_sequences": 13.0, "suspicious_string_ratio": 0.02, "most_common_char_is_null": 0.0, "max_inline_whitespace_run": 6.0, "most_common_char_codepoint": 116.0, "suspicious_identifier_ratio": 0.01, "normalized_unique_identifiers": 13.21 }, "binds": { "count": 51.0 }, "calls": { "count": 90.0 }, "binary": { "overall_entropy": 4.6, "peak_region_bytes": 7168.0, "peak_region_entropy": 4.73 }, "source": { "function_count": 5.0 }, "imports": { "count": 5.0, "stdlib_count": 3.0, "stdlib_ratio": 0.6, "unique_modules": 5.0, "third_party_count": 2.0, "third_party_ratio": 0.4 }, "members": { "count": 81.0 }, "strings": { "total": 49.0, "avg_length": 4.0, "max_length": 18.0, "path_count": 2.0, "avg_entropy": 1.7, "empty_count": 10.0, "total_bytes": 196.0, "entropy_stddev": 1.09, "shell_command_strings": 1.0 }, "functions": { "count": 5.0, "anonymous": 29.0, "avg_params": 0.76, "max_params": 2.0, "one_liners": 8.0, "length_stddev": 45.24, "over_100_lines": 2.0, "avg_name_length": 11.2, "no_params_count": 16.0, "avg_length_lines": 19.76, "max_length_lines": 247.0, "min_length_lines": 1.0, "nested_functions": 12.0, "avg_nesting_depth": 2.03, "max_nesting_depth": 5.0, "avg_param_name_length": 4.96, "density_per_100_lines": 13.77, "code_in_functions_ratio": 2.72 }, "identifiers": { "count": 105.0, "total": 462.0, "avg_length": 6.49, "max_length": 15.0, "min_length": 1.0, "avg_entropy": 2.32, "reuse_ratio": 0.23, "unique_count": 105.0, "length_stddev": 3.13, "sequential_names": 1.0, "single_char_count": 1.0, "single_char_ratio": 0.01, "high_entropy_count": 1.0, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.77, "all_uppercase_ratio": 0.01, "double_underscore_count": 1.0, "underscore_prefix_count": 5.0 } } }, "id": 36, "mol": "H₃(F₃OsPo)", "path": "pry-0.8.12.tgz!!package/lib/pry/sync_prompt.js", "risk": 5, "sha": "14d62917ea063bbdc13d541cad61613a95134c3929340579bf81d6cb21cbbe0a", "size": 7168, "traits": [ { "id": "micro-behaviors/data/control-flow/analysis::js-function-call-method", "conf": 0.8399999737739563, "crit": 2, "desc": "Invokes function with .call()", "spans": [ [ 286, 18 ] ] }, { "id": "objectives/command-and-control/backdoor/proxy/mcp::stdin-line-handler", "atk": "T1557", "conf": 0.6000000238418579, "crit": 1, "desc": "Handles stdin lines via event", "spans": [ [ 4877, 10 ] ] }, { "id": "micro-behaviors/data/encode/tostring::tostring-call", "conf": 1.0, "crit": 1, "desc": ".toString() method call", "spans": [ [ 4711, 11 ] ] }, { "id": "micro-behaviors/os/env/access::process-env", "conf": 0.800000011920929, "crit": 2, "desc": "Node process.env access", "spans": [ [ 4674, 11 ] ] }, { "id": "metadata/file/extension/identity::web-asset-extension", "conf": 1.0, "crit": 1, "desc": "Common web or JSON file extension", "spans": [ [ 0, 14 ] ] }, { "id": "metadata/lang/scripted::length-prop", "conf": 1.0, "crit": 1, "desc": "References the JavaScript .length property", "spans": [ [ 2347, 6 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::js-rot-n-charcode--rx-4", "atk": "T1027", "mbc": "B0032", "conf": 0.9200000166893005, "crit": 1, "desc": "Calls charCodeAt()", "spans": [ [ 2567, 16 ], [ 5581, 15 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::string-literal-equality-check", "conf": 0.9200000166893005, "crit": 1, "desc": "String literal equality or membership check", "spans": [ [ 5417, 13 ] ] }, { "id": "objectives/anti-static/obfuscation/string/encoding::js-array-join-symbol", "crit": 1, "desc": "Join using empty string delimiter", "spans": [ [ 6533, 9 ] ] }, { "id": "metadata/lang/source::js-ts-source-basename", "conf": 0.949999988079071, "crit": 2, "desc": "JavaScript or TypeScript source filename", "spans": [ [ 0, 14 ] ] }, { "id": "metadata/lang/scripted::require-symbol", "conf": 1.0, "crit": 1, "desc": "CommonJS require symbol", "spans": [ [ 545, 7 ] ] }, { "id": "metadata/lang/scripted::js-export-boundary", "crit": 1, "desc": "JS module export syntax", "spans": [ [ 7123, 14 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-empty-join-call", "conf": 0.7200000286102295, "crit": 1, "desc": "JavaScript array empty join call", "spans": [ [ 6533, 9 ] ] }, { "id": "metadata/file/metrics::file-has-30-plus-lines", "conf": 0.8999999761581421, "crit": 1, "desc": "File has 30 or more lines", "spans": [ [ 0, 25 ] ] }, { "id": "micro-behaviors/fs/file/read-write::filesync-api-suffix", "conf": 0.75, "crit": 1, "desc": "Synchronous file API suffix", "spans": [ [ 4665, 8 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-trailing-iife-closure", "conf": 0.8500000238418579, "crit": 1, "desc": "JavaScript file ends with an IIFE", "spans": [ [ 1445, 6 ] ] }, { "id": "objectives/command-and-control/backdoor/proxy/mcp::readline-stdin-interface", "atk": "T1557", "conf": 0.699999988079071, "crit": 1, "desc": "readline interface on process.stdin", "spans": [ [ 4453, 25 ] ] }, { "id": "metadata/file/metrics::low-overall-entropy-source", "conf": 0.8999999761581421, "crit": 2, "desc": "Source file has low overall entropy", "spans": [ [ 0, 29 ] ] }, { "id": "metadata/lang/scripted::plain-js-identifier-assignment", "conf": 1.0, "crit": 1, "desc": "Plain JavaScript identifier assignment", "spans": [ [ 357, 20 ] ] }, { "id": "micro-behaviors/data/encode/charcode::charcode-at", "conf": 0.699999988079071, "crit": 1, "desc": "charCodeAt() method call", "spans": [ [ 2572, 12 ] ] }, { "id": "micro-behaviors/data/string/search::js-includes-indexof-call", "conf": 0.8199999928474426, "crit": 2, "desc": "Searches strings with includes or indexOf", "spans": [ [ 2956, 8 ] ] }, { "id": "micro-behaviors/data/encode/tostring::tostring-token", "conf": 1.0, "crit": 1, "desc": "References the toString method", "spans": [ [ 4712, 8 ] ] }, { "id": "metadata/import/builtin::require-fs", "conf": 0.699999988079071, "crit": 2, "desc": "Imports the Node.js fs module", "spans": [ [ 574, 7 ] ] }, { "id": "metadata/file/metrics::js-readable-source-context", "conf": 0.8999999761581421, "crit": 1, "desc": "Readable JavaScript source context", "spans": [ [ 0, 28 ] ] }, { "id": "micro-behaviors/os/env/access::javascript", "conf": 0.800000011920929, "crit": 2, "desc": "Access environment variables", "spans": [ [ 4674, 11 ] ] }, { "id": "micro-behaviors/data/string/concat::array-join-empty-separator-text", "conf": 0.7799999713897705, "crit": 1, "desc": "Array expression joined without separator", "spans": [ [ 6532, 10 ] ] }, { "id": "metadata/file/profile/language::lang-english", "conf": 0.800000011920929, "crit": 2, "desc": "Contains common English function words", "spans": [ [ 249, 3 ] ] }, { "id": "metadata/file/extension/identity::javascript-source-extension", "conf": 1.0, "crit": 1, "desc": "JavaScript source filename extension", "spans": [ [ 0, 14 ] ] }, { "id": "micro-behaviors/data/manipulation::string-replace-call", "conf": 0.800000011920929, "crit": 2, "desc": "Calls a string replacement method", "spans": [ [ 1254, 9 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::for-loop-content", "conf": 0.30000001192092896, "crit": 2, "desc": "for loop (content)", "spans": [ [ 248, 6 ] ] }, { "id": "metadata/file/metrics::script-peak-region-over-1k", "conf": 0.800000011920929, "crit": 1, "desc": "Peak-entropy source region exceeds 1KB", "spans": [ [ 0, 34 ] ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.8999999761581421, "crit": 1, "desc": "Low string density in source", "spans": [ [ 0, 26 ] ] }, { "id": "micro-behaviors/fs/write/file/direct::append-file-async", "conf": 0.800000011920929, "crit": 3, "desc": "Appends to file asynchronously", "spans": [ [ 5012, 12 ] ] }, { "id": "micro-behaviors/fs/file/read::read-node", "conf": 0.8999999761581421, "crit": 3, "desc": "Reads files with Node.js", "spans": [ [ 4658, 15 ] ] }, { "id": "micro-behaviors/os/env/vars/access::node-home-access", "conf": 0.8999999761581421, "crit": 3, "desc": "Node reads HOME directory environment variable", "spans": [ [ 4674, 16 ] ] }, { "id": "micro-behaviors/data/string/split::js-split-call", "conf": 0.800000011920929, "crit": 1, "desc": "JavaScript split() method call", "spans": [ [ 4751, 10 ] ] }, { "id": "micro-behaviors/fs/file/read::readfilesync-call", "conf": 0.8999999761581421, "crit": 3, "desc": "Calls readFileSync", "spans": [ [ 4658, 15 ] ] }, { "id": "micro-behaviors/process/fd/stdio::js-stdin-read", "conf": 0.8799999952316284, "crit": 3, "desc": "Reads Node process stdin", "spans": [ [ 5201, 16 ] ] }, { "id": "micro-behaviors/fs/file/binary::file-manipulation", "conf": 0.75, "crit": 3, "desc": "File content manipulation (read/write/seek)", "spans": [ [ 4658, 15 ] ] }, { "id": "metadata/encoded-payload/unicode-escape", "conf": 0.8999999761581421, "crit": 2, "desc": "Decoded unicode-escape content", "spans": [ [ 1676, 30 ] ] } ], "type": "javascript" }, { "id": 37, "mol": "Md(Li)", "sha": "8b5eb5fe9299cde024f38a461ae39a063ebed966149089c3474347fe594b4a22", "path": "pry-0.8.12.tgz!!package/lib/pry/output/local_output.js", "risk": 1, "size": 1491, "type": "javascript", "depth": 3 }, { "id": 38, "mol": "H(F)", "sha": "f0cf4bd88233998be3b5c008142ccd04cf1b2dcc67ad396f44f158515e3ebd71", "path": "pry-0.8.12.tgz!!package/lib/pry/file.js", "risk": 1, "size": 3125, "type": "javascript", "depth": 3 }, { "id": 39, "mol": "H(Db)", "sha": "a91dced2fb8986080186ba77292873b573b974e24e0004a7d1778dbe45802fa1", "path": "pry-0.8.12.tgz!!package/lib/pry/compiler.js", "risk": 1, "size": 1848, "type": "javascript", "depth": 3 }, { "id": 40, "mol": "H(F)", "sha": "78e0fd733cf74f1dc600d130770801a6d0640b25d9ad61450acce8ca6475eddd", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/version.js", "risk": 1, "size": 1025, "type": "javascript", "depth": 3 }, { "id": 41, "sha": "1d1811a945c0f934326e36686a852d6ac369a7642af6978f9cb9219932a0ca22", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/index.js", "risk": 1, "size": 439, "type": "javascript", "depth": 3 }, { "id": 42, "sha": "d2782399a7af67f90f100fc59960523990a255ff7f9d37caa7e19a1b6968b9de", "path": "pry-0.8.12.tgz!!package/lib/pry/sync_highlight.js", "risk": 1, "size": 2446, "type": "javascript", "depth": 3 }, { "id": 43, "sha": "1433e12bde4fd46394e24b88899b810351f28eb9363a88791dbec2bba1ee1a12", "path": "pry-0.8.12.tgz!!package/lib/pry/range.js", "risk": 1, "size": 669, "type": "javascript", "depth": 3 }, { "id": 44, "sha": "156d52146ad29ab6ec927bd4a011e47379535907a4d1fe6f137c45ded24da203", "path": "pry-0.8.12.tgz!!package/lib/pry/completion.js", "risk": 1, "size": 4498, "type": "javascript", "depth": 3 }, { "id": 45, "sha": "ecba939d0949a91b8a4360224db9a1840270137ab9bb3ee106c8bed59c030324", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/xecute.js", "risk": 1, "size": 5230, "type": "javascript", "depth": 3 }, { "id": 46, "sha": "ea40de8f1f719310668e85337a927aaf8daa1c80a13f2fd2dc0981f06d1f7c59", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/wtf.js", "risk": 1, "size": 1058, "type": "javascript", "depth": 3 }, { "id": 47, "sha": "227edf90b6543567e48db1d48e99931bd7d8968ef37350d41b6ffa49dca57c41", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/whereami.js", "risk": 1, "size": 1503, "type": "javascript", "depth": 3 }, { "id": 48, "sha": "cec6fceb90d1f7435891b28971bfdbb96060d63861f184769d11077262fea2ab", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/stop.js", "risk": 1, "size": 900, "type": "javascript", "depth": 3 }, { "id": 49, "sha": "bc0969db5284c0ac47e3bead5e905eb5cad96484a483a27f653e9a35239017d5", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/play.js", "risk": 1, "size": 1235, "type": "javascript", "depth": 3 }, { "id": 50, "sha": "be1b3b2aa9067fc068e884e9ff0bbf9b300b3a819327b3566b018a559aa71136", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/kill.js", "risk": 1, "size": 927, "type": "javascript", "depth": 3 }, { "id": 51, "sha": "1a623c616a845814d798e9e21c09298253483a21821d2f49589a754134378186", "path": "pry-0.8.12.tgz!!package/lib/pry/commands/help.js", "risk": 1, "size": 2210, "type": "javascript", "depth": 3 }, { "id": 52, "sha": "20864967152863f4040dcd33de32de65bb5ec2607f6e5aea98505d49aa3e2e54", "path": "pry-0.8.12.tgz!!package/lib/pry/command.js", "risk": 1, "size": 1633, "type": "javascript", "depth": 3 }, { "id": 53, "sha": "1ea5798a2cd797fd7b49a34887018c0836c6c3dadc2bf9054b45bc3679ff8197", "path": "pry-0.8.12.tgz!!package/lib/pry/app.js", "risk": 1, "size": 2814, "type": "javascript", "depth": 3 }, { "id": 54, "sha": "6c0f73a6483a85a4651a44d51727e8a555b481e3652a32f1dc3bca655d1b397b", "path": "pry-0.8.12.tgz!!package/lib/libs/better_inspect.js", "risk": 1, "size": 11255, "type": "javascript", "depth": 3 }, { "id": 55, "sha": "a02857273610d20acb7f61698e3f38a802e8dd58613e9ca91a3b88d23931825c", "path": "pry-0.8.12.tgz!!package/changelog.md", "risk": 1, "size": 1875, "type": "markdown", "depth": 3 }, { "id": 56, "sha": "2455768cb2b4070dd8f80c9dd1b3e1c41e50607fe9d8c8f2a05a7d4b4ffae8e0", "path": "pry-0.8.12.tgz!!package/LICENSE", "risk": 1, "size": 1084, "type": "text", "depth": 3 }, { "id": 57, "sha": "a36edcc196264235a0c838cf17c30e4abfd43576fadba5d1dc1581f0e6f8fc71", "path": "pry-0.8.12.tgz!!package/readme.md", "size": 1212, "type": "markdown", "depth": 3 }, { "id": 58, "sha": "5428a95f059ae8c4888a07860a159126386836e06789f2bf2177b059a8441d94", "path": "coa@2.0.2.registry.json", "size": 887, "type": "registry", "depth": 4 }, { "id": 59, "sha": "ab99984c1fc5fdb004d77761567517d451db497f1dd565a6aea7cb8315c673ae", "path": "chalk@5.6.2.registry.json", "size": 877, "type": "registry", "depth": 4 }, { "id": 60, "sha": "68476a27dd91c656364a24745a14dd8c541e0b50264e3e195b5eefe4cd92a106", "path": "coffeescript@2.7.0.registry.json", "size": 872, "type": "registry", "depth": 4 }, { "id": 61, "mol": "Md", "sha": "95225cc5c614f204df3f205a730f1ee5a3f4c7a9f67c41185b2724346fa474f4", "path": "deasync@0.1.31.registry.json", "risk": 1, "size": 912, "type": "registry", "depth": 4 }, { "id": 62, "mol": "Md", "sha": "af8acf9bca7a7f57a02090cb4ea980e2d225d84dd44c15adaae5d64728dbeea6", "path": "pygmentize-bundled@2.3.0.registry.json", "risk": 1, "size": 960, "type": "registry", "depth": 4 }, { "id": 63, "sha": "52d06eb3c91410d09444f7eca671b5fa085efa00acf6f313169984b6b8d65d80", "path": "github.com_rubocop_rubocop-thread_safety@v0.5.1.registry.json", "size": 820, "type": "registry", "depth": 1 } ], "omitted_files": 57, "rev": "32522", "v": "8" } }