{
  "ml": {
    "v": "7",
    "id": 8876,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000023345151930698194,
    "type": "javascript",
    "version": "v18.18",
    "analyzed_at": "2026-09-22T17:32:12Z"
  },
  "path": "package/bundles/compiler.umd.min.js.map##unicode-escape@1184562",
  "raw": {
    "rev": "a041b",
    "files": [
      {
        "id": 8876,
        "mol": "O₂(AsS₂)H₄(Cm₆CrDb₈F)Md₃(BkPa₂)",
        "pid": 1254,
        "rel": "fetched",
        "sha": "87a37501e1c35b7feeccf7aa232e945ef7cae77cb1443e4bb005cbfaaa0daec6",
        "via": "https://registry.npmjs.org/@angular/compiler/-/compiler-5.2.10.tgz",
        "path": "pkg:npm/%40angular/compiler@5.2.10!!package/bundles/compiler.umd.min.js.map!!package/bundles/compiler.umd.min.js.map##unicode-escape@1184562",
        "risk": 15,
        "size": 586729,
        "type": "javascript",
        "depth": 4,
        "facts": {
          "imp": [
            [
              "",
              "toBase64VLQ"
            ],
            [
              "",
              "sourcesIndex.get"
            ],
            [
              "",
              "sourcesIndex.get"
            ],
            [
              "",
              "impact"
            ]
          ],
          "mbr": [
            "impact.At",
            "segment.sourceUrl",
            "sourcesIndex.get"
          ],
          "tgt": [
            "impact",
            "sourcesIndex.get",
            "toBase64VLQ"
          ],
          "metrics": {
            "ast": {
              "op.add": 1,
              "op.div": 1,
              "op.mul": 2,
              "op.sub": 6,
              "op.band": 1,
              "max_depth": 11,
              "call_count": 5,
              "node_count": 25222,
              "member_count": 3,
              "op_density.add": 0,
              "op_density.div": 0,
              "op_density.mul": 0,
              "op_density.sub": 0,
              "sequence_count": 2,
              "op_density.band": 0,
              "member_depth_max": 2
            },
            "file": {
              "size": 586729,
              "entropy": 4.65
            },
            "text": {
              "lines": 1,
              "top_char": 101,
              "max_ws_run": 44,
              "digit_ratio": 0,
              "space_count": 154449,
              "char_entropy": 4.65,
              "unique_chars": 113,
              "top_char_null": 0,
              "escape_density": 0,
              "lines_over_200": 1,
              "lines_over_500": 1,
              "string_density": 4,
              "top_char_ratio": 0.06,
              "avg_line_length": 586729,
              "invisible_chars": 1,
              "lines_over_1000": 1,
              "max_line_length": 586729,
              "non_ascii_ratio": 0,
              "last_line_length": 586729,
              "long_token_count": 26,
              "whitespace_ratio": 0.26,
              "identifier_density": 90,
              "octal_escape_count": 3,
              "unusual_whitespace": 6,
              "normalized_string_count": 4,
              "repeated_char_sequences": 3550,
              "suspicious_string_ratio": 1,
              "suspicious_comment_ratio": 0.67,
              "suspicious_identifier_ratio": 0.04
            },
            "binds": {
              "count": 1
            },
            "binary": {
              "peak_region_bytes": 17408,
              "peak_region_entropy": 5.48
            },
            "strings": {
              "sql": 1,
              "bytes": 460799,
              "count": 4,
              "shell": 1,
              "very_long": 1,
              "avg_length": 115199.75,
              "max_length": 459907,
              "avg_entropy": 3.64,
              "entropy_stddev": 2.11,
              "high_entropy_count": 1,
              "embedded_code_candidates": 2
            },
            "comments": {
              "code": 1,
              "chars": 586481,
              "count": 3,
              "lines": 3,
              "base64": 1,
              "todo_count": 1,
              "high_entropy": 1,
              "url_in_comments": 1
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_unknown": 1
            },
            "identifiers": {
              "count": 90,
              "unique": 69,
              "avg_length": 5.75,
              "max_length": 15,
              "min_length": 1,
              "avg_entropy": 2.17,
              "reuse_ratio": 0.77,
              "length_stddev": 2.95,
              "has_digit_ratio": 0.01,
              "sequential_names": 2,
              "base64_like_names": 1,
              "single_char_count": 2,
              "single_char_ratio": 0.03,
              "high_entropy_count": 1,
              "high_entropy_ratio": 0.01,
              "all_lowercase_ratio": 0.87,
              "all_uppercase_ratio": 0.01
            }
          }
        },
        "traits": [
          {
            "id": "metadata/build/minifier::js-min-or-map-basename",
            "conf": 0.9,
            "crit": 3,
            "desc": "JavaScript minified or map basename"
          },
          {
            "id": "metadata/build/minifier::void-zero",
            "conf": 0.6,
            "crit": 2,
            "desc": "Uses minifier-style void 0 for undefined",
            "spans": [
              [
                114290,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/comment::source-comment-bytes-over-300",
            "conf": 0.92,
            "crit": 2,
            "desc": "Source has over 300 comment bytes"
          },
          {
            "id": "metadata/file/string/identity::source-text-token",
            "conf": 0.95,
            "crit": 3,
            "desc": "Contains the sourceText identifier",
            "spans": [
              [
                32760,
                10
              ]
            ]
          },
          {
            "id": "metadata/file/string/identity::userinfo-token",
            "conf": 0.95,
            "crit": 3,
            "desc": "References a userInfo string literal",
            "spans": [
              [
                567115,
                8
              ]
            ]
          },
          {
            "id": "metadata/lang/generated::automatically-generated-source-marker",
            "conf": 0.85,
            "crit": 2,
            "desc": "Generated source provenance marker",
            "spans": [
              [
                474146,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                273,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                22428,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                3153,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "spans": [
              [
                8558,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                1676,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                27329,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                996,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/completeness::has-config-arg",
            "conf": 0.75,
            "crit": 3,
            "desc": "func parameter likely used as config/options",
            "spans": [
              [
                498025,
                93
              ],
              [
                576464,
                85
              ]
            ]
          },
          {
            "id": "metadata/package/testing/corpus::xss-category-label",
            "conf": 0.9,
            "crit": 3,
            "desc": "XSS attack category label",
            "spans": [
              [
                69634,
                3
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/configuration::node-http-options-object",
            "conf": 0.86,
            "crit": 3,
            "desc": "HTTP options object with host or port",
            "spans": [
              [
                567971,
                84
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/build::network-destination-function-binding",
            "mbc": "C0002",
            "conf": 0.94,
            "crit": 3,
            "desc": "Network destination assigned from call",
            "spans": [
              [
                496957,
                35
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "References a public code-forge URL",
            "spans": [
              [
                35140,
                19
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::encoded-url-doc-context",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Encoded URL documentation context",
            "spans": [
              [
                565463,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::encoded-url-mdn-doc-context",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.95,
            "crit": 3,
            "desc": "Encoded URL references MDN documentation",
            "spans": [
              [
                112647,
                22
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::encoded-url-public-doc-context",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Encoded URL public documentation",
            "spans": [
              [
                117949,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/crypto/hash/digest::digest-method-call",
            "conf": 0.8,
            "crit": 3,
            "desc": "Calls a digest() method",
            "spans": [
              [
                319513,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/config/schema::uppercase-host-assignment-label",
            "conf": 0.6,
            "crit": 1,
            "desc": "Uppercase HOST assignment label",
            "spans": [
              [
                107259,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call",
            "conf": 0.88,
            "crit": 3,
            "desc": "Calls a matcher in a conditional expression",
            "spans": [
              [
                70859,
                20
              ],
              [
                90333,
                17
              ],
              [
                95648,
                25
              ],
              [
                97232,
                14
              ],
              [
                97563,
                80
              ],
              [
                121689,
                25
              ],
              [
                150993,
                21
              ],
              [
                159235,
                31
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/dispatch::object-type-dispatch-switch",
            "conf": 0.93,
            "crit": 3,
            "desc": "Switch dispatches on an object type field",
            "spans": [
              [
                310110,
                22
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/charcode::charcode-at",
            "conf": 0.7,
            "crit": 3,
            "desc": "charCodeAt() method call",
            "spans": [
              [
                1770,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/binary::buffer-slice-call-name",
            "conf": 0.9,
            "crit": 1,
            "desc": "slice method call name",
            "spans": [
              [
                942,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/envelope::result-assignment-key",
            "conf": 0.4,
            "crit": 1,
            "desc": "Result field or assignment key",
            "spans": [
              [
                35549,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/schema-object::result-field-key",
            "conf": 0.9,
            "crit": 1,
            "desc": "JSON-like object result field",
            "spans": [
              [
                157206,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/arithmetic::lsb-bit-mask-source",
            "conf": 1.0,
            "crit": 3,
            "desc": "Source contains low-bit mask syntax",
            "spans": [
              [
                372053,
                5
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/arithmetic::source-xor-operation",
            "conf": 1.0,
            "crit": 3,
            "desc": "Source references XOR syntax",
            "spans": [
              [
                468158,
                3
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::indexed-array-element-copy",
            "conf": 0.8,
            "crit": 2,
            "desc": "Copies one indexed array element to another",
            "spans": [
              [
                28766,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::js-array-fill-call",
            "conf": 0.8,
            "crit": 3,
            "desc": "JavaScript array fill call",
            "spans": [
              [
                417680,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call",
            "conf": 0.72,
            "crit": 3,
            "desc": "Joins array with a short delimiter",
            "spans": [
              [
                859,
                10
              ],
              [
                7739,
                9
              ],
              [
                93659,
                10
              ],
              [
                93696,
                11
              ],
              [
                570488,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call",
            "conf": 0.72,
            "crit": 3,
            "desc": "Sorts a JavaScript array",
            "spans": [
              [
                149351,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read",
            "conf": 0.8,
            "crit": 2,
            "desc": "Reads an array element into a variable",
            "spans": [
              [
                53159,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::tostring-token",
            "conf": 1.0,
            "crit": 3,
            "desc": "References the toString conversion method",
            "spans": [
              [
                77724,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/replace::keyed-replacement-call",
            "conf": 0.96,
            "crit": 3,
            "desc": "Replaces text using a keyed replacement table",
            "spans": [
              [
                86475,
                14
              ],
              [
                86493,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/search::compiled-js-pattern-set",
            "conf": 0.9,
            "crit": 3,
            "desc": "Compiles a set of JavaScript regex patterns",
            "spans": [
              [
                94521,
                11
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/delete/directory::source-directory-delete-target",
            "conf": 0.9,
            "crit": 3,
            "desc": "Delete command directly targets src",
            "spans": [
              [
                53754,
                67
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/payload/config::api-named-byte-array-const--rx-4",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.92,
            "crit": 1,
            "desc": "SCHEMA identifier (config name)",
            "spans": [
              [
                56730,
                0
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/syntax::js-split-custom-delimiter",
            "conf": 0.8,
            "crit": 3,
            "desc": "Split with custom delimiter",
            "spans": [
              [
                68776,
                11
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/hidden-payload/extensions/session::management-id-comparison--rx-8",
            "conf": 0.9,
            "crit": 3,
            "desc": ".indexOf() call against extension/id ID",
            "spans": [
              [
                176445,
                19
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/install-hook/scripts/hook-file::install-hook-unauthorized-code-package-reference",
            "atk": "T1195.002",
            "conf": 0.86,
            "crit": 3,
            "desc": "Banner names package near unauthorized code",
            "spans": [
              [
                188289,
                11
              ],
              [
                357585,
                11
              ],
              [
                552111,
                11
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::js-large-minified-bundle",
            "conf": 0.92,
            "crit": 2,
            "desc": "Large minified JavaScript bundle",
            "spans": [
              [
                0,
                586729
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::js-medium-minified-line",
            "conf": 0.9,
            "crit": 2,
            "desc": "JavaScript contains a long minified line",
            "spans": [
              [
                0,
                586729
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::const-let",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 const/let declarations",
            "spans": [
              [
                366183,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::catch-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a catch error handler",
            "spans": [
              [
                128642,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::finally-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a finally cleanup handler",
            "spans": [
              [
                337960,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::try-block-open",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains the opening of a try block",
            "spans": [
              [
                114290,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-insecure-remote-http-url",
            "conf": 0.9,
            "crit": 3,
            "desc": "Contains a hardcoded insecure HTTP URL",
            "spans": [
              [
                117937,
                23
              ],
              [
                539258,
                11
              ],
              [
                565469,
                19
              ],
              [
                566370,
                22
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url",
            "conf": 0.75,
            "crit": 3,
            "desc": "Contains a hardcoded remote HTTP(S) URL",
            "spans": [
              [
                113201,
                18
              ],
              [
                117901,
                18
              ],
              [
                117937,
                23
              ],
              [
                539258,
                11
              ],
              [
                565469,
                19
              ],
              [
                566370,
                22
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/scheme::cleartext-http-url-code-literal",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code embeds cleartext HTTP URL literal",
            "spans": [
              [
                117937,
                52
              ],
              [
                539258,
                25
              ],
              [
                565469,
                50
              ],
              [
                566370,
                36
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/create::browser-iframe-element",
            "conf": 0.78,
            "crit": 1,
            "desc": "References an iframe HTML element",
            "spans": [
              [
                53385,
                0
              ]
            ]
          },
          {
            "id": "metadata/build/bundler/asset::js-any-bundle-output",
            "conf": 0.95,
            "crit": 2,
            "desc": "Contains bundled or minified JavaScript",
            "uses": [
              44,
              45
            ],
            "spans": [
              [
                0,
                586729
              ]
            ]
          },
          {
            "id": "metadata/build/bundler/javascript-bundle-markers::js-multi-line-blob-recognized-text",
            "conf": 0.95,
            "crit": 1,
            "desc": "Text tokens identify a normal JavaScript bundle blob",
            "uses": [
              3
            ],
            "spans": [
              [
                32760,
                0
              ]
            ]
          }
        ]
      }
    ]
  }
}