{
  "ml": {
    "v": "7",
    "id": 156,
    "lvl": -1,
    "conf": 0,
    "prob": 0.000013907750144426245,
    "type": "javascript",
    "version": "v18.18",
    "analyzed_at": "2026-09-23T19:39:43Z"
  },
  "path": "package/dist/generated/runtime-inline.js##url@83",
  "raw": {
    "rev": "a041b",
    "files": [
      {
        "id": 158,
        "mol": "O₂(As₃Xe)H₆(Cm₁₂Db₂₃FHfPoU₅)Md₃(PaPm)",
        "pid": 13,
        "rel": "fetched",
        "sha": "d8a85ebabf6ce1b6f5b2fe502d369b25f82aee9245967512f899c9a21abb26e8",
        "via": "https://registry.npmjs.org/@hyperframes/core/-/core-0.8.64.tgz",
        "path": "pkg:npm/%40hyperframes/core@0.8.64!!package/dist/generated/runtime-inline.js!!package/dist/generated/runtime-inline.js##url@83",
        "risk": 22,
        "size": 450975,
        "type": "javascript",
        "depth": 4,
        "facts": {
          "metrics": {
            "ast": {
              "max_depth": 4,
              "call_count": 0,
              "node_count": 24906
            },
            "file": {
              "size": 450975,
              "entropy": 5.48
            },
            "text": {
              "lines": 1,
              "top_char": 101,
              "max_ws_run": 26,
              "digit_ratio": 0.06,
              "space_count": 22790,
              "char_entropy": 5.48,
              "unique_chars": 96,
              "top_char_null": 0,
              "escape_density": 0.03,
              "lines_over_200": 1,
              "lines_over_500": 1,
              "string_density": 1,
              "top_char_ratio": 0.07,
              "avg_line_length": 450975,
              "lines_over_1000": 1,
              "max_line_length": 450975,
              "hex_escape_count": 13,
              "last_line_length": 450975,
              "long_token_count": 849,
              "whitespace_ratio": 0.05,
              "identifier_density": 1,
              "octal_escape_count": 5,
              "non_printable_ratio": 0,
              "unicode_escape_count": 120,
              "normalized_string_count": 1,
              "repeated_char_sequences": 131,
              "suspicious_string_ratio": 3
            },
            "binds": {
              "count": 1
            },
            "binary": {
              "peak_region_bytes": 210335,
              "peak_region_entropy": 5.6
            },
            "strings": {
              "sql": 1,
              "bytes": 438289,
              "count": 1,
              "shell": 1,
              "very_long": 1,
              "avg_length": 438289,
              "max_length": 438289,
              "avg_entropy": 5.47,
              "unicode_heavy": 1,
              "high_entropy_count": 1,
              "embedded_code_candidates": 1
            },
            "consistency": {
              "extension_content_mismatch": 1,
              "extension_content_mismatch.script_as_unknown": 1
            },
            "identifiers": {
              "count": 1,
              "unique": 1,
              "avg_length": 12,
              "max_length": 12,
              "min_length": 12,
              "avg_entropy": 3.02,
              "reuse_ratio": 1,
              "all_uppercase_ratio": 1
            }
          }
        },
        "traits": [
          {
            "id": "metadata/build/bundler/asset::has-sourcemap",
            "conf": 0.9,
            "crit": 2,
            "desc": "Code has source map reference",
            "spans": [
              [
                0,
                0
              ],
              [
                23247,
                0
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::void-zero",
            "conf": 0.6,
            "crit": 2,
            "desc": "Uses minifier-style void 0 for undefined",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "metadata/file/catalog/unicode::escaped-unicode-codepoint",
            "conf": 0.99,
            "crit": 3,
            "desc": "Escaped Unicode codepoint in source",
            "spans": [
              [
                424590,
                6
              ]
            ]
          },
          {
            "id": "metadata/lang/generated::codegen-source-path",
            "conf": 0.9,
            "crit": 2,
            "desc": "Code generation source path"
          },
          {
            "id": "metadata/lang/javascript-features::es6-class",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 class declaration",
            "spans": [
              [
                302766,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::use-strict-directive",
            "conf": 0.6,
            "crit": 2,
            "desc": "Contains a JavaScript use strict directive",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-1",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"the\"",
            "spans": [
              [
                0,
                0
              ],
              [
                65058,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-2",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"and\"",
            "spans": [
              [
                0,
                0
              ],
              [
                82644,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-3",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"that\"",
            "spans": [
              [
                0,
                0
              ],
              [
                170962,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-4",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"have\"",
            "spans": [
              [
                0,
                0
              ],
              [
                171845,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-5",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"for\"",
            "spans": [
              [
                0,
                0
              ],
              [
                453,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-6",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"with\"",
            "spans": [
              [
                0,
                0
              ],
              [
                50424,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/natural::lang-english--atom-7",
            "conf": 0.8,
            "crit": 1,
            "desc": "English function-word token \"this\"",
            "spans": [
              [
                0,
                0
              ],
              [
                1448,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/files/runtime::javascript-dist-tree-artifact",
            "conf": 0.95,
            "crit": 3,
            "desc": "JavaScript/TypeScript file under dist"
          },
          {
            "id": "metadata/permission/dom::observe-document-body-call",
            "conf": 0.85,
            "crit": 3,
            "desc": ".observe(document.body) call",
            "spans": [
              [
                259031,
                21
              ],
              [
                286217,
                21
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/client/response-body::fetch-response-body-read",
            "conf": 0.9,
            "crit": 3,
            "desc": "JavaScript fetch reads response body",
            "spans": [
              [
                0,
                73
              ],
              [
                186180,
                73
              ],
              [
                259031,
                128
              ],
              [
                259314,
                128
              ],
              [
                339311,
                134
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/body::base64-encoded-post-body--rx-4",
            "conf": 0.8,
            "crit": 3,
            "desc": "Go/JavaScript Base64 before POST or upload",
            "spans": [
              [
                0,
                128
              ],
              [
                36287,
                244
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/build::network-destination-function-binding",
            "mbc": "C0002",
            "conf": 0.94,
            "crit": 3,
            "desc": "Network destination assigned from call",
            "spans": [
              [
                0,
                7
              ],
              [
                26704,
                7
              ],
              [
                205635,
                20
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/navigation::browser-location-origin-read",
            "conf": 0.85,
            "crit": 3,
            "desc": "Reads current page origin from browser location",
            "spans": [
              [
                0,
                22
              ],
              [
                110947,
                22
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/user-agent::navigator-useragent-assigned",
            "conf": 0.9,
            "crit": 3,
            "desc": "Saves the browser User-Agent value",
            "spans": [
              [
                259031,
                25
              ],
              [
                435676,
                25
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/ipc/message::postmessage-to-parent",
            "conf": 0.88,
            "crit": 3,
            "desc": "Sends postMessage to parent frame",
            "spans": [
              [
                0,
                26
              ],
              [
                60127,
                26
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::inline-application-or-font-data-uri",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.95,
            "crit": 3,
            "desc": "Contains base64 application or font data URI",
            "spans": [
              [
                0,
                29
              ],
              [
                31410,
                29
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::inline-image-data-uri-context",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.95,
            "crit": 3,
            "desc": "Contains an inline image data URI",
            "spans": [
              [
                0,
                128
              ],
              [
                193496,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::inline-javascript-data-uri-context",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.95,
            "crit": 3,
            "desc": "Inline JavaScript or TypeScript data URI",
            "spans": [
              [
                259031,
                28
              ],
              [
                323997,
                28
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/buffer/alloc::buffer-from-call",
            "conf": 0.4,
            "crit": 3,
            "desc": "Calls Buffer.from at least three times",
            "spans": [
              [
                22,
                128
              ],
              [
                22039,
                128
              ],
              [
                36012,
                128
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/buffer/record::slice-decimal-offset-pair",
            "conf": 0.8,
            "crit": 3,
            "desc": "Slice split at decimal offsets",
            "spans": [
              [
                0,
                10
              ],
              [
                121466,
                10
              ],
              [
                131906,
                10
              ],
              [
                137423,
                12
              ],
              [
                150392,
                11
              ],
              [
                259031,
                10
              ],
              [
                270754,
                10
              ],
              [
                270791,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/analysis::for-loop-content",
            "conf": 0.3,
            "crit": 2,
            "desc": "for loop (content)",
            "spans": [
              [
                0,
                0
              ],
              [
                3784,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call",
            "conf": 0.88,
            "crit": 3,
            "desc": "Calls a matcher in a conditional expression",
            "spans": [
              [
                0,
                14
              ],
              [
                4868,
                14
              ],
              [
                6509,
                89
              ],
              [
                6727,
                64
              ],
              [
                9958,
                64
              ],
              [
                19710,
                31
              ],
              [
                20040,
                29
              ],
              [
                20283,
                29
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/analysis::js-map-conditional-index-lookup",
            "conf": 0.88,
            "crit": 3,
            "desc": "Conditional indexed map lookup",
            "spans": [
              [
                0,
                73
              ],
              [
                16537,
                73
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/dispatch::js-proxy-get-trap",
            "conf": 0.9,
            "crit": 3,
            "desc": "Proxy intercepts property reads",
            "spans": [
              [
                0,
                128
              ],
              [
                168937,
                163
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/error-handling::empty-arrow-catch-handler",
            "conf": 0.8,
            "crit": 3,
            "desc": "Empty arrow catch discards rejection",
            "spans": [
              [
                259031,
                14
              ],
              [
                285966,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::js-length-loop-compound-add",
            "conf": 0.85,
            "crit": 3,
            "desc": "Length-bounded loop uses compound addition",
            "spans": [
              [
                0,
                41
              ],
              [
                25062,
                41
              ],
              [
                46001,
                30
              ],
              [
                54229,
                68
              ],
              [
                95749,
                26
              ],
              [
                103171,
                38
              ],
              [
                119366,
                28
              ],
              [
                120480,
                38
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/loop::js-object-key-in-loop",
            "conf": 0.9,
            "crit": 3,
            "desc": "JavaScript iterates enumerable object keys",
            "spans": [
              [
                0,
                15
              ],
              [
                9074,
                15
              ],
              [
                10221,
                15
              ],
              [
                10431,
                15
              ],
              [
                13526,
                15
              ],
              [
                14381,
                15
              ],
              [
                47114,
                15
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-close",
            "conf": 0.86,
            "crit": 3,
            "desc": "Calls a parenthesized function expression",
            "spans": [
              [
                0,
                4
              ],
              [
                177521,
                4
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/decode/url::js-unescape-call-text",
            "atk": "T1140",
            "conf": 0.9,
            "crit": 3,
            "desc": "Calls JavaScript unescape in source text",
            "spans": [
              [
                0,
                9
              ],
              [
                36292,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/embedded/script::embedded-php-command-exec-call",
            "conf": 0.96,
            "crit": 3,
            "desc": "Embedded PHP command execution call",
            "spans": [
              [
                114704,
                5
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/base64::btoa-utf8-safe-encode",
            "conf": 0.88,
            "crit": 3,
            "desc": "UTF-8-safe Base64 encoding via btoa()",
            "spans": [
              [
                0,
                128
              ],
              [
                36287,
                33
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/charcode::charcode-at",
            "conf": 0.7,
            "crit": 3,
            "desc": "charCodeAt() method call",
            "spans": [
              [
                0,
                128
              ],
              [
                35094,
                12
              ],
              [
                259031,
                128
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/xor::js-xor-op",
            "conf": 1.0,
            "crit": 2,
            "desc": "XOR operator",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/manipulation::log-redaction-option",
            "conf": 0.85,
            "crit": 3,
            "desc": "Log redaction option or call",
            "spans": [
              [
                0,
                6
              ],
              [
                233325,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/reassembly::array-index-i",
            "conf": 0.7,
            "crit": 1,
            "desc": "Array index i access",
            "spans": [
              [
                0,
                0
              ],
              [
                511,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/reassembly::buffer-identifier",
            "conf": 0.3,
            "crit": 1,
            "desc": "Node Buffer identifier reference",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/serialize/schema-object::json-object-variable-field",
            "conf": 0.84,
            "crit": 3,
            "desc": "JSON object includes a variable-valued field",
            "spans": [
              [
                259031,
                128
              ],
              [
                272019,
                129
              ],
              [
                357792,
                103
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/arithmetic::lsb-bit-mask-source",
            "conf": 1.0,
            "crit": 3,
            "desc": "Source contains low-bit mask syntax",
            "spans": [
              [
                0,
                5
              ],
              [
                120814,
                5
              ],
              [
                259031,
                3
              ],
              [
                421067,
                3
              ],
              [
                422105,
                3
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/arithmetic::source-xor-operation",
            "conf": 1.0,
            "crit": 3,
            "desc": "Source references XOR syntax",
            "spans": [
              [
                259031,
                3
              ],
              [
                287315,
                3
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/dynamic/reflect::computed-this-method-call",
            "conf": 0.9,
            "crit": 3,
            "desc": "Calls a computed this method",
            "spans": [
              [
                0,
                8
              ],
              [
                6360,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/property/computed::js-computed-call-cluster",
            "conf": 0.86,
            "crit": 3,
            "desc": "Dense computed-property call cluster (3+)",
            "spans": [
              [
                0,
                8
              ],
              [
                6360,
                8
              ],
              [
                8625,
                13
              ],
              [
                16345,
                5
              ],
              [
                49420,
                24
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/property/identity::host-user-object-fields",
            "conf": 0.9,
            "crit": 3,
            "desc": "Host or user object field keys",
            "spans": [
              [
                0,
                6
              ],
              [
                184995,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/property/read::result-dot-member-read",
            "conf": 0.9,
            "crit": 3,
            "desc": "Reads result through dot or arrow access",
            "spans": [
              [
                0,
                11
              ],
              [
                49323,
                11
              ],
              [
                58516,
                9
              ],
              [
                160076,
                14
              ],
              [
                259031,
                9
              ],
              [
                365622,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::indexed-array-element-copy",
            "conf": 0.8,
            "crit": 2,
            "desc": "Copies one indexed array element to another",
            "spans": [
              [
                0,
                0
              ],
              [
                9931,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::js-array-sort-call",
            "conf": 0.72,
            "crit": 3,
            "desc": "Sorts a JavaScript array",
            "spans": [
              [
                0,
                6
              ],
              [
                92513,
                6
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read",
            "conf": 0.8,
            "crit": 2,
            "desc": "Reads an array element into a variable",
            "spans": [
              [
                3909,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/assembly::zero-padded-integer-format",
            "conf": 0.9,
            "crit": 3,
            "desc": "Code formats a zero-padded integer",
            "spans": [
              [
                0,
                3
              ],
              [
                79666,
                3
              ],
              [
                80602,
                3
              ],
              [
                82789,
                3
              ],
              [
                84142,
                3
              ],
              [
                84904,
                3
              ],
              [
                259031,
                3
              ],
              [
                292715,
                3
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::js-fromcharcode-alias",
            "conf": 0.9,
            "crit": 3,
            "desc": "Aliases String.fromCharCode conversion function",
            "spans": [
              [
                0,
                21
              ],
              [
                37476,
                21
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/conversion::tostring-token",
            "conf": 1.0,
            "crit": 3,
            "desc": "References the toString conversion method",
            "spans": [
              [
                0,
                8
              ],
              [
                2829,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/search::compiled-js-pattern-set",
            "conf": 0.9,
            "crit": 3,
            "desc": "Compiles a set of JavaScript regex patterns",
            "spans": [
              [
                0,
                128
              ],
              [
                161364,
                11
              ],
              [
                259031,
                128
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/search::js-includes-indexof-call",
            "conf": 0.82,
            "crit": 2,
            "desc": "Searches strings with includes or indexOf",
            "spans": [
              [
                0,
                0
              ],
              [
                3125,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/hardware/input/audio::web-audio-worklet-dsp",
            "conf": 0.9,
            "crit": 3,
            "desc": "Web Audio worklet DSP bundle",
            "spans": [
              [
                259031,
                128
              ],
              [
                312291,
                409
              ]
            ]
          },
          {
            "id": "micro-behaviors/os/env/system-info::env-lang-check",
            "conf": 0.5,
            "crit": 3,
            "desc": "JavaScript reads LANG environment variable",
            "spans": [
              [
                0,
                128
              ],
              [
                57790,
                16
              ]
            ]
          },
          {
            "id": "micro-behaviors/process/hook/webextension::access-control-allow-origin-header",
            "conf": 0.8,
            "crit": 3,
            "desc": "Access-Control-Allow-Origin header name",
            "spans": [
              [
                259031,
                128
              ],
              [
                336874,
                27
              ]
            ]
          },
          {
            "id": "micro-behaviors/time/query::js-triple-date-now",
            "conf": 0.4,
            "crit": 3,
            "desc": "3+ Date.now() calls",
            "spans": [
              [
                0,
                9
              ],
              [
                134885,
                9
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/click::capture-phase-listener-bound",
            "conf": 0.88,
            "crit": 3,
            "desc": "Capture-phase listener with bound handler",
            "spans": [
              [
                0,
                79
              ],
              [
                138622,
                79
              ],
              [
                138710,
                35
              ],
              [
                259031,
                26
              ],
              [
                367190,
                26
              ],
              [
                384569,
                90
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/click::paired-prevent-and-stop",
            "conf": 0.9,
            "crit": 3,
            "desc": "preventDefault then stopImmediatePropagation",
            "spans": [
              [
                0,
                66
              ],
              [
                137904,
                66
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::ad-selector-token",
            "conf": 0.8,
            "crit": 3,
            "desc": "Ad-related CSS selector token",
            "spans": [
              [
                146268,
                4
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::dom-template-text-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Assigns template literal to node text",
            "spans": [
              [
                0,
                15
              ],
              [
                62420,
                15
              ],
              [
                184113,
                15
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::domparser-parse-html",
            "conf": 0.82,
            "crit": 3,
            "desc": "Parses HTML with DOMParser",
            "spans": [
              [
                0,
                29
              ],
              [
                186273,
                29
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/create::browser-create-method-reference",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a DOM element creation method",
            "spans": [
              [
                0,
                13
              ],
              [
                62368,
                13
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/create::browser-insert-mutate-method-reference",
            "conf": 0.85,
            "crit": 3,
            "desc": "References a DOM insertion or mutation method",
            "spans": [
              [
                0,
                11
              ],
              [
                62814,
                11
              ],
              [
                65710,
                12
              ],
              [
                259031,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/style::browser-style-position-assignment",
            "conf": 0.9,
            "crit": 3,
            "desc": "Assigns CSS position through DOM style",
            "spans": [
              [
                259031,
                128
              ],
              [
                269774,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/style::css-display-none",
            "conf": 0.9,
            "crit": 3,
            "desc": "CSS display none declaration",
            "spans": [
              [
                0,
                12
              ],
              [
                106201,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/style::zero-width-element-style",
            "conf": 0.92,
            "crit": 3,
            "desc": "CSS sets element width to zero",
            "spans": [
              [
                259031,
                7
              ],
              [
                441675,
                7
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/eval/browser::html-createelement-object",
            "atk": "T1027,T1059.007",
            "conf": 0.9,
            "crit": 3,
            "desc": "Creates a scripted DOM object",
            "spans": [
              [
                62359,
                65
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/string/recovery::js-indirect-replace-call",
            "conf": 0.75,
            "crit": 3,
            "desc": "Indirect string replacement call",
            "spans": [
              [
                0,
                8
              ],
              [
                6364,
                8
              ]
            ]
          },
          {
            "id": "objectives/anti-static/obfuscation/string/reverse::js-reverse-assignment-tail",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.97,
            "crit": 3,
            "desc": "Variable assigned reverse call result",
            "spans": [
              [
                0,
                13
              ],
              [
                18311,
                13
              ]
            ]
          },
          {
            "id": "objectives/execution/automation/agent::agent-target-operation-forward",
            "atk": "T1059,T1190,T1595",
            "conf": 0.88,
            "crit": 3,
            "desc": "Agent names target probing activity",
            "spans": [
              [
                0,
                102
              ],
              [
                92733,
                102
              ],
              [
                92907,
                107
              ],
              [
                93725,
                53
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::js-large-minified-bundle",
            "conf": 0.92,
            "crit": 2,
            "desc": "Large minified JavaScript bundle",
            "spans": [
              [
                0,
                450975
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::js-medium-minified-line",
            "conf": 0.9,
            "crit": 2,
            "desc": "JavaScript contains a long minified line",
            "spans": [
              [
                0,
                450975
              ]
            ]
          },
          {
            "id": "metadata/file/string/count::few-string-literals",
            "conf": 0.4,
            "crit": 3,
            "desc": "File has very few string literals"
          },
          {
            "id": "metadata/lang/javascript-features::arrow-function",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 arrow function syntax",
            "spans": [
              [
                40,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::async-await",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES2017 async/await syntax",
            "spans": [
              [
                51360,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::const-let",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 const/let declarations",
            "spans": [
              [
                457,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::destructuring",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 destructuring assignment",
            "spans": [
              [
                2134,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::spread-operator",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 spread operator (in array/object context)",
            "spans": [
              [
                14121,
                0
              ]
            ]
          },
          {
            "id": "metadata/lang/javascript-features::template-literal",
            "conf": 0.9,
            "crit": 2,
            "desc": "ES6 template literal syntax",
            "spans": [
              [
                10089,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::catch-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a catch error handler",
            "spans": [
              [
                19463,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::finally-keyword",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains a finally cleanup handler",
            "spans": [
              [
                50315,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/error-handling::try-block-open",
            "conf": 0.5,
            "crit": 2,
            "desc": "Contains the opening of a try block",
            "spans": [
              [
                22,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/testing/scripted::coverage-marker-coverage",
            "conf": 1.0,
            "crit": 2,
            "desc": "References code-coverage tooling",
            "spans": [
              [
                212511,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/header/content-type::application-json",
            "conf": 0.65,
            "crit": 3,
            "desc": "References the application/json media type",
            "spans": [
              [
                22,
                128
              ],
              [
                31410,
                29
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/request/client::fetch-then-json",
            "atk": "T1071.001",
            "mbc": "C0002",
            "conf": 0.74,
            "crit": 3,
            "desc": "fetch() response JSON parse",
            "spans": [
              [
                0,
                54
              ],
              [
                188482,
                54
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/domain::js-remote-host-url",
            "conf": 0.75,
            "crit": 3,
            "desc": "Contains a hardcoded remote HTTP(S) URL",
            "spans": [
              [
                57725,
                24
              ],
              [
                57947,
                23
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/url/query::query-parameter-mutation",
            "conf": 0.82,
            "crit": 3,
            "desc": "Mutates a URL query parameter collection",
            "spans": [
              [
                0,
                17
              ],
              [
                111526,
                17
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::encoded-http-url",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.85,
            "crit": 3,
            "desc": "Encoded URL decoded to http(s)",
            "spans": [
              [
                0,
                103
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/url/encoded::encoded-https-url",
            "atk": "T1027",
            "mbc": "B0032",
            "conf": 0.9,
            "crit": 3,
            "desc": "Encoded URL decoded to https",
            "spans": [
              [
                0,
                103
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/error-handling::catch-returns-constant-only",
            "conf": 0.88,
            "crit": 3,
            "desc": "Catch block only returns a constant",
            "spans": [
              [
                0,
                18
              ],
              [
                110915,
                18
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/control-flow/error-handling::empty-named-catch-text",
            "conf": 0.92,
            "crit": 3,
            "desc": "Text has empty named-parameter catch",
            "spans": [
              [
                0,
                10
              ],
              [
                58768,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/decode/base64::base64-decode-call-text",
            "conf": 0.86,
            "crit": 3,
            "desc": "JavaScript invokes a Base64 decoder",
            "spans": [
              [
                0,
                5
              ],
              [
                22326,
                5
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encoded::base64-token",
            "conf": 0.7,
            "crit": 2,
            "desc": "Calls a Base64 conversion helper",
            "spans": [
              [
                0,
                0
              ],
              [
                22326,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/concat::js-loop-string-concat",
            "conf": 0.6,
            "crit": 2,
            "desc": "String concatenation in loop body using array",
            "spans": [
              [
                259031,
                0
              ],
              [
                438236,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/redirect::shell-dd-file-write",
            "conf": 0.86,
            "crit": 3,
            "desc": "Shell dd writes output to a file",
            "spans": [
              [
                0,
                51
              ],
              [
                2929,
                51
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::dom-text-content-read",
            "conf": 0.82,
            "crit": 3,
            "desc": "Reads DOM text content",
            "spans": [
              [
                0,
                12
              ],
              [
                62421,
                12
              ],
              [
                183736,
                10
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom-access::template-getattribute",
            "conf": 0.85,
            "crit": 3,
            "desc": "Template expression reads DOM attributes",
            "spans": [
              [
                259031,
                16
              ],
              [
                376854,
                16
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/tree::browser-insert-before",
            "conf": 0.8,
            "crit": 3,
            "desc": "Inserts DOM node before reference node",
            "spans": [
              [
                0,
                14
              ],
              [
                10289,
                14
              ]
            ]
          },
          {
            "id": "micro-behaviors/ui/window/dom/tree::browser-node-remove",
            "conf": 0.8,
            "crit": 3,
            "desc": "Removes a child node from the DOM",
            "spans": [
              [
                0,
                13
              ],
              [
                13106,
                13
              ]
            ]
          },
          {
            "id": "metadata/build/bundler/asset::js-any-bundle-output",
            "conf": 0.95,
            "crit": 2,
            "desc": "Contains bundled or minified JavaScript",
            "uses": [
              75,
              76
            ],
            "spans": [
              [
                0,
                450975
              ]
            ]
          },
          {
            "id": "metadata/build/minifier::terser-output",
            "conf": 0.85,
            "crit": 2,
            "desc": "JavaScript minifier output markers",
            "uses": [
              1,
              5
            ],
            "spans": [
              [
                12860,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/testing/scripted::coverage-markers-a",
            "conf": 1.0,
            "crit": 2,
            "desc": "Coverage marker family A",
            "uses": [
              87
            ],
            "spans": [
              [
                212511,
                0
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/download/write::script-fetches-and-writes-remote-content",
            "atk": "T1105",
            "conf": 0.94,
            "crit": 3,
            "desc": "JavaScript saves fetched remote content",
            "uses": [
              15,
              99
            ],
            "spans": [
              [
                0,
                73
              ],
              [
                2929,
                51
              ],
              [
                186180,
                73
              ],
              [
                259031,
                128
              ],
              [
                259314,
                128
              ],
              [
                339311,
                134
              ]
            ]
          },
          {
            "id": "micro-behaviors/communications/http/user-agent::navigator-useragent-variable-conditional",
            "conf": 0.92,
            "crit": 3,
            "desc": "Branches on a saved browser User-Agent",
            "uses": [
              19,
              27
            ],
            "spans": [
              [
                259031,
                12
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/encode/xor::js-indexed-buffer-xor-loop",
            "conf": 0.88,
            "crit": 3,
            "desc": "JavaScript loop XOR-transforms indexed buffer",
            "uses": [
              26,
              38,
              40,
              41
            ],
            "spans": [
              [
                0,
                5
              ],
              [
                22,
                128
              ]
            ]
          },
          {
            "id": "micro-behaviors/data/string/concat::js-loop-string-concat-any",
            "conf": 0.6,
            "crit": 3,
            "desc": "String concatenation inside JavaScript loop",
            "uses": [
              98
            ],
            "spans": [
              [
                259031,
                8
              ],
              [
                438236,
                8
              ]
            ]
          },
          {
            "id": "micro-behaviors/fs/write/file/redirect::shell-file-write-command",
            "conf": 0.86,
            "crit": 3,
            "desc": "Shell command redirects output to file",
            "uses": [
              99
            ],
            "spans": [
              [
                0,
                51
              ],
              [
                2929,
                51
              ]
            ]
          }
        ]
      }
    ]
  }
}