{ "ml": { "v": "7", "eng": "2.9.1", "lvl": -1, "conf": 0, "prob": 0.000019888083, "files": [ { "id": 0, "lvl": -1, "conf": 0, "prob": 0.000019888082533725537, "type": "npm" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.000009357929229736328, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.000008980433449323755, "type": "javascript" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000011404355063859839, "type": "javascript" }, { "id": 10, "lvl": -1, "conf": 0, "prob": 0.000010848045349121094, "type": "package.json" } ], "version": "v18.18", "analyzed_at": "2026-09-13T04:08:36Z" }, "path": "@gjsify-vm-0.51.1.tgz", "raw": { "files": [ { "id": 0, "mol": "H(Po)", "sha": "7feb09c10e1810cb2de580d41ab2408aee3104b4dc05c39cb5b7c79597d1b241", "path": "vm-0.51.1.tgz", "refs": [ { "to": "pkg:github/gjsify/gjsify", "off": 0, "kind": "repository" } ], "risk": 2, "size": 3406, "type": "npm", "facts": { "metrics": { "file": { "size": 3406, "entropy": 7.94 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 3406, "peak_region_entropy": 7.81 } } }, "ident": { "name": { "value": "@gjsify/vm", "source": "npm.name", "verified": false }, "urls": [ { "url": "git+https://github.com/gjsify/gjsify.git", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://github.com/gjsify/gjsify/tree/main/packages/node/vm#readme", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "version": { "value": "0.51.1", "source": "npm.version", "verified": false }, "identifier": { "value": "@gjsify/vm", "source": "npm.name", "verified": false } }, "traits": [ { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-max-string-length-short", "conf": 0.8, "crit": 1, "desc": "JavaScript strings capped at five", "from": [ { "file": 3 } ] }, { "id": "objectives/supply-chain/trojanized/toolchain::infector-command-verb", "atk": "T1195.001,T1554", "mbc": "B0009", "conf": 0.8, "crit": 1, "desc": "Infector or implant naming vocabulary", "from": [ { "file": 8 } ] }, { "id": "metadata/file/profile/metrics::source-no-parsed-call-sites", "conf": 0.98, "crit": 2, "desc": "Source has no parsed call sites", "from": [ { "file": 2 } ] }, { "id": "metadata/file/extension/token-shape::bare-alphanumeric-script-basename", "conf": 0.9, "crit": 2, "desc": "Script filename is a bare alphanumeric token", "from": [ { "file": 2 } ] }, { "id": "micro-behaviors/process/interpreter/eval/compile::js-function-constructor", "conf": 0.9, "crit": 3, "desc": "Constructs a JavaScript function dynamically" }, { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field" } ] }, { "ctx": [ { "b": "fdFBUasXHiwI4FrAbP=sB0bveBzk]fayG89wmW/Bzd1F#z/M$yB7DFdzxIX)wmWxdB0a}mx(4s3e^-ZJ3lQ/vpI}pIz!9AgayG89wmW/Bzd1G2B0a}mx(4(lx(n3haARpdaAzQxBzkP6aMv{oaAIDzviwr-wmWumvrc0(Bp6cuayYFhwnC*1Bzb98azCXiz/P@vayEDEyia93C}TtTu)6f8aAzyyBy!#9xK#i}ayYQsBzbj)asXHOwPI^aC4CXwB0a\u003e6yia93C}KbWzGGPfwPGFwz!9A4jV$}Jb5Q?hx)a5iu)6Gjy?kjwra]#!ayPCix\u003ehocwo89\u003exk8l@3lQ/vBzbkdm[MY5AbPMrw[=6$azC.nzY?![wmV()B-7-awPF#9zGGPkwO=SA3lQ/9asXH7n(D\u003cwB-7-awPF#8zY?!Jr3kW?zGx@p", "ln": 0, "col": 1, "line": 1 }, { "b": "w{D4Mzd1-j3lQ/vz*c7wu#fK^fj/iwfkkrmwQ2?xB6{asBzbkdAbPMrw[=6$dj$@IdLzcuCYmOwBrA4Qw].*basz5BwmW/Bz6}yLwQ5fjA=-BJay]4}vrDydaBLwAA=k!qcVi\u003ckwJC0KcP.U", "ln": 381, "col": 62, "line": 9 } ], "depth": 1, "facts": { "metrics": { "ast": { "max_depth": 4, "call_count": 0, "node_count": 24 }, "file": { "size": 496, "entropy": 4.81 }, "text": { "lines": 13, "top_char": 101, "max_ws_run": 1, "space_count": 77, "char_entropy": 4.81, "unique_chars": 51, "top_char_null": 0, "string_density": 0.15, "top_char_ratio": 0.08, "avg_line_length": 37.15, "max_line_length": 76, "non_ascii_ratio": 0.01, "last_line_length": 34, "whitespace_ratio": 0.18, "line_length_stddev": 26.84, "normalized_string_count": 0.55, "suspicious_comment_ratio": 1 }, "binary": { "peak_region_bytes": 496, "peak_region_entropy": 4.81 }, "strings": { "bytes": 14, "count": 2, "avg_length": 7, "max_length": 7, "avg_entropy": 2.81 }, "comments": { "chars": 431, "count": 1, "lines": 11, "high_entropy": 1, "to_code_ratio": 5.5 } } }, "id": 2, "mol": "H(Po)", "path": "vm-0.51.1.tgz!!package/globals.mjs", "pid": 0, "risk": 2, "sha": "708ce665ba0f5253b1dbeb76b8f81e39050089c5f2e1bca4ac81c18e481d70bf", "size": 496, "traits": [ { "id": "metadata/file/comment::source-at-most-two-comments", "conf": 0.88, "crit": 2, "desc": "Source has at most two comments" }, { "id": "metadata/file/comment::source-comment-bytes-over-300", "conf": 0.92, "crit": 2, "desc": "Source has over 300 comment bytes" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 101, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 144, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 35, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 248, 0 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-require", "conf": 0.85, "crit": 3, "desc": "Node.js vm module import", "spans": [ [ 445, 14 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "x(d*cA=-GTfje)pA==Cjy+Gdoz!%l2z*c7LA=(nwx(dAlyi7NXv@DmaBrCcTq*Aj?z!{?fC5n\u003cwz/fVdCYWsxj7-RMv@#B6zxJp$zF%SrB-n:udsk(xBrCV*mriA!AWUrXxkhH4w{D4Mz8@^+DU4QFx(+zmz/^ayB-qqrA=+(6azCZoBzbkdvSDyhB7GwmAbPMrw[=6$u[1fTwPS6nzxK3Nv@C)?jZZYNpGgm)p*+?@Ep^Rtv@#B6zxJ$xzB[.BxLzJPz/fVdCYUuBeoAs/A+funA=9oVem\u003c0ky:*=zdsC/JzEW^5z/cXrB-6=*pgXSpz/fVdCYUuBeoABXdsk(xBrCP!BBnE.EjP7}pHX6Iv@%tswQetBAW-LFj.VJ=vq)SajW9)\u003cwNc-DA+funA=90?B-7Yhx(v(qe?O+\u003cemrHfBAIRwaz2.8y:ZMQn(FIXe]#bPx(mM$w{C!odsATMdju/3e[3hSw{503BzkVhaAzQxnP3[lzGGDmBspYKBs.qUDVAXtB-IvxA=(m\u003ezCB+!lVl\u003c:wQ5qBwH}{LEp^Rtv@#B6zxJCfwNPW(lVl\u003c:wQ5qBBszMMwPP5jj-(70DWN$@wPS6nzxI.:ygQ)%e[wK9x(mGUA=k]dA==NPzy/uIDV\u0026?lB.9PSfF3^MB.$YgvpB4:iW3kadj/v+w{503BzkVhazC):z/fVdCYUuQdsk=vd0f-NwP8f6BrJ!Pz^)D)v@#aaD)9OXBzbYkCox\u003egAaIEUA=k$Du@Q/Jar\u003e-k", "ln": 0, "col": 1, "line": 1 }, { "b": "BrC47aA7\u003cmBA}?paA7.7wN/*maw#=XwODs0wfrdABuI=IzGP=ikvwwKy\u00260Guv03WkwGSmBBA}?pz!pblEpdFhdlzMYBAIRwaAQ?0t%gtlaUXsRB-7Yhx(v(iv@Dj6x(4uIB-7Yhx(v(qwH}{OzyG{MwPS6nzxIz\u003ezEW^5z/c%Qe?Rl[D%o(cwHS4Jvr9F?v@=p5BuKbIvrlHpuT[1+wJKyuzGx]uBZ]JiAWUGIBszMUxLzJuuT[1+wJ:QMA=(m\u003ezD7p-B3\u003c\u003e-By/Ysc$K\u0026OA+funA=9oVem\u003c0ky:*=OxLzJuuT[1+wHS4FB-6=*pgXSpz/fVdCYUuBeoAs/A+funA=91uB-6=*pgXSpz/fVdCYUuQxLzJuuT[1+wH}ywEr6EFnP3[lzGGDmBspYKBszMSwPS6nzxJ$xzB[.vwP{HWzGGDmBsqlAx(+[lv@C)?em*nUv@=c?By^*Fv}YB:l$3", "ln": 626, "col": 627, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "Symbol" ], [ "", "Error" ], [ "", "Object.keys" ], [ "", "i.map" ], [ "", "Function" ], [ "", "Function" ], [ "", "JSON.stringify" ], [ "", "runInNewContext" ], [ "", "Object.defineProperty" ], [ "", "TypeError" ], [ "", "Function" ], [ "", "runInNewContext" ], [ "", "runInNewContext" ], [ "", "Uint8Array" ], [ "", "_enotsup" ], [ "", "_enotsup" ], [ "", "_enotsup" ], [ "", "Promise.reject" ], [ "", "_enotsup" ], [ "", "Symbol" ], [ "", "Symbol" ], [ "", "./_virtual/_rolldown/runtime.js" ] ], "mbr": [ "JSON.stringify", "Object.defineProperty", "Object.keys", "Promise.reject", "i.map", "t.code" ], "tgt": [ "Error", "Function", "JSON.stringify", "Object.defineProperty", "Object.keys", "Promise.reject", "Symbol", "TypeError", "Uint8Array", "_enotsup", "i.map", "runInNewContext" ], "funcs": [ [ "_enotsup", 69 ], [ "runInThisContext", 189 ], [ "runInNewContext", 238 ], [ "e", 307 ], [ "runInContext", 380 ], [ "createContext", 437 ], [ "isContext", 536 ], [ "compileFunction", 713 ], [ "constructor", 796 ], [ "runInThisContext", 826 ], [ "runInNewContext", 873 ], [ "runInContext", 931 ], [ "createCachedData", 986 ], [ "constructor", 1042 ], [ "constructor", 1112 ], [ "constructor", 1191 ], [ "measureMemory", 1249 ] ], "metrics": { "ast": { "op.eq": 2, "op.ne": 1, "op.lor": 4, "op.lnot": 4, "max_depth": 13, "call_count": 23, "node_count": 736, "member_count": 6, "op_density.eq": 0, "op_density.ne": 0, "op_density.lor": 0.01, "sequence_count": 4, "op_density.lnot": 0.01, "member_depth_max": 2 }, "file": { "size": 1829, "entropy": 5.15 }, "text": { "lines": 1, "top_char": 116, "max_ws_run": 1, "digit_ratio": 0, "space_count": 55, "char_entropy": 5.15, "unique_chars": 67, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 13, "top_char_ratio": 0.1, "avg_line_length": 1829, "lines_over_1000": 1, "max_line_length": 1829, "last_line_length": 1829, "long_token_count": 3, "whitespace_ratio": 0.03, "identifier_density": 150, "normalized_string_count": 13, "suspicious_string_ratio": 0.23, "suspicious_identifier_ratio": 0.17 }, "binds": { "count": 13 }, "binary": { "peak_region_bytes": 1829, "peak_region_entropy": 5.07 }, "source": { "function_count": 10 }, "imports": { "count": 1, "relative": 1, "relative_ratio": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 370, "count": 13, "shell": 1, "avg_length": 28.46, "max_length": 92, "path_count": 1, "avg_entropy": 3.76, "entropy_stddev": 0.66, "embedded_code_candidates": 2 }, "functions": { "count": 10, "nested": 1, "density": 1700, "anonymous": 1, "avg_params": 1.71, "code_ratio": 17, "max_params": 3, "one_liners": 17, "avg_name_length": 12.75, "no_params_count": 2, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 0.06, "max_nesting_depth": 1, "high_entropy_names": 2, "single_char_params": 29, "avg_param_name_length": 1 }, "identifiers": { "count": 150, "unique": 41, "avg_length": 8.56, "max_length": 31, "min_length": 1, "avg_entropy": 2.35, "reuse_ratio": 0.27, "length_stddev": 5.96, "has_digit_ratio": 0.02, "sequential_names": 6, "base64_like_names": 1, "single_char_count": 6, "single_char_ratio": 0.15, "high_entropy_count": 3, "high_entropy_ratio": 0.07, "all_lowercase_ratio": 0.44, "all_uppercase_ratio": 0.07, "underscore_prefix_count": 2 } } }, "id": 4, "mol": "O(As)H₂(DbPo₃)Md(Pa)", "path": "vm-0.51.1.tgz!!package/lib/esm/browser.js", "pid": 0, "refs": [ { "to": "./_virtual/_rolldown/runtime.js", "off": 7, "file": 3, "kind": "local" } ], "risk": 4, "sha": "2c811965e24f833a022df72d30645deb6e1aae94859b853e5f865b09f85ad387", "size": 1829, "traits": [ { "id": "metadata/import/npm/relative/1/_virtual/_rolldown/runtime/js::relative/1/_virtual/_rolldown/runtime/js", "conf": 0.95, "crit": 2, "desc": "imports ./_virtual/_rolldown/runtime.js", "spans": [ [ 6, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 140, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 813, 0 ] ] }, { "id": "metadata/package/files/runtime::javascript-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript file under lib" }, { "id": "micro-behaviors/data/serialize/json::json-stringify-identifier", "conf": 0.85, "crit": 3, "desc": "Serializes an identifier as JSON", "spans": [ [ 352, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-indirect-eval-text", "conf": 0.9, "crit": 3, "desc": "Indirect eval via comma operator", "spans": [ [ 226, 9 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-indirect-eval-variable", "conf": 0.9, "crit": 3, "desc": "Indirect eval executes an identifier value", "spans": [ [ 226, 11 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-createContext-call", "conf": 0.8, "crit": 3, "desc": "createContext symbol (vm or React/Vue/...)", "spans": [ [ 437, 13 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-runInContext-member", "conf": 0.8, "crit": 3, "desc": "runInContext member call on any receiver", "spans": [ [ 380, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-runInNewContext-call", "conf": 0.9, "crit": 3, "desc": "vm.runInNewContext() call symbol", "spans": [ [ 416, 15 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/compile::js-function-constructor", "conf": 0.9, "crit": 3, "desc": "Constructs a JavaScript function dynamically", "spans": [ [ 323, 8 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-indirect-eval", "conf": 0.7, "crit": 3, "desc": "Indirect eval or Function via comma operator", "spans": [ [ 226, 11 ], [ 852, 20 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Last line is over 1000 chars" }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Exactly one line exceeds 1000 chars" } ], "type": "javascript" }, { "ctx": [ { "b": "x(d*cA==UnuV6p?wQOfhz/3WJfje)pA==Cjy+Gdoz!%l2z*c7LA=(nwx(dAlyi7NXv@DmaBrC7izGGDmBw)E4vSc6Cq*Aj?z!{?fC5n\u003cwz/fVdCYWsxj7-RMv@#B6zxJ$xzB[.BxLzJPz/fVdCYUuzz!9AguVf[9x(v)gdsl8DBAIRwaz2.8y:-!iwmWirw{503BzkVhaAzQxnP4pmCscp^By/Ysc$K@Ken=[-y?mYhAY[I(E0Zn)x*2m3ygQ)%e]b3zB0#5TemyXQe]t3oc$LL9A:99XdlzMYBAIRwavZG\u003ev@#B6zyva\u0026e[(\u003eAA+funA=91hC42hnbZScZpFJJ-BAh8kxk7$6c$K\u0026QdpsOMe?O++dsC/JzEW^5z/cXrB-6=*lVl\u003c:wQ5qBwH}{OzyG{MwPS6nzxJ$xzB[.vwP{HWzGGDmBspYKBszSIB-7Yhx(v(iv@=c?By^*TzGGDmBspYHDU^nnaAP+TE0*o?j91[OB-IvxpHX6Iv@%tlwObT]wL^z=AaK6iC{)+=v@DmbwQ5q}D2m2ey+f{RvqH6$iW3gdwO#TcwPzi*y?kTJf)$G4BBv+zzEW^5z/cXiB3\u003c\u003e-By/Ysc$K\u0026Ox\u003ew=nD2Ntkw/$UdjZ-hqygQ)%v0)tBwHR.mA=ldArc-B]mriA!AWUr{xK@qgz^)D)v@@[qvrc16zdNQbaz(mxBrC47aA7\u003cmBA}?paA7.7wN/*maw#=XwODs0wfrdAwJ-gtzGP=ikvwwKy\u00260Guv03WkwGSmBBA}?pz!pb6EpdFhdlzMYBAIRwaz1+!z/fVdCYV(fzdmB1t%gtlaUXsRB-7Yhx(v(iv@Dj6x(4uIB-7Yhx(v(qwH}{OzyG{MwPS6nzxIz\u003ezEW^5z/c%Qe?Rl[D%o(cwHS4Jvr9F?v@=p5BuKbIvrlHpuT[1+wJKyuzGx]uBZ]JiAWUGIBszMUxLzJuuT[1+wJ:QMA=(m\u003ezD7p-B3\u003c\u003e-By/Ysc%{[iBzkVhB18DRwPS6nzxJIlvqEulxLzJuuT[1+wHS4FB-6=*pgXSpz/fVdCYUuBeoAs/A+funA=91uB-6=*pgXR", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "Symbol" ], [ "", "eval" ], [ "", "Object.keys" ], [ "", "i.map" ], [ "", "Function" ], [ "", "Function" ], [ "", "JSON.stringify" ], [ "", "runInNewContext" ], [ "", "Object.defineProperty" ], [ "", "TypeError" ], [ "", "Function" ], [ "", "eval" ], [ "", "runInNewContext" ], [ "", "runInNewContext" ], [ "", "Uint8Array" ], [ "", "./_virtual/_rolldown/runtime.js" ] ], "mbr": [ "JSON.stringify", "Object.defineProperty", "Object.keys", "i.map" ], "tgt": [ "Function", "JSON.stringify", "Object.defineProperty", "Object.keys", "Symbol", "TypeError", "Uint8Array", "eval", "i.map", "runInNewContext" ], "funcs": [ [ "runInThisContext", 93 ], [ "runInNewContext", 152 ], [ "e", 221 ], [ "runInContext", 294 ], [ "createContext", 351 ], [ "isContext", 462 ], [ "compileFunction", 651 ], [ "constructor", 734 ], [ "runInThisContext", 764 ], [ "runInNewContext", 815 ], [ "runInContext", 873 ], [ "createCachedData", 928 ] ], "metrics": { "ast": { "op.eq": 2, "op.ne": 1, "op.lor": 4, "op.lnot": 4, "max_depth": 13, "call_count": 15, "node_count": 496, "member_count": 4, "op_density.eq": 0, "op_density.ne": 0, "op_density.lor": 0.01, "sequence_count": 1, "op_density.lnot": 0.01, "member_depth_max": 2 }, "file": { "size": 1202, "entropy": 4.97 }, "text": { "lines": 1, "top_char": 116, "max_ws_run": 1, "digit_ratio": 0, "space_count": 37, "char_entropy": 4.97, "unique_chars": 62, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 5, "top_char_ratio": 0.1, "avg_line_length": 1202, "lines_over_1000": 1, "max_line_length": 1202, "last_line_length": 1202, "long_token_count": 1, "whitespace_ratio": 0.03, "identifier_density": 105, "normalized_string_count": 5, "suspicious_string_ratio": 0.6, "suspicious_identifier_ratio": 0.21 }, "binds": { "count": 7 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.02 }, "source": { "function_count": 8 }, "imports": { "count": 1, "relative": 1, "relative_ratio": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 172, "count": 5, "shell": 1, "avg_length": 34.4, "max_length": 92, "path_count": 1, "avg_entropy": 3.75, "entropy_stddev": 0.77, "embedded_code_candidates": 2 }, "functions": { "count": 8, "nested": 1, "density": 1200, "anonymous": 1, "avg_params": 1.67, "code_ratio": 12, "max_params": 3, "one_liners": 12, "avg_name_length": 13.64, "no_params_count": 2, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 0.08, "max_nesting_depth": 1, "high_entropy_names": 2, "single_char_params": 17, "avg_param_name_length": 1.85 }, "identifiers": { "count": 105, "unique": 34, "avg_length": 7.59, "max_length": 16, "min_length": 1, "avg_entropy": 2.25, "reuse_ratio": 0.32, "length_stddev": 4.75, "has_digit_ratio": 0.03, "sequential_names": 6, "base64_like_names": 1, "single_char_count": 6, "single_char_ratio": 0.18, "high_entropy_count": 1, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.53, "all_uppercase_ratio": 0.03, "underscore_prefix_count": 3 } } }, "id": 5, "mol": "O(As)H₂(DbPo₃)Md(Pa)", "path": "vm-0.51.1.tgz!!package/lib/esm/index.js", "pid": 0, "refs": [ { "to": "./_virtual/_rolldown/runtime.js", "off": 19, "file": 3, "kind": "local" } ], "risk": 4, "sha": "5b382ce4df7e0c08fe7925e63700d98653981f25a9e9436f47ce7d70d4d48d4c", "size": 1202, "traits": [ { "id": "metadata/import/npm/relative/1/_virtual/_rolldown/runtime/js::relative/1/_virtual/_rolldown/runtime/js", "conf": 0.95, "crit": 2, "desc": "imports ./_virtual/_rolldown/runtime.js", "spans": [ [ 18, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 527, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 751, 0 ] ] }, { "id": "metadata/package/files/runtime::javascript-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript file under lib" }, { "id": "micro-behaviors/data/serialize/json::json-stringify-identifier", "conf": 0.85, "crit": 3, "desc": "Serializes an identifier as JSON", "spans": [ [ 266, 14 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-createContext-call", "conf": 0.8, "crit": 3, "desc": "createContext symbol (vm or React/Vue/...)", "spans": [ [ 351, 13 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-runInContext-member", "conf": 0.8, "crit": 3, "desc": "runInContext member call on any receiver", "spans": [ [ 294, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-runInNewContext-call", "conf": 0.9, "crit": 3, "desc": "vm.runInNewContext() call symbol", "spans": [ [ 330, 15 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/compile::js-function-constructor", "conf": 0.9, "crit": 3, "desc": "Constructs a JavaScript function dynamically", "spans": [ [ 237, 8 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-eval-raw", "conf": 0.7, "crit": 3, "desc": "Executes JavaScript dynamically with eval()", "spans": [ [ 141, 4 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-eval-variable-argument", "conf": 0.9, "crit": 3, "desc": "JavaScript eval executes a variable argument", "spans": [ [ 141, 4 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-eval-variable-text", "atk": "T1059.007", "conf": 0.9, "crit": 3, "desc": "Calls eval() with an identifier argument", "spans": [ [ 141, 4 ], [ 146, 4 ] ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Last line is over 1000 chars" }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Exactly one line exceeds 1000 chars" } ], "type": "javascript" }, { "ctx": [ { "b": "DKp(rarR\u003eCvqPN1iV]RixkhH4w{D4Mz6yIrarR^Hb6EKrB7]Mgb03?\u003cfFkjqe?[L33lQDlar\u003eucB7ol8Acb/jzx.a:b2i5!wId.saA?PAzeS%cy?j-3z/M%\u003cyi7NI3lQDlar\u003e]MAaHjOar\u003eVvwozZ1a$K6zarR^JzeS%cy?j!Kar\u003eSovLqqlz7/Qvwb", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "^0.51.1", "@gjsify/unit" ], [ "^25.9.2", "@types/node" ], [ "^0.51.1", "@gjsify/cli" ], [ "^6.0.3", "typescript" ] ], "metrics": { "file": { "size": 2324, "entropy": 4.46 }, "binary": { "peak_region_bytes": 2324, "peak_region_entropy": 4.54 } } }, "id": 10, "path": "vm-0.51.1.tgz!!package/package.json", "pid": 0, "refs": [ { "to": "pkg:github/gjsify/gjsify", "off": 2069, "kind": "repository" }, { "to": "lib/esm/index.js", "off": 138, "file": 5, "kind": "local" }, { "to": "./lib/types/index.d.ts", "off": 248, "file": 8, "kind": "local" }, { "to": "./lib/esm/index.js", "off": 297, "file": 5, "kind": "local" }, { "to": "./lib/types/browser.d.ts", "off": 373, "file": 6, "kind": "local" }, { "to": "./lib/esm/browser.js", "off": 424, "file": 4, "kind": "local" }, { "to": "./globals.mjs", "off": 479, "file": 2, "kind": "local" } ], "risk": 1, "sha": "1e088d10b8c598df33829cd77d2d646ef8e219e2342c8f14ed819383486e145d", "size": 2324, "traits": [ { "id": "supply-chain/missing-author", "conf": 0.5, "crit": 3, "desc": "Package has empty or missing author field", "spans": [ [ 0, 21 ] ] } ], "type": "package.json" } ], "rev": "c7f7e", "v": "8" } }