{ "llm": { "conf": 0.8953939, "grade": "hostile", "model": "Qwen/Qwen3.6-27B", "review": false, "outcome": "hostile", "interpretation": "Typosquatting big.js with hidden loader" }, "ml": { "v": "7", "eng": "2.1.0", "lvl": 0, "conf": 100, "mods": [ { "cls": 0, "raw": 0.98281896, "rte": "az", "prob": 0.98281896 }, { "cls": 2, "raw": 0.8505627, "rte": "az/npm", "prob": 0.8505627 } ], "prob": 0.8505627, "files": [ { "id": 0, "lvl": 0, "conf": 100, "prob": 0.8505626916885376, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.7211303114891052, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.8474295139312744, "type": "package.json" }, { "id": 3, "lvl": -1, "conf": 0, "prob": 0.7519068121910095, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00001006325055641355, "type": "markdown" }, { "id": 5, "lvl": -1, "conf": 0, "prob": 0.000006298223979683826, "type": "markdown" } ], "version": "v18.18", "analyzed_at": "2026-06-24T01:45:45Z" }, "path": "thurdweb-0.0.8.tgz", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000@}Uo)rmkPA{iI@iEV:?K#iMd07?DL=Q:uo/]*0jsry50CE1p1JZosblime{03#W9=DgZ]jIVx8}Zq", "ln": 0 } ], "mol": "O(S₂)Md(Pa₃)", "sha": "8c2cd4453c28ab5fbd8a1062bd6e4e51cec1ac83faccc6b9ebab82d38959a1a0", "path": "thurdweb-0.0.8.tgz", "refs": [ { "to": "pkg:github/mikemcl/big.js", "off": 0, "kind": "repository" } ], "risk": 243, "size": 16627, "type": "npm", "facts": { "metrics": { "file": { "size": 16627.0, "entropy": 7.98, "size_bytes": 16627.0 }, "parse": { "error_count": 1.0 }, "binary": { "overall_entropy": 7.98 }, "consistency": { "unused_runtime_deps": 1.0 } } }, "ident": { "name": { "value": "thurdweb", "source": "npm.name", "verified": false }, "urls": [ { "url": "https://github.com/MikeMcl/big.js.git", "kind": "repository", "source": "npm.repository.url" } ], "trust": "unsigned", "emails": [ "M8ch88l@gmail.com" ], "authors": [ { "name": "Michael Mclaughlin", "role": "author", "email": "M8ch88l@gmail.com", "source": "npm.author" } ], "version": { "value": "0.0.8", "source": "npm.version", "verified": false }, "identifier": { "value": "thurdweb", "source": "npm.name", "verified": false } }, "traits": [ { "id": "metadata/package/manifest/entrypoint::pkg-exports-field-entry", "conf": 0.6000000238418579, "crit": 2, "desc": "\"exports\": field in package.json", "from": [ { "file": 2 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::from-str-loader-call", "atk": "T1195.002", "conf": 0.9800000190734863, "crit": 1, "desc": "Calls from_str loader method", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::noop-loader-promises", "atk": "T1195.002", "conf": 0.9700000286102295, "crit": 4, "desc": "Loader chain swallows promise results", "from": [ { "file": 3 } ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::author-retained-original", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.699999988079071, "crit": 1, "desc": "author retained original" }, { "id": "metadata/library/structure::js-umd-wrapper-any", "conf": 0.8999999761581421, "crit": 2, "desc": "Universal Module Definition (UMD) wrapper", "from": [ { "file": 1 }, { "file": 3 } ] }, { "id": "metadata/library/structure::js-any-bundle-output", "conf": 0.949999988079071, "crit": 2, "desc": "Any JS bundle or minified asset output", "from": [ { "file": 1 }, { "file": 3 } ] }, { "id": "metadata/library/structure::js-umd-wrapper-amd", "conf": 0.8999999761581421, "crit": 2, "desc": "UMD AMD branch marker", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.8500000238418579, "crit": 2, "desc": "Package has repository URL" }, { "id": "metadata/package/manifest/description::has-description", "conf": 0.75, "crit": 3, "desc": "Package has meaningful description" }, { "id": "metadata/file/format::i18n-lang-code-js-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "JavaScript language code basename", "from": [ { "file": 3 } ] }, { "id": "metadata/file/metrics::low-string-density-large-file", "conf": 0.8999999761581421, "crit": 1, "desc": "Low string density in source", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.8999999761581421, "crit": 2, "desc": "Repository uses common git host" }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.949999988079071, "crit": 4, "desc": "Impersonates MikeMcl/big.js repository" }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::slot-loader-stub", "atk": "T1195.002,T1059.007", "conf": 0.9980000257492065, "crit": 5, "desc": "Slot loader runs during import", "from": [ { "off": 14953, "file": 1, "line": 606 }, { "off": 14953, "file": 3, "line": 606 } ], "spans": [ [ 14996, 31 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.8999999761581421, "crit": 2, "desc": "Package has repository field" }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation-clone", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.9900000095367432, "crit": 5, "desc": "Impersonation of the popular big.js library", "from": [ { "file": 2 } ] }, { "id": "objectives/anti-static/obfuscation/code-metrics/string-blob::js-base64-candidate-comment-heavy", "atk": "T1027", "mbc": "B0032", "conf": 0.8999999761581421, "crit": 1, "desc": "Benign context: ≥25% comment ratio", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::i18n-lang-code-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "Two- or three-letter language code basename", "from": [ { "file": 1 }, { "file": 3 } ], "spans": [ [ 0, 6 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::fallback-try-require", "atk": "T1195.002", "conf": 0.8999999761581421, "crit": 1, "desc": "try block probes dependency with require", "from": [ { "file": 1 } ] }, { "id": "metadata/package/quality/source::has-multiple-entries", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has multiple entry points", "from": [ { "file": 2 } ] }, { "id": "metadata/package/manifest/publishing::has-funding", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has funding information" }, { "id": "metadata/package/manifest/entrypoint::pkg-module-field", "conf": 0.6000000238418579, "crit": 2, "desc": "\"module\": field in package.json", "from": [ { "file": 2 } ] }, { "id": "metadata/file/format::vocab-string", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary string", "from": [ { "file": 1 } ] }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"build\": script in package.json" }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::require-slot-loader", "atk": "T1195.002", "conf": 0.9950000047683716, "crit": 4, "desc": "Requires slot loader module", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::vocab-invalid", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary invalid", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/init::top-level-require-method-call", "atk": "T1195.002", "mbc": "B0024", "conf": 0.8999999761581421, "crit": 1, "desc": "Top-level method call on require() result", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::i18n-validation-vocab", "conf": 0.9700000286102295, "crit": 1, "desc": "Form-validation vocabulary in dense non-ASCII file", "from": [ { "off": 3292, "file": 1, "line": 103 }, { "off": 3292, "file": 3, "line": 103 } ] }, { "id": "metadata/file/format::i18n-lang-code-module-basename", "conf": 0.9700000286102295, "crit": 1, "desc": "Module JavaScript language code basename", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::vocab-number", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary number", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::swallowed-loader-errors", "atk": "T1195.002", "conf": 0.9700000286102295, "crit": 1, "desc": "Empty catch hides loader errors", "from": [ { "file": 1 } ] }, { "id": "metadata/file/format::i18n-lang-code-locale-module", "conf": 0.8999999761581421, "crit": 2, "desc": "Language-code-named locale module with i18n content", "from": [ { "off": 2354, "file": 1, "line": 66 }, { "off": 2354, "file": 3, "line": 66 } ], "spans": [ [ 0, 6 ] ] }, { "id": "metadata/file/format::i18n-locale-file", "conf": 0.9700000286102295, "crit": 2, "desc": "JavaScript/TypeScript i18n locale string catalog", "from": [ { "file": 1 }, { "file": 3 } ], "spans": [ [ 0, 6 ] ] }, { "id": "objectives/supply-chain/metadata-anomaly::npm-phantom-runtime-dependency", "atk": "T1195.002", "conf": 0.6000000238418579, "crit": 3, "desc": "Declares a runtime dep no module imports", "spans": [ [ 0, 38 ] ] } ] }, { "ctx": [ { "b": "aA/W@fFk6?3lQ/vavdb\u003ezddl%efFLkB95@QwNPU9eP+[.B-Rapy?Wv0vrcSow]zYjvrb*\u003eBAg/gC}A#QwN/B}x(v(iwmYm+zddl6vrc77xL?s5x\u003e5+83lQ/vavy6^D2^RixMLvBv\u003c@JQfFUHdo\u003e!9Jvp:l$o\u003ee0FB.tx7x(jv!asXGRxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1ZiUlQ::qmj@B/4gjjcfawmIasH\u0026AzEW^5z/cWCm[=YBk$\u0026ZIDKQr8aszqMwGV5oA+P39cP.+AarU\u0026oAV^X.xdKG04giKKarR^HfdFC3dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([\u003cmmoZDk%!mlavFT/k#*PTqY)LtdK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK(]34giKK4gjj2arSr\u003caxi2=ay]4}vrDydaA?gfB.bRpvR6v]Coy:BB95KlwGUY8By/8@A=SvEx([35zxK4mwGV5ovru6\u003eaAy[dxjVcp4giKKarR^HfdEzrarR^HasXHkxK@r6vr=H6B.@ms", "ln": 14, "col": 11, "line": 2 }, { "b": "B0bykaA8jgA::67z/fRsx(n9jy\u003c6Jgxcp-0C4(2iz/dPB3lQDlarScRwncifvqYP#B8=kxefFwswft\u0026fCoz9zBz8!mwOkB[x)a5gwQ5fjzE)ZcB1N[earR^HasY2N3lQDlavG3GjS(HlefD5TarR^HarR^Hatkw\u003cfD+EQawCd7uQNZ13jNs+arR^WdH=.carR^HdJ?Y7wGV2iB-4", "ln": 520, "col": 63, "line": 18 }, { "b": "3lQDlatkhN3lQDlarScRra]?=zE)D?Bzk]faz2!pz/fc7Brz#bmjxu/BrC1fwftt)zE)l#xDRIjx\u003e7*0Bz\u003e91A+PA7aAz4nB-Iwvaz2!pz/fc7Bzkf1az#atvruj4zy#w9arR^HasXGZn)#)Kq!6\u0026ZAc9juB.$P0A=Tn:eJk9/3lQDlarScReIO}kfFCgmazC)tBzbkdze0)4zfoXrA+e:0zeA\u003c4wmYo]wQ5fjzE)ZcaA?gfB.8Xlw/$I8", "ln": 1315, "col": 2, "line": 38 }, { "b": "vr=H6B.@mwwN/T}zdNP}wN(]{CYmOswO#PjC42ifwGU]6ayMxVx\u003eF$tvS==nBzbxfaz++ex(\u003eFiB0bvsBrCdjw]zZ1wN)z53lQDlarSc!4gjj2arTGHauZ\u00265f!sB\u0026arR^HarR^HarSr\u003cats{WzY*+*fFCgmfBXu#3lQDlatkhN3lQDlarScRs7(e.", "ln": 1731, "col": 24, "line": 49 }, { "b": "dK([$dK([$dK([$dK([$dK([$dK)7X3jNsK3lQDlatkw\u003cmriA!AV/jgB8$=5wPGEk3lQDlawLi%miB-ocTg4]xd^}ut{7HC4gjj2arTlJrZxzJl)aSnpc?Pyas!MZnP5YWy?WA5cObYlarR^HnLSqLoI4SVl@k0?aw2sek$\u003c\u003cras!MZwmYm+zddl6Abn@)wPGjI4gjj2arTlJrZxzJl%\u0026?^auZ\u0026spf6UOnKKWKaszhFB-7-7zF78ez!9Abedz{", "ln": 2255, "col": 82, "line": 61 }, { "b": "y\u0026%qw4gjj2arR^RfawmharR!sB-7Yhx(v(iltp6XzyDYP4gjj2arR^HC42zlCPYc(Bzbxfi$hJa3lQDlarR^WfcAY3vpB4:ay/tcB98CBv@#TfaA.:lxjSifx([3bB-X:zwP]:o3lQDlarR!vw/@GBd0M\u003eGzGx]dzEWl@w/%AOxdknLDKQr8arR^HarR!EwPS6nzxJ*tjV$}JrzC}JmOcuzl)9*6ayPq6B.$YcBAo6JwO#d5xDPD3jS(B3koKr1x\u003eH^3diHU]zE[2mltp6XzyETR3lQDlarR!P4giKKarR^HarSr\u003cavHu\u003ey?Wx/By^6l3lQDlarR!vw/@HtazC.mByx5%wP8f6ltp6YaBsL8ao", "ln": 2895, "col": 42, "line": 87 }, { "b": "arU[YB09Q*zz2#(4gjj2arR^HarU[YwGTbUzz2GZ4gjj2arR^HarU[Yv\u003c0]Szz2AKB8kM2wHF#?4gjj2arR^HEir9qB7DFv4gjj2arR^HarUxgasItSAaJ%1az@qBjV%]nB98CpzF7sCaBsL8arR^HarR^HarUxgasGM\u003cxd!mEA+P39au.\u003eJaARTDwGSrDaAR)FwP8f6zxH8=jS(aYx\u003eIc$BseHWDKQr8arR^HarR^HarR!GxMw3naxiS9wKQSWz/Nl$pf6UOnKKWKasztvy\u0026%qpdlv$CarR^HarR^HarQ", "ln": 3189, "col": 7, "line": 99 }, { "b": "y\u0026%qw4gjj2asY2N3lQE6B-7Yhx(v(iAa9^dwHI^Oaz@RJDKQr8arR!Ivr9G4efFTTaz#0S4giKKarR^Hx\u003ewFoaX(3imn=YAe{7VCBsq2QdiJ%D3lQDlarR!GxMw3navQr\u003ez/Nl$pf6UOnKKWKasz5Hzdm6%cN?a^3lQDlaBKXa4gjj2arSr\u003cavG^.wPzT4zE\u003c@ix\u003eIro4gjj2arU[YB09Q*zz2BjvraUQc[)7)jV%]neHIV9asIaIjS[R{B8kM2wHGnZefDJ0diHU]f/]*K4gjj2arSr\u003cavG^Jx(do{aAhmkzGF8L3lQDlazCBgc[5THjS[R{x(mD)CU.{1cOu+}diH!%eIOW%zxI7+zz2%vAbn@)wHF]UcOcw/cN?a^3jNs+arR^WfcAYdAbPS9zGGP3y-)tdA=12I3lQDlazCBgc[5^LjS[R{B7F^2v}WnzwIm:DdiH!%fEXb\u003e4giKKarR^HarSr\u003cavG^.wPzT4zE\u0026", "ln": 4120, "col": 36, "line": 139 }, { "b": "ay#VUazA[D3lQDlarR!ras/O$d@D$Xy?Wx\u003cc$%!OatCrb4gjj2arR^HzxI7+zz30MvSMTix(mMifF1tXdlv$CarR^HEir9qB7DFdw/@HkauQ=2diJ%D3jNs+arR^Hatkw\u003cnP5SYxjV9o4gjj2arR^HwGTbUzz2:pzFa68i$hJtarR!P4giKKarR^HzFQBUaz@/FwO#d5xGDUg4gjj2arSr\u003cavG^.wPzT4zE\u003c@bwNPa-zF78rwPzZge!5dgarR!sz/M%Gx=]LYfGQy\u003eauQ=:y-\u003e5Kaz@/wxKL{EBsp\u0026Lau.\u003egcOM]fdiHb\u003ex/=+h4gjj2arUxgasH}DjV%{9y:*GN4giKKarR^HarSr\u003cax\u0026t%z.qFaarR^HarU[Yv\u003c0]S", "ln": 4538, "col": 17, "line": 158 }, { "b": "3jNs+arR^Hatkw\u003cCW\u003c%0wl*r(B0bNrwGUI$xk8Dgvp\u003cQ)AV/EqwGUI$xk8DgBzb98az\u003eLjayX[8A=l8rwmYo]B-n@x3lQDlarR!zz/PzijQ?-varR^HarR!Ez6g#8jS(E4cmf\u003cWv{s1+t{8r]at\u003eo?D\u003c{A9arR^HarR!Ez6g#8jS(H5cmf\u0026-CW\u003c%0", "ln": 6186, "col": 34, "line": 226 }, { "b": "x\u003ezSsCQ%$Fz:![\u0026z/fc7Bzkf1efFUFph+2@wPzYraBsL8arR^HC42zlwGTbUCRiLU4gjj2arR^HB09Q*CRiFUyhW*7c){w\u003eedz}earR^Haz@q+aAGeKwO#d5xGDUg4gjj2arSr\u003cavQJ]z/fc7Bzkf1az#atvruj4zA!NqarR^Hx\u003ewFown:[YAbPS9zGGP3y:*GN4gjj2arR^HB09Q*B1Q%ovraUQc[)7)d\u003cclTau*]5au{$@e*?+(aAGeRy?Wx\u003cc]0d[iV]^$diHb-c$KI-ats{5asy.FauyR)wH/bSas!NCi$hJa3lQDlarR^WfcB2dA=2l3az#atvruj4zy#w9arR^HEir9qB7DFdw/@HkauQ=2diJ%D3lQDlarR!szV", "ln": 7185, "col": 18, "line": 264 }, { "b": "wO=B0azCBgc$KI-az@RJDKQr8arR^HarR!FauZ\u0026*e]$\u0026yv}v5xefFHMas!MZe*?+(aAGeRy?Wx\u003cc$K??4gjj2arR^HEglJaarR!Paz2wgwGUY0asIaIj%hNeaBsL8arR^HarU.F", "ln": 7629, "col": 9, "line": 280 }, { "b": "zxK4mwGVe8y\u0026%qiz!paUx\u003eFMlefF\u003eK4gjj2asXGRarR^HarSuXx\u003ewGfxK#DixKM6}aARpdaAH$dwGVe8y\u0026%qw4gjj2asY2N3lQD/e[n:qauZ\u0026VB-7Yhx(v(id0Wl:DKQr8arR!Ivr9G8B8CM4edz}earR^HaB21(aARphB1v+carR^HarU]sauZ\u0026(", "ln": 8195, "col": 51, "line": 306 }, { "b": "avy6:Aa9=#az2!pz/fc7BAo5z3lQDlazCBgc#f}GjS[L\u0026aAz4nB-IvxyAL!-y-)4bx(!f6xcozYf^5I1eIPr@3jNs+arR!wauZ?}yAL+.CW\u0026vxwO#d5xEL5^asI4GjS]2We]k9pxlm/oau{#:auySYi$hJa3lQDlatkw\u003clVl*Xvrb{4wnbW\u003cBrC4ray]h0x-", "ln": 8622, "col": 7, "line": 327 }, { "b": "auZ\u00260f/{Hdd}{a*azJ$!aBsL8arR^HarUxgasIFAtwmv=aW3@[v{rUMdiJUxBAIRwaB4y2x\u003cz\u0026BaBdE3x\u003cz\u0026/azC[mwOibIatC01at2rf4gjj2arV7w3jNs+arR^", "ln": 8789, "col": 11, "line": 333 }, { "b": "arR!P4giKKarR^HC42zlvR^OrvSTdzzy=]uze.3GA+N6l3lQDlarR!oDltu[vLh.rx\u003e7Z5dj+]narR^HarU9bauZ\u0026Ry-\u003e\u003e-vLhFdzFa68edz}earR^HayP7ejS[e=y?mG%Bz9im3lQDlarR!EauZ\u0026Qe]$\u0026yv}v5xefFzrdj=O:atkw\u003cA+f8@x(mD)AT-u#arR^HaAzovjS[+$y?mG%Bz9im3lQDlarR!DauZ\u0026)efD5TarR^HarR^HarR^Hatkw\u003cADMhwx\u003eqg74gjj2arR^HABO", "ln": 9669, "col": 2, "line": 368 }, { "b": "3lQDlarR!EwPS6nzxKfRAboVrd0Wm64gjj2arV7w3jNs+arR!Ivr9Gnv\u003c0]SCRiFUB8kM2wHF#U4gjj2arR^HCX50XaB2IIedz}earR^HaBdDtjS]25v\u003en5@arR^HarU@vauZ\u0026)e[E9N3jNs+arR^WfcAX$BzblaaBmQtz:aWrarR^Hx\u003ewFoa:vH3fKk/GD\u0026", "ln": 13039, "col": 17, "line": 508 }, { "b": "auZ\u00264i$hJa3lQDlarR^WfcBe7B9hqvaz(mxBrC47aBmQtz.qFaarR^HarU]sauZ\u0026KD1w9Yatv7.4gjj2arV7w3jNs+arR!Le[l1!aB4xT4gjj2arU}ZwGTbUD1x5D3jNs+arR!EwPS6nzxKi^4gjj2Eld(B4gjj2BAhTHDKQr8arR!pz/fSray]z2auZ\u0026/wPq\u003cbA+cTyAa9^5wPPIBy\u0026sztdlv$CarR^Hwn+%gw].*buVQsfc[bPjarV7Pv{%E?xDOZmA=M8sdiJ%D3lQEt4giKK4gjj2fdEzrarR^Raw#=)B-IvxvixD0Coxj^xcqziz/YFjC42ifwGUYdaARpdaA?gfB.8Xlw/#hex(+y-x\u003eFM9z!a0bzY\u003cdnwGVe8y\u0026%qiz!paUx\u003eFMle!5dgarSc!4gjj2p+DQ6wfs2Tw{503BzkVhasIH:aBsL8arR^HC42zlD1Rkzedz}earR^HaB21(aARphB1v+carR^HarT0+xcotWCRiGAzGx]uBZ]JiAX4UbarR^HarU8njS[#4B1v+carR^HarUbojS(d#auZ\u0026+wP]m-x\u003eF\u0026tdjD(\u003ci$hJa3lQDlazCBgc)r\u003c*v{pS)", "ln": 14802, "col": 10, "line": 593 }, { "b": "aBKXaarR^HarV7w3lQDlarR!EwPS6nzxKi^4gjj2arV7w3jNs+arR!Kv\u003c0]SCW\u0026vEy?Wx\u003cc[dj!3jNs+arR^WfcB8iwPhi#wfuhfA=l1wBz\u0026pkADLYax(^\u0026dwQ5fjzE)ZcB1N[earR^Hfe1Cyz//LKaAz4pwPz\u003c6azb56By/FnBzb92aA.NyxLz72B1N[e", "ln": 16348, "col": 8, "line": 682 }, { "b": "zE)ZccN?a^3lQDlaBKXa4gjj2arUxgasH@BzE)Dfaz@q+at4E)4giKKarR^Hw]zYjc{5LkdiJ%D3lQDlarR!vw/@Htasni=diJ)UjS]25BzkP6B0#nZi$hJtarR^Haz@q=k0p2yi$hJtarR^HazCBgc)rESayYw5vqv}l3lQDlarR!KauZ\u0026(e{7/AwPGnAdf", "ln": 17789, "col": 34, "line": 748 }, { "b": "arU+GjS[=b4gjj2arR^HAV^H/xKLZ?e{7/AwPGnwe]USHB0#n=wncinBswT/i$hJtarR!PaA}Hky?j.qBs}5QB8kM2wHGk-ay##OyhW*7c){w\u003ear-)haAx8Ae]$\u0026yv}v5xefFHMe]2rszyu\u003eWdjEs/3jNs+arR!EwPS6nzxJ$rB-7.rAX5sYltp6+l@k0TjS(Ngas!NPe[DdQatCz\u0026ltp6+qCwP44gjj2Eld(B4giKKarSr!4gjj2asXHiwPS6nzxJvgzE[2mltp6PCw7]owGVe8y\u0026%qix(+zsxK@p", "ln": 20344, "col": 5, "line": 836 }, { "b": "wH[%CA=\u003e}xi$hJtarR!vw/@HzxLzJuv@DmaBAhIlBz(gLB98Cpv@@?RjV%{fA=\u003e}ocmf\u0026UBzbxfe[G2Jzz33Hq/)4]zF7vDdjDx^4gjj2arR^HBzbYkCoxs{A=k$Dpc?Pyas!MZnO@A!wN/B}wGUG3zGYPiB7]MgcN?a^3lQDlaBKXaarR^HA+funA=91qi$hJtaBMrX3jNsK3lQDAdH=.carScRqE%@)A=91daAITBx(mMaA+figwPIB2Bzg", "ln": 24227, "col": 33, "line": 983 }, { "b": "tpi@)w)]*#BsgupjS)79xd=I+xcotWltp6]4giKKarSr\u003ck$%:14gjj2x\u003ewFoBA}?pz!pb5wObT]wGTc0jS(a:B-7Yhx(v(pasnATwmYv!zE\u003eCezdC7rDKQr8arR!qwObT]wHIekzEW^5z/cWCdiJ%WA+funA=90^x\u003eGHIEjmk!3jNs+arR^WfcB2dwmV((zE:(dBzblaavy6:zeTq:q.q*1yH[S1zGY-mz/fA6zGC", "ln": 25841, "col": 6, "line": 1038 }, { "b": "z!a0bwIdLsAbP=sB1N[earV7PwO=B0azCBgd0f-NwP8f6zeS%cy?j.jjV%]nB-7-3w[=c]wg5GDclNezwozZ1e[GoDz/P@vdiJ%D3lQDlaz(4cB.\u003eRwwQ5fjA==vBjS)79xfcLf4gjj2arSr\u003clum0*B7GwA4gjj2Eir9qB7DFv4gjj2arTfFpEmuve\u003c:n+ao", "ln": 26043, "col": 64, "line": 1044 } ], "depth": 1, "facts": { "imp": [ [ "", "_Big_" ], [ "", "Big" ], [ "", "n.c.slice" ], [ "", "TypeError" ], [ "", "String" ], [ "", "parse" ], [ "", "NUMERIC.test" ], [ "", "Error" ], [ "", "n.charAt" ], [ "", "n.slice" ], [ "", "n.indexOf" ], [ "", "n.replace" ], [ "", "n.search" ], [ "", "n.slice" ], [ "", "n.substring" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "Error" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.c.join" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "x.constructor" ], [ "", "Big" ], [ "", "Error" ], [ "", "Error" ], [ "", "b.slice" ], [ "", "a.slice" ], [ "", "bz.unshift" ], [ "", "r.push" ], [ "", "r.shift" ], [ "", "qc.shift" ], [ "", "round" ], [ "", "Big" ], [ "", "x.plus" ], [ "", "x.c.slice" ], [ "", "Big" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.pop" ], [ "", "xc.shift" ], [ "", "require" ], [ "", "doc.from_str" ], [ "", "Big" ], [ "", "Error" ], [ "", "y.cmp" ], [ "", "Big" ], [ "", "x.div" ], [ "", "x.times" ], [ "", "Big" ], [ "", "x.minus" ], [ "", "Big" ], [ "", "xc.slice" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.constructor" ], [ "", "Error" ], [ "", "y.times" ], [ "", "x.times" ], [ "", "one.div" ], [ "", "Error" ], [ "", "round" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "Big" ], [ "", "Error" ], [ "", "Math.sqrt" ], [ "", "stringify" ], [ "", "x.c.join" ], [ "", "Math.sqrt" ], [ "", "Big" ], [ "", "s.toExponential" ], [ "", "s.indexOf" ], [ "", "Big" ], [ "", "half.times" ], [ "", "t.plus" ], [ "", "x.div" ], [ "", "t.c.slice.join" ], [ "", "t.c.slice" ], [ "", "r.c.slice.join" ], [ "", "r.c.slice" ], [ "", "round" ], [ "", "Big" ], [ "", "Array" ], [ "", "c.shift" ], [ "", "c.pop" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "n.toString" ], [ "", "Error" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "stringify" ], [ "", "_Big_" ], [ "", "define" ], [ "", "parket-slot" ] ], "mbr": [ "Big.Big", "Big.DP", "Big.NE", "Big.PE", "Big.RM", "Big.default", "Big.prototype", "Big.roundDown", "Big.roundHalfEven", "Big.roundHalfUp", "Big.roundUp", "Big.strict", "GLOBAL.Big", "Math.sqrt", "NUMERIC.test", "P.abs", "P.add", "P.cmp", "P.div", "P.eq", "P.gt", "P.gte", "P.lt", "P.lte", "P.minus", "P.mod", "P.mul", "P.neg", "P.plus", "P.pow", "P.prec", "P.round", "P.sqrt", "P.sub", "P.times", "P.toExponential", "P.toFixed", "P.toJSON", "P.toNumber", "P.toPrecision", "P.toString", "P.valueOf", "a.length", "a.slice", "arguments.length", "b.length", "b.slice", "bz.unshift", "c.length", "c.pop", "c.shift", "define.amd", "doc.from_str", "half.times", "module.exports", "n.c", "n.c.slice", "n.charAt", "n.e", "n.indexOf", "n.length", "n.replace", "n.s", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "q.c", "q.e", "q.s", "qc.shift", "r.c", "r.c.slice", "r.c.slice.join", "r.e", "r.length", "r.push", "r.shift", "s.charAt", "s.indexOf", "s.length", "s.slice", "s.toExponential", "t.c", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c", "x.c.join", "x.c.length", "x.c.push", "x.c.slice", "x.constructor", "x.constructor.RM", "x.div", "x.e", "x.minus", "x.plus", "x.s", "x.times", "xc.length", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.c", "y.cmp", "y.e", "y.s", "y.times", "yc.length" ], "tgt": [ "Array", "Big", "Error", "Math.sqrt", "NUMERIC.test", "String", "TypeError", "_Big_", "a.slice", "b.slice", "bz.unshift", "c.pop", "c.shift", "define", "doc.from_str", "half.times", "n.c.slice", "n.charAt", "n.indexOf", "n.replace", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "parse", "qc.shift", "r.c.slice", "r.c.slice.join", "r.push", "r.shift", "require", "round", "s.charAt", "s.indexOf", "s.slice", "s.toExponential", "stringify", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c.join", "x.c.push", "x.c.slice", "x.constructor", "x.div", "x.minus", "x.plus", "x.times", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.cmp", "y.times" ], "funcs": [ [ "anonymous", 208 ], [ "_Big_", 2700 ], [ "Big", 2914 ], [ "parse", 4135 ], [ "round", 5516 ], [ "stringify", 7170 ], [ "anonymous", 7968 ], [ "anonymous", 8282 ], [ "anonymous", 9177 ], [ "anonymous", 11913 ], [ "anonymous", 12101 ], [ "anonymous", 12300 ], [ "anonymous", 12478 ], [ "anonymous", 12674 ], [ "anonymous", 12848 ], [ "anonymous", 15138 ], [ "anonymous", 15691 ], [ "anonymous", 15906 ], [ "anonymous", 17587 ], [ "anonymous", 18362 ], [ "anonymous", 19017 ], [ "anonymous", 19449 ], [ "anonymous", 20651 ], [ "anonymous", 22410 ], [ "anonymous", 23235 ], [ "anonymous", 23955 ], [ "anonymous", 24180 ], [ "anonymous", 24885 ], [ "anonymous", 25575 ], [ "anonymous", 25947 ] ], "metrics": { "ast": { "op.eq": 35, "op.ge": 5, "op.gt": 29, "op.le": 5, "op.lt": 42, "op.ne": 31, "op.add": 59, "op.bor": 3, "op.div": 6, "op.lor": 37, "op.mod": 2, "op.mul": 1, "op.shr": 1, "op.sub": 40, "op.xor": 3, "op.band": 4, "op.bnot": 14, "op.land": 26, "op.lnot": 39, "max_depth": 26, "call_count": 133, "node_count": 7152, "member_count": 114, "max_array_len": 1, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0.01, "op_density.ne": 0, "op_density.add": 0.01, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0.01, "op_density.mod": 0, "op_density.mul": 0, "op_density.shr": 0, "op_density.sub": 0.01, "op_density.xor": 0, "sequence_count": 2, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 4, "member_depth_max": 4, "const_return_function_count": 1, "const_return_function_ratio": 0.03 }, "file": { "size": 26220, "entropy": 4.73 }, "text": { "lines": 1052, "top_char": 101, "max_ws_run": 34, "digit_ratio": 0.03, "space_count": 7606, "char_entropy": 4.73, "unique_chars": 91, "top_char_null": 0, "string_density": 0.04, "top_char_ratio": 0.05, "ascii_art_lines": 2, "avg_line_length": 22.92, "max_line_length": 104, "empty_line_ratio": 0.21, "last_line_length": 9, "whitespace_ratio": 0.37, "identifier_density": 1.35, "line_length_stddev": 24.16, "normalized_string_count": 1.45, "repeated_char_sequences": 48, "suspicious_comment_ratio": 0.09, "suspicious_identifier_ratio": 0.14, "normalized_unique_identifiers": 12.25 }, "binds": { "count": 294 }, "binary": { "peak_region_bytes": 21100, "peak_region_entropy": 4.89 }, "source": { "function_count": 5 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 232, "count": 47, "avg_length": 4.94, "max_length": 20, "avg_entropy": 1.61, "empty_count": 7, "entropy_stddev": 1.4 }, "comments": { "chars": 10434, "count": 138, "lines": 280, "base64": 2, "high_entropy": 10, "to_code_ratio": 0.36, "url_in_comments": 1 }, "functions": { "count": 5, "nested": 2, "density": 2.85, "anonymous": 25, "avg_params": 1.1, "code_ratio": 1.74, "max_params": 4, "one_liners": 1, "length_stddev": 185.18, "over_100_lines": 3, "over_500_lines": 1, "avg_name_length": 5.4, "no_params_count": 8, "avg_length_lines": 61.17, "max_length_lines": 1046, "min_length_lines": 1, "avg_nesting_depth": 1, "max_nesting_depth": 2, "single_char_params": 17, "avg_param_name_length": 2.21 }, "identifiers": { "count": 1418, "unique": 123, "avg_length": 4.61, "max_length": 13, "min_length": 1, "avg_entropy": 1.73, "reuse_ratio": 0.09, "length_stddev": 3.07, "sequential_names": 17, "single_char_count": 17, "single_char_ratio": 0.14, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.69, "all_uppercase_ratio": 0.13, "underscore_prefix_count": 1 } } }, "id": 1, "mol": "O₂(SAs)H₃(CmDb₅Os)", "path": "thurdweb-0.0.8.tgz!!package/big.mjs", "pid": 0, "risk": 126, "sha": "cc4f38d2c43eae53227a80cb79358fe6373f067d82d5b4b9e1cc135a0fbfbcc3", "size": 26220, "traits": [ { "id": "metadata/build/bundler/wrapper::js-umd-wrapper-amd", "conf": 0.9, "crit": 2, "desc": "Contains a UMD wrapper's AMD branch", "spans": [ [ 25889, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 379, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 568, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 6234, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8243, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 62, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 586, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1779, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 154, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 4184, 18 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 7252, 9 ] ] }, { "id": "micro-behaviors/data/string/access::js-charat-lookup", "conf": 0.82, "crit": 2, "desc": "JavaScript string character lookup", "spans": [ [ 4292, 0 ] ] }, { "id": "micro-behaviors/data/string/concat::join-empty-separator-call", "conf": 0.82, "crit": 3, "desc": "Joins values without a separator", "spans": [ [ 7249, 8 ], [ 20408, 14 ], [ 20437, 14 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-method-call", "conf": 0.98, "crit": 3, "desc": "Calls a method named from_str", "spans": [ [ 14982, 12 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-no-argument-call", "conf": 0.98, "crit": 3, "desc": "Calls from_str with no arguments", "spans": [ [ 14985, 11 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "spans": [ [ 24291, 10 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1379, 8 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-require-in-try", "conf": 0.9, "crit": 3, "desc": "CommonJS require inside a try block", "spans": [ [ 14930, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-array-join-symbol", "conf": 0.5, "crit": 1, "desc": "Join using empty string delimiter", "spans": [ [ 7252, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::external-require-from-str-dispatch", "atk": "T1195.002", "conf": 0.97, "crit": 4, "desc": "External require followed by from_str dispatch", "spans": [ [ 14953, 43 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::require-slot-loader", "atk": "T1195.002", "conf": 0.995, "crit": 4, "desc": "Requires slot loader module", "spans": [ [ 14953, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 15002, 20 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::from-str-empty-catch", "conf": 0.97, "crit": 3, "desc": "Empty catch follows from_str call", "spans": [ [ 14986, 36 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.85, "crit": 3, "desc": "JavaScript empty-string accumulator initializer", "spans": [ [ 2319, 11 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-comment-exec-recognized-marker", "conf": 0.9, "crit": 1, "desc": "Recognized comment-heavy JavaScript marker", "uses": [ 0 ], "spans": [ [ 25889, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::slot-loader-stub", "atk": "T1195.002,T1059.007", "conf": 0.998, "crit": 5, "desc": "Slot loader runs during import", "uses": [ 13, 17, 20, 22 ], "spans": [ [ 14930, 31 ], [ 14953, 22 ], [ 14982, 12 ], [ 14986, 36 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-string-deobfuscation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "String deobfuscation routine", "uses": [ 11, 18, 24 ], "spans": [ [ 4292, 9 ], [ 7252, 9 ], [ 7353, 9 ], [ 13603, 10 ], [ 25889, 42 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::from-str-import-time-loader-stub", "atk": "T1195.002,T1059.007", "mbc": "B0024", "conf": 0.98, "crit": 5, "desc": "Import-time from_str loader swallows results", "uses": [ 13, 14, 17, 22 ], "spans": [ [ 14930, 31 ], [ 14982, 12 ], [ 14985, 11 ], [ 14986, 36 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DKP", "ln": 1, "addr": 0 }, { "b": "arR\u003eCvqPN1iV]R*xMXuaCv+kcedz", "ln": 2, "addr": 3 }, { "b": "arR\u003eswPIv4x(Ffdz/c:War\u003c8]B8tu4y+cYvvrlJwaz1#5C}BbReP(bCaz++3A::0lazbLjayPq1x([x7A^olQA+e-{B7]Mgay]4[x(do{ayPq8BzbJ5Bzkkeedz", "ln": 3, "addr": 26 }, { "b": "arR\u003eKwPz\u003caz/c:War\u0026G(fFkseedz", "ln": 4, "addr": 125 }, { "b": "arR\u003ezwQeGrA+6kniV}So", "ln": 5, "addr": 148 }, { "b": "arR^Hb4kI3x([x7A^n\u0026W4f", "ln": 6, "addr": 165 }, { "b": "arR^Hb4tn0zGP!u4f", "ln": 17, "addr": 348 }, { "b": "arT@v4f", "ln": 18, "addr": 362 }, { "b": "arR\u003etCYmOwBAnS!aBsK", "ln": 19, "addr": 368 }, { "b": "arR^Ha$+62aBsK", "ln": 20, "addr": 384 }, { "b": "arR^HarR\u003exze:AlBrS:*a$+JTx\u003eG5nyi7NI4f", "ln": 21, "addr": 396 }, { "b": "arR^Ha$+J/vpK7YxjSYgB8L}uiV]R0fk$ufyHH\u003c!e]2DCzxYI", "ln": 26, "addr": 523 }, { "b": "arV7-4f", "ln": 27, "addr": 563 }, { "b": "arR\u003eGwPhNex([olC{ko(DKP", "ln": 28, "addr": 569 }, { "b": "arR^Hb6n9HwG\u003ceTb4\u003eRia$Kf", "ln": 29, "addr": 588 }, { "b": "arR^Hb6v{xb03?\u003cxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1R9tBrRd", "ln": 30, "addr": 608 }, { "b": "arV7-4f", "ln": 31, "addr": 660 }, { "b": "arR\u003eBvqfQ6iV]RQx\u003eFRv4f", "ln": 32, "addr": 666 }, { "b": "arR\u003eqA=leywPw$Qar\u003eoexd^}ua$Kf", "ln": 33, "addr": 684 }, { "b": "arR\u003eBz!a0bwG\u003ceTb4tn0e]tuAa$Kf", "ln": 34, "addr": 708 }, { "b": "arR\u003epB-.qnAW0K!DKP", "ln": 35, "addr": 732 }, { "b": "arR^Hb5Q?awG\u003ceTb28=YxKLE*awDuZvrDi@y?W=hedz", "ln": 36, "addr": 747 }, { "b": "arR^Hb4UR1x(1$Oar\u003cJtv}W?Yy^qSIvqfKgv@Did4f", "ln": 37, "addr": 782 }, { "b": "arV7-4f", "ln": 38, "addr": 816 }, { "b": "arR\u003eqB.t+tiV@+U", "ln": 39, "addr": 822 }, { "b": "arR^Hb6v{xb03?\u003cxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1.lGB9h5na}j", "ln": 40, "addr": 835 }, { "b": "arV7-4f", "ln": 41, "addr": 890 }, { "b": "arR\u003eAx\u003e7Z(B7DKRar\u003cJKr3A\u003e5", "ln": 45, "addr": 935 }, { "b": "arR\u003eHv@=p5BAnS!aBsK", "ln": 46, "addr": 956 }, { "b": "arR^Hb4tXey?a.Jar\u003e]Gv\u003chu", "ln": 47, "addr": 972 }, { "b": "arV7-4f", "ln": 48, "addr": 992 }, { "b": "arR\u003eux(4v4b03\u0026J4f", "ln": 49, "addr": 998 }, { "b": "arR^Hb4tn0e]tuAa}j", "ln": 51, "addr": 1027 }, { "b": "arT@v4f", "ln": 52, "addr": 1042 }, { "b": "arR\u003euB-7-7zF7dOaBsK", "ln": 53, "addr": 1048 }, { "b": "arR^Hb6n9HwG\u003ceTb5.BizEWQ3y?m9#x)a5iedz", "ln": 54, "addr": 1064 }, { "b": "arR^Hb6v{xb03?\u003cxMOunB2\u003e%cz/xo9v@Dg1wN/*@C4Apoz/4dpx\u003eIg4a}j", "ln": 55, "addr": 1095 }, { "b": "arV7-4f", "ln": 56, "addr": 1142 }, { "b": "arR\u003eswPhi#wmYT*x\u003equfiV@+U", "ln": 57, "addr": 1148 }, { "b": "arR^Hb5zggeP+ApwPw$Qar\u003ebCe?![ra}j", "ln": 58, "addr": 1169 }, { "b": "arV7w", "ln": 59, "addr": 1196 } ], "depth": 1, "facts": { "imp": [ [ "^0.0.9", "log-taker" ] ], "metrics": { "file": { "size": 1202.0, "entropy": 4.56, "size_bytes": 1202.0 }, "binary": { "overall_entropy": 4.56 } } }, "id": 2, "mol": "O(S)Md(Pa₃)", "path": "thurdweb-0.0.8.tgz!!package/package.json", "refs": [ { "to": "pkg:github/mikemcl/big.js", "off": 620, "kind": "repository" }, { "to": "pkg:npm/log-taker", "off": 1174, "kind": "dependency" } ], "risk": 122, "sha": "ce862263c2537fca74d04d75dbbecc350838fa487eedc52dc37db8230ace12e5", "size": 1202, "traits": [ { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.8999999761581421, "crit": 2, "desc": "Repository uses common git host", "spans": [ [ 612, 37 ] ] }, { "id": "metadata/package/manifest/entrypoint::pkg-exports-field-entry", "conf": 0.6000000238418579, "crit": 2, "desc": "\"exports\": field in package.json", "spans": [ [ 370, 10 ] ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.949999988079071, "crit": 4, "desc": "Impersonates MikeMcl/big.js repository", "spans": [ [ 612, 37 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.8500000238418579, "crit": 2, "desc": "Package has repository URL", "spans": [ [ 612, 37 ] ] }, { "id": "metadata/package/manifest/entrypoint::pkg-module-field", "conf": 0.6000000238418579, "crit": 2, "desc": "\"module\": field in package.json", "spans": [ [ 710, 9 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.8999999761581421, "crit": 2, "desc": "Package has repository field", "spans": [ [ 571, 60 ] ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::author-retained-original", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.699999988079071, "crit": 1, "desc": "author retained original", "spans": [ [ 786, 17 ] ] }, { "id": "metadata/package/manifest/description::has-description", "conf": 0.75, "crit": 3, "desc": "Package has meaningful description", "spans": [ [ 28, 77 ] ] }, { "id": "metadata/package/manifest/publishing::has-funding", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has funding information", "spans": [ [ 1050, 66 ] ] }, { "id": "metadata/package/scripts::pkg-build-script-field", "conf": 0.6000000238418579, "crit": 3, "desc": "\"build\": script in package.json", "spans": [ [ 976, 3 ] ] }, { "id": "objectives/supply-chain/impersonation/npm-clone::big-js-impersonation-clone", "atk": "T1195.002", "mbc": "E1195.002", "conf": 0.9900000095367432, "crit": 5, "desc": "Impersonation of the popular big.js library", "spans": [ [ 612, 37 ], [ 786, 17 ] ] }, { "id": "metadata/package/quality/source::has-multiple-entries", "conf": 0.8500000238418579, "crit": 3, "desc": "Package has multiple entry points", "spans": [ [ 370, 10 ], [ 710, 9 ] ] } ], "type": "package.json" }, { "ctx": [ { "b": "aA/W@fFk6?3lQ/vavdb\u003ezddl%efFLkB95@QwNPU9eP+[.B-Rapy?Wv0vrcSow]zYjvrb*\u003eBAg/gC}A#QwN/B}x(v(iwmYm+zddl6vrc77xL?s5x\u003e5+83lQ/vavy6^D2^RixMLvBv\u003c@JQfFUHdo\u003e!9Jvp:l$o\u003ee0FB.tx7x(jv!asXGRxMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1ZiUlQ::qmj@B/4gjjcfawmIasH\u0026AzEW^5z/cWCm[=YBk$\u0026ZIDKQr8aszqMwGV5oA+P39cP.+AarU\u0026oAV^X.xdKG04giKKarR^HfdFC3dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([\u003cmmoZDk%!mlavFT/k#*PTqY)LtdK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK([$dK(]34giKK4gjj2arSr\u003caxi2=ay]4}vrDydaA?gfB.bRpvR6v]Coy:BB95KlwGUY8By/8@A=SvEx([35zxK4mwGV5ovru6\u003eaAy[dxjVcp4giKKarR^HfdEzrarR^HasXHkxK@r6vr=H6B.@ms", "ln": 14, "col": 11, "line": 2 }, { "b": "B0bykaA8jgA::67z/fRsx(n9jy\u003c6Jgxcp-0C4(2iz/dPB3lQDlarScRwncifvqYP#B8=kxefFwswft\u0026fCoz9zBz8!mwOkB[x)a5gwQ5fjzE)ZcB1N[earR^HasY2N3lQDlavG3GjS(HlefD5TarR^HarR^Hatkw\u003cfD+EQawCd7uQNZ13jNs+arR^WdH=.carR^HdJ?Y7wGV2iB-4", "ln": 520, "col": 63, "line": 18 }, { "b": "3lQDlatkhN3lQDlarScRra]?=zE)D?Bzk]faz2!pz/fc7Brz#bmjxu/BrC1fwftt)zE)l#xDRIjx\u003e7*0Bz\u003e91A+PA7aAz4nB-Iwvaz2!pz/fc7Bzkf1az#atvruj4zy#w9arR^HasXGZn)#)Kq!6\u0026ZAc9juB.$P0A=Tn:eJk9/3lQDlarScReIO}kfFCgmazC)tBzbkdze0)4zfoXrA+e:0zeA\u003c4wmYo]wQ5fjzE)ZcaA?gfB.8Xlw/$I8", "ln": 1315, "col": 2, "line": 38 }, { "b": "vr=H6B.@mwwN/T}zdNP}wN(]{CYmOswO#PjC42ifwGU]6ayMxVx\u003eF$tvS==nBzbxfaz++ex(\u003eFiB0bvsBrCdjw]zZ1wN)z53lQDlarSc!4gjj2arTGHauZ\u00265f!sB\u0026arR^HarR^HarSr\u003cats{WzY*+*fFCgmfBXu#3lQDlatkhN3lQDlarScRs7(e.", "ln": 1731, "col": 24, "line": 49 }, { "b": "dK([$dK([$dK([$dK([$dK([$dK)7X3jNsK3lQDlatkw\u003cmriA!AV/jgB8$=5wPGEk3lQDlawLi%miB-ocTg4]xd^}ut{7HC4gjj2arTlJrZxzJl)aSnpc?Pyas!MZnP5YWy?WA5cObYlarR^HnLSqLoI4SVl@k0?aw2sek$\u003c\u003cras!MZwmYm+zddl6Abn@)wPGjI4gjj2arTlJrZxzJl%\u0026?^auZ\u0026spf6UOnKKWKaszhFB-7-7zF78ez!9Abedz{", "ln": 2255, "col": 82, "line": 61 }, { "b": "y\u0026%qw4gjj2arR^RfawmharR!sB-7Yhx(v(iltp6XzyDYP4gjj2arR^HC42zlCPYc(Bzbxfi$hJa3lQDlarR^WfcAY3vpB4:ay/tcB98CBv@#TfaA.:lxjSifx([3bB-X:zwP]:o3lQDlarR!vw/@GBd0M\u003eGzGx]dzEWl@w/%AOxdknLDKQr8arR^HarR!EwPS6nzxJ*tjV$}JrzC}JmOcuzl)9*6ayPq6B.$YcBAo6JwO#d5xDPD3jS(B3koKr1x\u003eH^3diHU]zE[2mltp6XzyETR3lQDlarR!P4giKKarR^HarSr\u003cavHu\u003ey?Wx/By^6l3lQDlarR!vw/@HtazC.mByx5%wP8f6ltp6YaBsL8ao", "ln": 2895, "col": 42, "line": 87 }, { "b": "arU[YB09Q*zz2#(4gjj2arR^HarU[YwGTbUzz2GZ4gjj2arR^HarU[Yv\u003c0]Szz2AKB8kM2wHF#?4gjj2arR^HEir9qB7DFv4gjj2arR^HarUxgasItSAaJ%1az@qBjV%]nB98CpzF7sCaBsL8arR^HarR^HarUxgasGM\u003cxd!mEA+P39au.\u003eJaARTDwGSrDaAR)FwP8f6zxH8=jS(aYx\u003eIc$BseHWDKQr8arR^HarR^HarR!GxMw3naxiS9wKQSWz/Nl$pf6UOnKKWKasztvy\u0026%qpdlv$CarR^HarR^HarQ", "ln": 3189, "col": 7, "line": 99 }, { "b": "y\u0026%qw4gjj2asY2N3lQE6B-7Yhx(v(iAa9^dwHI^Oaz@RJDKQr8arR!Ivr9G4efFTTaz#0S4giKKarR^Hx\u003ewFoaX(3imn=YAe{7VCBsq2QdiJ%D3lQDlarR!GxMw3navQr\u003ez/Nl$pf6UOnKKWKasz5Hzdm6%cN?a^3lQDlaBKXa4gjj2arSr\u003cavG^.wPzT4zE\u003c@ix\u003eIro4gjj2arU[YB09Q*zz2BjvraUQc[)7)jV%]neHIV9asIaIjS[R{B8kM2wHGnZefDJ0diHU]f/]*K4gjj2arSr\u003cavG^Jx(do{aAhmkzGF8L3lQDlazCBgc[5THjS[R{x(mD)CU.{1cOu+}diH!%eIOW%zxI7+zz2%vAbn@)wHF]UcOcw/cN?a^3jNs+arR^WfcAYdAbPS9zGGP3y-)tdA=12I3lQDlazCBgc[5^LjS[R{B7F^2v}WnzwIm:DdiH!%fEXb\u003e4giKKarR^HarSr\u003cavG^.wPzT4zE\u0026", "ln": 4120, "col": 36, "line": 139 }, { "b": "ay#VUazA[D3lQDlarR!ras/O$d@D$Xy?Wx\u003cc$%!OatCrb4gjj2arR^HzxI7+zz30MvSMTix(mMifF1tXdlv$CarR^HEir9qB7DFdw/@HkauQ=2diJ%D3jNs+arR^Hatkw\u003cnP5SYxjV9o4gjj2arR^HwGTbUzz2:pzFa68i$hJtarR!P4giKKarR^HzFQBUaz@/FwO#d5xGDUg4gjj2arSr\u003cavG^.wPzT4zE\u003c@bwNPa-zF78rwPzZge!5dgarR!sz/M%Gx=]LYfGQy\u003eauQ=:y-\u003e5Kaz@/wxKL{EBsp\u0026Lau.\u003egcOM]fdiHb\u003ex/=+h4gjj2arUxgasH}DjV%{9y:*GN4giKKarR^HarSr\u003cax\u0026t%z.qFaarR^HarU[Yv\u003c0]S", "ln": 4538, "col": 17, "line": 158 }, { "b": "3jNs+arR^Hatkw\u003cCW\u003c%0wl*r(B0bNrwGUI$xk8Dgvp\u003cQ)AV/EqwGUI$xk8DgBzb98az\u003eLjayX[8A=l8rwmYo]B-n@x3lQDlarR!zz/PzijQ?-varR^HarR!Ez6g#8jS(E4cmf\u003cWv{s1+t{8r]at\u003eo?D\u003c{A9arR^HarR!Ez6g#8jS(H5cmf\u0026-CW\u003c%0", "ln": 6186, "col": 34, "line": 226 }, { "b": "x\u003ezSsCQ%$Fz:![\u0026z/fc7Bzkf1efFUFph+2@wPzYraBsL8arR^HC42zlwGTbUCRiLU4gjj2arR^HB09Q*CRiFUyhW*7c){w\u003eedz}earR^Haz@q+aAGeKwO#d5xGDUg4gjj2arSr\u003cavQJ]z/fc7Bzkf1az#atvruj4zA!NqarR^Hx\u003ewFown:[YAbPS9zGGP3y:*GN4gjj2arR^HB09Q*B1Q%ovraUQc[)7)d\u003cclTau*]5au{$@e*?+(aAGeRy?Wx\u003cc]0d[iV]^$diHb-c$KI-ats{5asy.FauyR)wH/bSas!NCi$hJa3lQDlarR^WfcB2dA=2l3az#atvruj4zy#w9arR^HEir9qB7DFdw/@HkauQ=2diJ%D3lQDlarR!szV", "ln": 7185, "col": 18, "line": 264 }, { "b": "wO=B0azCBgc$KI-az@RJDKQr8arR^HarR!FauZ\u0026*e]$\u0026yv}v5xefFHMas!MZe*?+(aAGeRy?Wx\u003cc$K??4gjj2arR^HEglJaarR!Paz2wgwGUY0asIaIj%hNeaBsL8arR^HarU.F", "ln": 7629, "col": 9, "line": 280 }, { "b": "zxK4mwGVe8y\u0026%qiz!paUx\u003eFMlefF\u003eK4gjj2asXGRarR^HarSuXx\u003ewGfxK#DixKM6}aARpdaAH$dwGVe8y\u0026%qw4gjj2asY2N3lQD/e[n:qauZ\u0026VB-7Yhx(v(id0Wl:DKQr8arR!Ivr9G8B8CM4edz}earR^HaB21(aARphB1v+carR^HarU]sauZ\u0026(", "ln": 8195, "col": 51, "line": 306 }, { "b": "avy6:Aa9=#az2!pz/fc7BAo5z3lQDlazCBgc#f}GjS[L\u0026aAz4nB-IvxyAL!-y-)4bx(!f6xcozYf^5I1eIPr@3jNs+arR!wauZ?}yAL+.CW\u0026vxwO#d5xEL5^asI4GjS]2We]k9pxlm/oau{#:auySYi$hJa3lQDlatkw\u003clVl*Xvrb{4wnbW\u003cBrC4ray]h0x-", "ln": 8622, "col": 7, "line": 327 }, { "b": "auZ\u00260f/{Hdd}{a*azJ$!aBsL8arR^HarUxgasIFAtwmv=aW3@[v{rUMdiJUxBAIRwaB4y2x\u003cz\u0026BaBdE3x\u003cz\u0026/azC[mwOibIatC01at2rf4gjj2arV7w3jNs+arR^", "ln": 8789, "col": 11, "line": 333 }, { "b": "arR!P4giKKarR^HC42zlvR^OrvSTdzzy=]uze.3GA+N6l3lQDlarR!oDltu[vLh.rx\u003e7Z5dj+]narR^HarU9bauZ\u0026Ry-\u003e\u003e-vLhFdzFa68edz}earR^HayP7ejS[e=y?mG%Bz9im3lQDlarR!EauZ\u0026Qe]$\u0026yv}v5xefFzrdj=O:atkw\u003cA+f8@x(mD)AT-u#arR^HaAzovjS[+$y?mG%Bz9im3lQDlarR!DauZ\u0026)efD5TarR^HarR^HarR^Hatkw\u003cADMhwx\u003eqg74gjj2arR^HABO", "ln": 9669, "col": 2, "line": 368 }, { "b": "3lQDlarR!EwPS6nzxKfRAboVrd0Wm64gjj2arV7w3jNs+arR!Ivr9Gnv\u003c0]SCRiFUB8kM2wHF#U4gjj2arR^HCX50XaB2IIedz}earR^HaBdDtjS]25v\u003en5@arR^HarU@vauZ\u0026)e[E9N3jNs+arR^WfcAX$BzblaaBmQtz:aWrarR^Hx\u003ewFoa:vH3fKk/GD\u0026", "ln": 13039, "col": 17, "line": 508 }, { "b": "auZ\u00264i$hJa3lQDlarR^WfcBe7B9hqvaz(mxBrC47aBmQtz.qFaarR^HarU]sauZ\u0026KD1w9Yatv7.4gjj2arV7w3jNs+arR!Le[l1!aB4xT4gjj2arU}ZwGTbUD1x5D3jNs+arR!EwPS6nzxKi^4gjj2Eld(B4gjj2BAhTHDKQr8arR!pz/fSray]z2auZ\u0026/wPq\u003cbA+cTyAa9^5wPPIBy\u0026sztdlv$CarR^Hwn+%gw].*buVQsfc[c=\u003cxK#6fwGTc1aBtkVdk2asByO#jwGTc1aBtkVdgDRbaBLwxvru0)asH/wA=k$EaBsL8arV7w3jNs+atkhN3lQDldJ?S2BAIRwayMygwP]m-x\u003eFMjxM4%6aA?gfB.8XfB0bNrwGVe8y\u0026%qiz!pblxLzJgltp6PzeS%cy\u0026pCrxK@rfvqH6$aA7\u003cmltp6PC}GKkarR^Rfawmhaw:Xcz!6$Nazb+lv@#B6zxHuMdiJ%D3lQDlaA?glaBdQwCQ%pharR^HarU[KjS[\u0026Wx(+*m3lQDlarR^[x\u003eFLKaB2IGz/fSrA=\u003e(lz/Nxr3lQDlarR!nauZ\u0026(e]@MM3lQDlarR!oauZ?}C{2l)zE[2mltp6XC{$f{B2%*r4gjj2arUxgasFyUe[n9tt}3(", "ln": 14802, "col": 10, "line": 593 }, { "b": "aBKXaarR^HarV7w3lQDlarR!EwPS6nzxKi^4gjj2arV7w3jNs+arR!Kv\u003c0]SCW\u0026vEy?Wx\u003cc[dj!3jNs+arR^WfcB8iwPhi#wfuhfA=l1wBz\u0026pkADLYax(^\u0026dwQ5fjzE)ZcB1N[earR^Hfe1Cyz//LKaAz4pwPz\u003c6azb56By/FnBzb92aA.NyxLz72B1N[e", "ln": 16377, "col": 8, "line": 681 }, { "b": "zE)ZccN?a^3lQDlaBKXa4gjj2arUxgasH@BzE)Dfaz@q+at4E)4giKKarR^Hw]zYjc{5LkdiJ%D3lQDlarR!vw/@Htasni=diJ)UjS]25BzkP6B0#nZi$hJtarR^Haz@q=k0p2yi$hJtarR^HazCBgc)rESayYw5vqv}l3lQDlarR!KauZ\u0026(e{7/AwPGnAdf", "ln": 17818, "col": 34, "line": 747 }, { "b": "arU+GjS[=b4gjj2arR^HAV^H/xKLZ?e{7/AwPGnwe]USHB0#n=wncinBswT/i$hJtarR!PaA}Hky?j.qBs}5QB8kM2wHGk-ay##OyhW*7c){w\u003ear-)haAx8Ae]$\u0026yv}v5xefFHMe]2rszyu\u003eWdjEs/3jNs+arR!EwPS6nzxJ$rB-7.rAX5sYltp6+l@k0TjS(Ngas!NPe[DdQatCz\u0026ltp6+qCwP44gjj2Eld(B4giKKarSr!4gjj2asXHiwPS6nzxJvgzE[2mltp6PCw7]owGVe8y\u0026%qix(+zsxK@p", "ln": 20373, "col": 5, "line": 835 }, { "b": "wH[%CA=\u003e}xi$hJtarR!vw/@HzxLzJuv@DmaBAhIlBz(gLB98Cpv@@?RjV%{fA=\u003e}ocmf\u0026UBzbxfe[G2Jzz33Hq/)4]zF7vDdjDx^4gjj2arR^HBzbYkCoxs{A=k$Dpc?Pyas!MZnO@A!wN/B}wGUG3zGYPiB7]MgcN?a^3lQDlaBKXaarR^HA+funA=91qi$hJtaBMrX3jNsK3lQDAdH=.carScRqE%@)A=91daAITBx(mMaA+figwPIB2Bzg", "ln": 24256, "col": 33, "line": 982 }, { "b": "tpi@)w)]*#BsgupjS)79xd=I+xcotWltp6]4giKKarSr\u003ck$%:14gjj2x\u003ewFoBA}?pz!pb5wObT]wGTc0jS(a:B-7Yhx(v(pasnATwmYv!zE\u003eCezdC7rDKQr8arR!qwObT]wHIekzEW^5z/cWCdiJ%WA+funA=90^x\u003eGHIEjmk!3jNs+arR^WfcB2dwmV((zE:(dBzblaavy6:zeTq:q.q*1yH[S1zGY-mz/fA6zGC", "ln": 25870, "col": 6, "line": 1037 }, { "b": "z!a0bwIdLsAbP=sB1N[earV7PwO=B0azCBgd0f-NwP8f6zeS%cy?j.jjV%]nB-7-3w[=c]wg5GDclNezwozZ1e[GoDz/P@vdiJ%D3lQDlaz(4cB.\u003eRwwQ5fjA==vBjS)79xfcLf4gjj2arSr\u003clum0*B7GwA4gjj2Eir9qB7DFv4gjj2arTfFpEmuve\u003c:n+ao", "ln": 26072, "col": 64, "line": 1043 } ], "depth": 1, "facts": { "imp": [ [ "", "_Big_" ], [ "", "Big" ], [ "", "n.c.slice" ], [ "", "TypeError" ], [ "", "String" ], [ "", "parse" ], [ "", "NUMERIC.test" ], [ "", "Error" ], [ "", "n.charAt" ], [ "", "n.slice" ], [ "", "n.indexOf" ], [ "", "n.replace" ], [ "", "n.search" ], [ "", "n.slice" ], [ "", "n.substring" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "n.charAt" ], [ "", "Error" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.c.join" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.slice" ], [ "", "s.charAt" ], [ "", "s.slice" ], [ "", "x.constructor" ], [ "", "Big" ], [ "", "Error" ], [ "", "Error" ], [ "", "b.slice" ], [ "", "a.slice" ], [ "", "bz.unshift" ], [ "", "r.push" ], [ "", "r.shift" ], [ "", "qc.shift" ], [ "", "round" ], [ "", "Big" ], [ "", "x.plus" ], [ "", "x.c.slice" ], [ "", "Big" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.pop" ], [ "", "xc.shift" ], [ "", "require" ], [ "", "doc.from_str.then.catch" ], [ "", "doc.from_str.then" ], [ "", "doc.from_str" ], [ "", "Big" ], [ "", "Error" ], [ "", "y.cmp" ], [ "", "Big" ], [ "", "x.div" ], [ "", "x.times" ], [ "", "Big" ], [ "", "x.minus" ], [ "", "Big" ], [ "", "xc.slice" ], [ "", "t.reverse" ], [ "", "t.push" ], [ "", "t.reverse" ], [ "", "xc.unshift" ], [ "", "xc.pop" ], [ "", "x.constructor" ], [ "", "Error" ], [ "", "y.times" ], [ "", "x.times" ], [ "", "one.div" ], [ "", "Error" ], [ "", "round" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "Big" ], [ "", "Error" ], [ "", "Math.sqrt" ], [ "", "stringify" ], [ "", "x.c.join" ], [ "", "Math.sqrt" ], [ "", "Big" ], [ "", "s.toExponential" ], [ "", "s.indexOf" ], [ "", "Big" ], [ "", "half.times" ], [ "", "t.plus" ], [ "", "x.div" ], [ "", "t.c.slice.join" ], [ "", "t.c.slice" ], [ "", "r.c.slice.join" ], [ "", "r.c.slice" ], [ "", "round" ], [ "", "Big" ], [ "", "Array" ], [ "", "c.shift" ], [ "", "c.pop" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "round" ], [ "", "x.constructor" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "stringify" ], [ "", "n.toString" ], [ "", "Error" ], [ "", "Error" ], [ "", "round" ], [ "", "Big" ], [ "", "x.c.push" ], [ "", "stringify" ], [ "", "Error" ], [ "", "stringify" ], [ "", "_Big_" ], [ "", "define" ], [ "", "parket-slot" ] ], "mbr": [ "Big.Big", "Big.DP", "Big.NE", "Big.PE", "Big.RM", "Big.default", "Big.prototype", "Big.roundDown", "Big.roundHalfEven", "Big.roundHalfUp", "Big.roundUp", "Big.strict", "GLOBAL.Big", "Math.sqrt", "NUMERIC.test", "P.abs", "P.add", "P.cmp", "P.div", "P.eq", "P.gt", "P.gte", "P.lt", "P.lte", "P.minus", "P.mod", "P.mul", "P.neg", "P.plus", "P.pow", "P.prec", "P.round", "P.sqrt", "P.sub", "P.times", "P.toExponential", "P.toFixed", "P.toJSON", "P.toNumber", "P.toPrecision", "P.toString", "P.valueOf", "a.length", "a.slice", "arguments.length", "b.length", "b.slice", "bz.unshift", "c.length", "c.pop", "c.shift", "define.amd", "doc.from_str", "doc.from_str.then", "doc.from_str.then.catch", "half.times", "module.exports", "n.c", "n.c.slice", "n.charAt", "n.e", "n.indexOf", "n.length", "n.replace", "n.s", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "q.c", "q.e", "q.s", "qc.shift", "r.c", "r.c.slice", "r.c.slice.join", "r.e", "r.length", "r.push", "r.shift", "s.charAt", "s.indexOf", "s.length", "s.slice", "s.toExponential", "t.c", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c", "x.c.join", "x.c.length", "x.c.push", "x.c.slice", "x.constructor", "x.constructor.RM", "x.div", "x.e", "x.minus", "x.plus", "x.s", "x.times", "xc.length", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.c", "y.cmp", "y.e", "y.s", "y.times", "yc.length" ], "tgt": [ "Array", "Big", "Error", "Math.sqrt", "NUMERIC.test", "String", "TypeError", "_Big_", "a.slice", "b.slice", "bz.unshift", "c.pop", "c.shift", "define", "doc.from_str", "doc.from_str.then", "doc.from_str.then.catch", "half.times", "n.c.slice", "n.charAt", "n.indexOf", "n.replace", "n.search", "n.slice", "n.substring", "n.toString", "one.div", "parse", "qc.shift", "r.c.slice", "r.c.slice.join", "r.push", "r.shift", "require", "round", "s.charAt", "s.indexOf", "s.slice", "s.toExponential", "stringify", "t.c.slice", "t.c.slice.join", "t.plus", "t.push", "t.reverse", "x.c.join", "x.c.push", "x.c.slice", "x.constructor", "x.div", "x.minus", "x.plus", "x.times", "xc.pop", "xc.shift", "xc.slice", "xc.unshift", "y.cmp", "y.times" ], "funcs": [ [ "anonymous", 208 ], [ "_Big_", 2700 ], [ "Big", 2914 ], [ "parse", 4135 ], [ "round", 5516 ], [ "stringify", 7170 ], [ "anonymous", 7968 ], [ "anonymous", 8282 ], [ "anonymous", 9177 ], [ "anonymous", 11913 ], [ "anonymous", 12101 ], [ "anonymous", 12300 ], [ "anonymous", 12478 ], [ "anonymous", 12674 ], [ "anonymous", 12848 ], [ "e", 15002 ], [ "e", 15018 ], [ "anonymous", 15167 ], [ "anonymous", 15720 ], [ "anonymous", 15935 ], [ "anonymous", 17616 ], [ "anonymous", 18391 ], [ "anonymous", 19046 ], [ "anonymous", 19478 ], [ "anonymous", 20680 ], [ "anonymous", 22439 ], [ "anonymous", 23264 ], [ "anonymous", 23984 ], [ "anonymous", 24209 ], [ "anonymous", 24914 ], [ "anonymous", 25604 ], [ "anonymous", 25976 ] ], "metrics": { "ast": { "op.eq": 35, "op.ge": 5, "op.gt": 29, "op.le": 5, "op.lt": 42, "op.ne": 31, "op.add": 59, "op.bor": 3, "op.div": 6, "op.lor": 37, "op.mod": 2, "op.mul": 1, "op.shr": 1, "op.sub": 40, "op.xor": 3, "op.band": 4, "op.bnot": 14, "op.land": 26, "op.lnot": 39, "max_depth": 26, "call_count": 135, "node_count": 7178, "member_count": 116, "max_array_len": 1, "op_density.eq": 0, "op_density.ge": 0, "op_density.gt": 0, "op_density.le": 0, "op_density.lt": 0.01, "op_density.ne": 0, "op_density.add": 0.01, "op_density.bor": 0, "op_density.div": 0, "op_density.lor": 0.01, "op_density.mod": 0, "op_density.mul": 0, "op_density.shr": 0, "op_density.sub": 0.01, "op_density.xor": 0, "sequence_count": 2, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 4, "member_depth_max": 4, "const_return_function_count": 1, "const_return_function_ratio": 0.03 }, "file": { "size": 26249, "entropy": 4.73 }, "text": { "lines": 1051, "top_char": 101, "max_ws_run": 34, "digit_ratio": 0.03, "space_count": 7612, "char_entropy": 4.73, "unique_chars": 91, "top_char_null": 0, "string_density": 0.04, "top_char_ratio": 0.05, "ascii_art_lines": 2, "avg_line_length": 22.98, "max_line_length": 104, "empty_line_ratio": 0.2, "last_line_length": 9, "whitespace_ratio": 0.37, "identifier_density": 1.35, "line_length_stddev": 24.17, "normalized_string_count": 1.45, "repeated_char_sequences": 48, "suspicious_comment_ratio": 0.09, "suspicious_identifier_ratio": 0.14, "normalized_unique_identifiers": 12.45 }, "binds": { "count": 294 }, "binary": { "peak_region_bytes": 22153, "peak_region_entropy": 4.9 }, "source": { "function_count": 5 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 232, "count": 47, "avg_length": 4.94, "max_length": 20, "avg_entropy": 1.61, "empty_count": 7, "entropy_stddev": 1.4 }, "comments": { "chars": 10434, "count": 138, "lines": 280, "base64": 2, "high_entropy": 10, "to_code_ratio": 0.36, "url_in_comments": 1 }, "functions": { "count": 5, "nested": 2, "density": 3.04, "anonymous": 27, "avg_params": 1.03, "code_ratio": 1.75, "max_params": 4, "one_liners": 3, "length_stddev": 179.72, "over_100_lines": 3, "over_500_lines": 1, "avg_name_length": 5.4, "no_params_count": 10, "avg_length_lines": 57.38, "max_length_lines": 1045, "min_length_lines": 1, "avg_nesting_depth": 1, "max_nesting_depth": 2, "single_char_params": 17, "avg_param_name_length": 2.21 }, "identifiers": { "count": 1422, "unique": 125, "avg_length": 4.61, "max_length": 13, "min_length": 1, "avg_entropy": 1.74, "reuse_ratio": 0.09, "length_stddev": 3.04, "sequential_names": 17, "single_char_count": 17, "single_char_ratio": 0.14, "high_entropy_count": 1, "high_entropy_ratio": 0.01, "all_lowercase_ratio": 0.7, "all_uppercase_ratio": 0.13, "underscore_prefix_count": 1 } } }, "id": 3, "mol": "O₂(SAs)H₃(CmDb₅Os)", "path": "thurdweb-0.0.8.tgz!!package/big.js", "pid": 0, "risk": 126, "sha": "5b803b2bbd43db704b5802fa5bf4da96e79c3b876d74495116b53a837101dace", "size": 26249, "traits": [ { "id": "metadata/build/bundler/wrapper::js-umd-wrapper-amd", "conf": 0.9, "crit": 2, "desc": "Contains a UMD wrapper's AMD branch", "spans": [ [ 25918, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 379, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 568, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"", "spans": [ [ 6234, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 8243, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 62, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 586, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 1779, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL", "spans": [ [ 154, 19 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 4184, 18 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::js-array-short-delimiter-join-call", "conf": 0.72, "crit": 3, "desc": "Joins array with a short delimiter", "spans": [ [ 7252, 9 ] ] }, { "id": "micro-behaviors/data/string/access::js-charat-lookup", "conf": 0.82, "crit": 2, "desc": "JavaScript string character lookup", "spans": [ [ 4292, 0 ] ] }, { "id": "micro-behaviors/data/string/concat::join-empty-separator-call", "conf": 0.82, "crit": 3, "desc": "Joins values without a separator", "spans": [ [ 7249, 8 ], [ 20437, 14 ], [ 20466, 14 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-method-call", "conf": 0.98, "crit": 3, "desc": "Calls a method named from_str", "spans": [ [ 14982, 12 ] ] }, { "id": "micro-behaviors/data/string/conversion::from-str-no-argument-call", "conf": 0.98, "crit": 3, "desc": "Calls from_str with no arguments", "spans": [ [ 14985, 11 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "spans": [ [ 24320, 10 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 1379, 8 ] ] }, { "id": "micro-behaviors/os/module/require::cjs-require-in-try", "conf": 0.9, "crit": 3, "desc": "CommonJS require inside a try block", "spans": [ [ 14930, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-array-join-symbol", "conf": 0.5, "crit": 1, "desc": "Join using empty string delimiter", "spans": [ [ 7252, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::external-require-from-str-dispatch", "atk": "T1195.002", "conf": 0.97, "crit": 4, "desc": "External require followed by from_str dispatch", "spans": [ [ 14953, 43 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::noop-loader-promises", "atk": "T1195.002", "conf": 0.97, "crit": 4, "desc": "Loader chain swallows promise results", "spans": [ [ 14996, 31 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::require-slot-loader", "atk": "T1195.002", "conf": 0.995, "crit": 4, "desc": "Requires slot loader module", "spans": [ [ 14953, 22 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text", "conf": 0.92, "crit": 3, "desc": "Text has empty named-parameter catch", "spans": [ [ 15033, 20 ] ] }, { "id": "micro-behaviors/data/control-flow/error-handling::from-str-empty-catch", "conf": 0.97, "crit": 3, "desc": "Empty catch follows from_str call", "spans": [ [ 14986, 67 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.85, "crit": 3, "desc": "JavaScript empty-string accumulator initializer", "spans": [ [ 2319, 11 ] ] }, { "id": "objectives/anti-static/obfuscation/string/array::js-comment-exec-recognized-marker", "conf": 0.9, "crit": 1, "desc": "Recognized comment-heavy JavaScript marker", "uses": [ 0 ], "spans": [ [ 25918, 0 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::slot-loader-stub", "atk": "T1195.002,T1059.007", "conf": 0.998, "crit": 5, "desc": "Slot loader runs during import", "uses": [ 13, 17, 20, 21, 23 ], "spans": [ [ 14930, 31 ], [ 14953, 22 ], [ 14982, 12 ], [ 14986, 67 ], [ 14996, 31 ] ] }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-string-deobfuscation", "atk": "T1027.002", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "String deobfuscation routine", "uses": [ 11, 18, 25 ], "spans": [ [ 4292, 9 ], [ 7252, 9 ], [ 7353, 9 ], [ 13603, 10 ], [ 25918, 42 ] ] }, { "id": "objectives/supply-chain/trojanized/library/hidden-dep::from-str-import-time-loader-stub", "atk": "T1195.002,T1059.007", "mbc": "B0024", "conf": 0.98, "crit": 5, "desc": "Import-time from_str loader swallows results", "uses": [ 13, 14, 17, 20, 23 ], "spans": [ [ 14930, 31 ], [ 14982, 12 ], [ 14985, 11 ], [ 14986, 67 ], [ 14996, 31 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "boQDfxd^}u4giKKdK).bB8tu4y+cYvvrlJkn)#)Kq!6\u0026ZAc9jsx\u003c#9\u003eA^n^tz/M$eA:\u0026:8A::0lePt-wv}*0#z/cXdwN/B\u003evqE5{A+PSezdN*6v\u003eGkX4giKKtoNi*Abu.vwPz\u003caz/e\u0026exMOunB2\u003e%cx(dGnB7/o0y?dPtx(tUxAbvmKfjFTde[$", "ln": 0, "col": 1, "line": 1 }, { "b": "z.D0Ez7/BzfjFTde]2CRt{%xdBz#pZfe4J[Cp)=LzeabAv@DiqAa9l(vp%d8vRGEcyi7*k3r[VTlRgMixMOunB2\u003e%cxk8E3BZ=$kz/4d4x\u003e}oOv@9/cx\u003eG5kB1Z%iBzkVhB1.-QA+/o6z*cmQv}^Mvzep\u003emvpT1Ze]#hGdp1unBAzFyiXJd0x([3hvLheez7!Q$yH{jIy+Gmixd^}ufjwvjx(v)gfl.tPyI4y3CxkAEx!BWFy://24gjs8avY{JBAIRnA$5D=3n0x0x(d*9wGTonnEV1UavY^XBy/FzaAIydy\u00260W6ayPd#az1#5x\u003eqrpBz\u0026:NB7DFoxKL^3n)#)Kq!6\u0026ZAc9jCwPz\u003caz/fRsz!pa:vrM6bB09!-xgcrvx(do{4gjWfpI%#]at$unllHbVzFrY%wN(kSeG^@5Abok#vru74aARpdayGqfmr\u0026=\u0026zE)Zcx\u003c\u003e*=efFtxz:[C=wN]f\u003evqYP#v03r-A+e-{B7]Mgu)6q$BzbP6B0bykawc6=vn*VRx(Feppiyz.wPz\u002633n0x0Bz(hhB0bTmy\u0026%rgazCZo", "ln": 232, "col": 40, "line": 6 }, { "b": "z7!Q$yH{jIy+Gmixd^}ufl.bCx^\u003efpz/M$wz/65dzF%SdB0bysaARpday]g#w[u0]zEWl2vR6U9wO2:4Bzbl5e!5c%3l{=rnP5P\u003evqG-?3jNtwxK@r5x\u003c#9\u003eA^n^wB0bNrwGV5dzF9=%awc6=vn*VRx(Fepw[=6)asZ\u0026mxd^}udJ\u0026UIaARpdavPiKzeS%cy?j.svRGEczeabwe!5c%3l{=uavp9!CxmtoA$5D=3peikavo^PaARJAxkzG}vqE6cv@Dr$iT(A93sEmHxMO9c4gkjsv@=p5BrCTBv)8hUvrufoBz\u0026*wx\u003eG5kB0\u003cdl", "ln": 1038, "col": 165, "line": 20 }, { "b": "vixA3zFrY%wN({bwPz\u003caz/cXfA=k!qviv{9pc5*\u003e4glGJu$:U0yZ*.lB7ol8Ac9jzA:}lWxMOunB2\u003e%cv}oEfyi9]%y?X6ke]Clxfk+-CfjFTde]2C)h.D^pf!W0Ixd!4nzz2WBcQ6TCB7ol8AcanM3sEmH4giKKbo[AQttx9EwId.st{%xdBz%n]fk+YswOMosz/PFt4giKKu%)wKvrl8\u003e3m3:iAbu.izGx]dy?$k6x\u003eG5kA$5E:u%\u003cAJ4gkEvzeBien(E+W3jNtIu%).TC42D4A+PGm4glP-zGx[xltp6PjS[=RADL#owHF{nx\u003eG5kB0\u0026y#4glGJu\u003e0CL3pN(ozeS%cy?kTp3jNtIu%).TC42D4A+PGm4gl/^AbP=savo^PazbUjz6ginx\u003eG5kB0\u003c3U3sEmH4giKKbo[AQtsr4uz^s=8BAzFyiXJc%wO#Asy*?i(fdvtq4glGJu$%a[vrk}0x(Fe63tBu@z/P}xltp6Pw].*basy\u0026ABz#pZfe4uOCp)JxBzb/aB-Rbmv@DmbwO#Pxv@Diqze0=%zdvxnvRGEcyi84Kh.D^pf!W0Ixd!4oB0\u003c3U3tBu@z/P}xltp6Pw].*basy\u0026ABz#pZfe4D=Abf8sv@DiqvRGEcyi8TRvru74Bt49qxd!4oB0\u003c3U3sEmH4giKKbo[shB7C^/4gjNRzxK4mwGUG3wmV({CWUDdy?mVgvR6v]CpT\u003eTwO(c\u003ez!%ufB0a[ewfto4z=p:#x(mM\u003eay!?@y\u0026Z.cA+cwhz/^ayxM59je?dqq4gl6FwGU/6vSC)$C{3WyAbP=sB0a)lB7]J8y?j-0z/fSrA=\u003e(lz/M$jB-7W", "ln": 1414, "col": 5, "line": 42 }, { "b": "4glGJu\u003e0CL3pb!3x\u003eFMaB.$P0AV/7qazCXfB-.53y?j-6zxK4mwGV59zGxwiBzb98azC{ux(+zmz/^aixKL^\u003ewN(])C{3*yB0bshBzbP6B1N[e4glGJu$%a[vrk}0x(Fe63ns7*at1Y\u0026e?[E\u003earR^HarR^HarR^HarR^HarR^HarR^HarR^Hfe1C4", "ln": 2657, "col": 79, "line": 94 }, { "b": "wGUMevpKy4A+frmy\u0026*!hCW\u003er7BrB$4x)9(nayGngA=+XivqYP#u#Q4du\u003e0C\u003eCwhejaz$+6vrujbwGUMeAbPS9zGErUayPslBzblbwGU\u00263BzbP6B0bgmC5IhuwGUI$C4(2iz/dfp3jNtwxK@r6vr=H6B.@msB.$P0AV/pjay]4[x(do{aAhd9v}xZ7", "ln": 3507, "col": 40, "line": 122 }, { "b": "t{%xdBz%n]fkUAswO\u003e{[e[X)uxMW=px(tUlx\u003eG5kB1X%+A+e\u0026]A+fb#wGUJ4v%8T1zGGrex(v(w4giKKbo[s9x(mS%C)$8\u00263rg{^ze0)4w{CIwB7]J8efFLyAV!}rvqP$1wH[%wAbu.azE:\u003e]By/GlwPz68xMOunB2\u003e%cxk8E3BZ=$kz/4dHwPz\u003c6AXzJCA=U/jdgDQ[3sEmHvQTs\u003e4gjv6zG6Cnx(n0lvqG:5eOuhFwPz\u003c6AT-v-u%\u003cAJ4glGJu$9L=xBLp]aARgnB7GwmvRGEcyi7HHv\u003c0vuat4HOvRGEcze0(uyi6*\u003eu%)vK3jNs!boP@%B94\u0026#4gl6FwGSEAwPI@yay]hbwN/?2A^n^qz/fV9x(m#mBzbkdBy/JnaAI4kx(FfnazbLjaz1$\u003exDPSQxcq8mzdm6%az\u003eXixM4Al4giKKra]?=By/JnB0a$3zxJz1aAzQxaA}KwxDQ5*wmWxdB0bywayMy4A=leywPxyj3jNtuB-5sgy?$koxK@rdwPI%miT(A93sEmHvQTs\u003e4gjv6zG6CnBy/Jn4glGJu\u003e0CL3rgOTBrC0mB7]J8y?j-awPRQ7", "ln": 4751, "col": 37, "line": 151 }, { "b": "x\u003eG5kB0bNyayX[8v@Dj6vrb{\u0026aA}KwxDRzgz/YFjz!pa:vrM6Tv@=p5BshbLpiyz.wPw]nD2NsE4giKKbo[sgD2Ns[v@=p5BpwM^3rgXIax}lBw[=c%By/olrc-B]wl*P%BAzFyiXJd0x([3hvLheez7/vpA+PPuvqY\u003e0B$Vl{w[=c%By/olrc-B]wgnTuA=kY7v@@\u0026bvriM1axiS9wPIv4x(FepBA}?pay]4}x(mTbx(v)gazbt7wGUP6AV!?9xd:", "ln": 5424, "col": 80, "line": 185 }, { "b": "z/fRsw[=6)aAIjmB.\u003eOhvR3V\u003cwmPZ(B8$]6aARJABzbkdl$G$AzFsi7y\u003cx09AaJM5Ab](iwN/*m4giKKbo[s8x\u003e7Z(v}u8R4glrlnMn$zoI4Pupd4D5zdC783jNs!boPu(zGG]kvS=^hA=RV%4gkjaazt!bw\u003c4tJA:-{2B1.3wzGG]kvS=^hA=SA*jzwUBaAINkjTaMYBz#pZfe4l.wO#0@y\u00260V)Bzk]fe[n*pfjFTdyi84rz/fVqx\u003c#jbz/P[KB9qgXCwgPfxGXsnfEymKBAzCsj.wbsB7DKrffRGKvlLbc4gjs8avZ6.vqYN?vqE6cB-qqrA=+(kA$5D=3rgXEzFHwuz/)gAzY\u0026F8y-)}nzY\u0026.4C4z!qB-qqrA=+(6aARphB0bBxz!-\u0026[BrC:vviw=IAaJ]flVl^SwN/*@C4B@cxMOunB2\u003e%cz/xo9v@Dg1wN/*@C4Apoz/4dpx\u003eIg4dj=PXvrcE7v%8P@A+{1ztsisyzEN3}wNcY$BAzFyiS", "ln": 5741, "col": 49, "line": 195 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 6238, "entropy": 5.11 }, "text": { "lines": 209, "top_char": 101, "digit_ratio": 0.06, "space_count": 1031, "char_entropy": 5.11, "unique_chars": 83, "top_char_null": 0, "lines_over_200": 1, "top_char_ratio": 0.06, "avg_line_length": 27.85, "max_line_length": 233, "empty_line_ratio": 0.32, "last_line_length": 65, "long_token_count": 1, "whitespace_ratio": 0.23, "line_length_stddev": 38.95, "max_whitespace_run": 38, "repeated_char_sequences": 23 }, "binary": { "peak_region_bytes": 5214, "peak_region_entropy": 5.11 } } }, "id": 4, "mol": "H(Cm₂)Md₂(Pa)", "path": "thurdweb-0.0.8.tgz!!package/README.md", "pid": 0, "risk": 4, "sha": "50cc5317e3d4081cb712cc750c8294645cab1c5aae6e8f6864b1b401a287da7a", "size": 6238, "traits": [ { "id": "metadata/file/naming::uppercase-readme-md-basename", "conf": 1.0, "crit": 3, "desc": "Basename is uppercase README.md" }, { "id": "metadata/file/profile/markup::at-least-four-markdown-section-headings", "conf": 0.97, "crit": 3, "desc": "At least four Markdown section headings" }, { "id": "metadata/file/profile/markup::markdown-heading-before-fenced-block", "conf": 0.98, "crit": 3, "desc": "Markdown-style heading precedes a code fence" }, { "id": "metadata/package/documentation/package-metadata::readme-code-fence-opens-with-import", "conf": 0.9, "crit": 3, "desc": "README code fence opens with import", "spans": [ [ 1697, 22 ] ] }, { "id": "micro-behaviors/communications/http/url/cdn::jsdelivr-npm-script-url", "conf": 0.9, "crit": 3, "desc": "References an npm JavaScript asset on jsDelivr" }, { "id": "micro-behaviors/communications/http/url/forge::github-raw-url", "conf": 0.92, "crit": 3, "desc": "GitHub raw-content URL" }, { "id": "micro-behaviors/communications/http/url/forge::public-code-forge-url", "conf": 0.9, "crit": 3, "desc": "References a public code-forge URL" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"" }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"" }, { "id": "metadata/lang/natural::lang-english--atom-3", "conf": 0.8, "crit": 1, "desc": "English function-word token \"that\"" }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"" }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"" }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"" }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"" } ], "type": "markdown" }, { "ctx": [ { "b": "ra]?=o?wqboLF0FzGxwic@0ojdgDREjV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003ejV$}\u003e4giKKlVl{?A+Pf1BrFD1ayEq!fFUHHu)5\u0026Kx\u003e7*+wO-F-v@bN@xj#9}zEr[X4gk{yA=2JiB7]MgazC)txK#i}vTf8eA:-\u003ccwN)tmw].D]aA7\u003cmv}Yp\u003exjSRpBz\u0026pgzH0vzwPz\u003cgzvD}\u003evSV3)zFs03ayMy5z/x$Az!pblxLzJgB8LVjCvtJ6ayPd#ayPtjz!0G\u0026By!#9wn+$2zdNQbvruj4zvD}+x(4v4asItBwGY#.OkTurBA.elw-wlhdj=P-zY\u0026O4vqE62zxK4mwGT]\u0026w]@l9A+cwqx([3bB-X61A+frlA+P39x(v(uazC.6y\u0026%o5zF78ox([3bB-X:xx(dNavruj4zxK4mwGV2cxj#ydaARJAB-RaB4glP-AcS#SzeS%0w{C{IzdN:2wH[%yBZ/f3B7^9EwncabA+P09By^0CB9g@dx\u003e7Z(B7D)BvqYQez/M$wwO=e(3s!0[x\u003equdz!pblxK@q+z!s9nvrb{gayPd#aARJAAaK6bx(\u003eFpwPz\u003cgzGu}xzY\u003cmqz/3RsxK}RWq/un\u0026CvtJ6azC)tw{5cix(^%0wft#jay]ykB8JPLB9g@bwN/*8Bz\u0026pzxK@q#z!%ldCwg@c4glP-zE^E6x(v)giT(A93rgXIayO.$C4z!az/x#xx\u003eIa3az#atx\u003e7Y%vqYP#BzbxfaAg[jze16jx(v(izF%Shv}u^7xKLZ[ayX)\u003e3tBx/y\u0026%o1wftP7ayP85ay/tex\u003equdz/M$wBZ/AlvqZg3vqE69z/P@lz/fRsz!pblxK@q+z!s9nvrb{i4giKKr7GC2q+]\u003eZs3Y.Maw2GOp/p7\u0026nKM0naMv{wk#O)$q@Ss#efF1=r7G!+r3kmdqC]!Qr9pttmJ:#(sS*vepdcSx3pO5[qBKI.awU(TnLJ2PnKV2#aw2r}oJsFLpdDA[rA78opGeDgnLI=Qmmnm$pASRcmiCU$qC]!Qr7PIS4gk)2awCp5lR6Hrr6-\u0026xoI5h^efEzNr8b\u003eXqY[L9qxOmFp^E#UnKDGKk#F?4rz(T?q:?/{pdbJ#pesRRpdwbMpdE-Emnu/maw2rJper03rZ/+.ax7/%oIuNdnjsT!rA8H+qD1YlqxOt5p*3W/m[uO*3p)@^l}70LavnHtoI4JpoHQ6[pF@r3pfwYboHhlAefEtDo*IorqY[\u003elawU%cmn+m4nKkWmoI5h^edz}/njuGGmn+m1p9q?$avev]nL-87pEVD]pFK\u003e!k%[Q5axhcmr3j$mawU%cmn^hUq:\u0026kWk#HoMnLR++3pW]?o!mz.rA78pmJ+G8aw2rJlR*DLmmg3CpFJ3lnMnk6r7GC2q+]\u003eZs3Y.MawU(Tr7GC2rz#sepF}SepGf\u003eNqxOv@k$\u003c\u003cBm]HK4p9rIbmiCJ8mPrCPqBJhE3jNs", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "metrics": { "file": { "size": 1147, "entropy": 5.25 }, "text": { "lines": 26, "top_char": 111, "digit_ratio": 0, "space_count": 151, "char_entropy": 5.25, "unique_chars": 67, "top_char_null": 0, "top_char_ratio": 0.04, "ascii_art_lines": 1, "avg_line_length": 42.12, "max_line_length": 67, "non_ascii_ratio": 0.01, "empty_line_ratio": 0.19, "last_line_length": 31, "whitespace_ratio": 0.18, "line_length_stddev": 25.14, "max_whitespace_run": 1, "repeated_char_sequences": 1 }, "binary": { "peak_region_bytes": 1024, "peak_region_entropy": 5.26 } } }, "id": 5, "mol": "Md(Pa)", "path": "thurdweb-0.0.8.tgz!!package/LICENCE.md", "pid": 111, "risk": 2, "sha": "def75ba75d6426f1c3f02addf8e175fbe6e0d8a82e541cbdffc16d2bd8fd7d6a", "size": 1147, "traits": [ { "id": "metadata/package/files/dependency::node-modules-path", "conf": 1.0, "crit": 3, "desc": "File located under a node_modules directory" }, { "id": "metadata/permission/prose::permission-permission-term-english", "conf": 0.9, "crit": 2, "desc": "Permission or access term", "spans": [ [ 94, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-2", "conf": 0.8, "crit": 1, "desc": "English function-word token \"and\"", "spans": [ [ 189, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 834, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-6", "conf": 0.8, "crit": 1, "desc": "English function-word token \"with\"", "spans": [ [ 1079, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 175, 0 ] ] }, { "id": "micro-behaviors/data/llm/repository-directive::data-access-verb-token", "conf": 0.88, "crit": 1, "desc": "Data-access verb token", "spans": [ [ 167, 0 ] ] }, { "id": "micro-behaviors/data/llm/repository-directive::repository-agent-directive-marker", "conf": 0.88, "crit": 1, "desc": "Marks text as an agent directive", "spans": [ [ 561, 0 ] ] }, { "id": "micro-behaviors/data/llm/repository-directive::repository-edit-verb-token", "conf": 0.88, "crit": 1, "desc": "Repository-edit verb token", "spans": [ [ 356, 0 ] ] } ], "type": "markdown" } ], "rev": "b520a", "v": "8" } }