{
  "llm": {
    "conf": 0.93122864,
    "grade": "suspicious",
    "model": "Qwen/Qwen3.8-27B",
    "before": {
      "lvl": -1,
      "prob": 0.8973562,
      "class": "benign"
    },
    "outcome": "suspicious",
    "interpretation": "Typosquatting name, minimal content"
  },
  "ml": {
    "v": "7",
    "eng": "2.12.0-beta.1",
    "lvl": 279,
    "conf": 80,
    "mods": [
      {
        "cls": 0,
        "raw": 0.8973562,
        "rte": "az",
        "prob": 0.8973562
      },
      {
        "cls": 0,
        "raw": 0.9832037,
        "rte": "az/npm",
        "prob": 0.9832037
      }
    ],
    "prob": 0.93122864,
    "files": [
      {
        "id": 0,
        "lvl": 279,
        "conf": 80,
        "prob": 0.9312286376953125,
        "type": "npm"
      },
      {
        "id": 1,
        "lvl": -1,
        "conf": 0,
        "prob": 0.00001694758793746587,
        "type": "package.json"
      }
    ],
    "version": "v18.18",
    "analyzed_at": "2026-09-25T02:47:28Z"
  },
  "path": "javac-1.0.0.tgz",
  "raw": {
    "files": [
      {
        "id": 0,
        "ctx": [
          {
            "b": "abZy80000002a:.Yaa(=5jJ.}d*SK=vC*O=eBq.Z1.0m[d.t.e-Rw)ivar4*6e!E(*\u0026hD4[cy5{yQK}Le[\u003c4crT?k3a/9gm\u003cG{EgUoTA\u0026n1a@#q\u003c#a7Mu++3GR*3pQ5KqeYKCI8^@pK}\u003ey*EuYz-c12Qcq4r]tZH4CJX0HTaPYzdGYqojFP#\u0026mt+:eJXrWh1k-=jZfnDeMBx.[rnCyiT=.Tusl(zTC.uc(/8z\u0026AxpFrCdz[tj/lby\u0026x}A]sflU\u003cD$xvMd-i2v",
            "ln": 0
          }
        ],
        "mol": "O(S₂)Md(Pa₃)",
        "sha": "e5702f5de95e3b966eab90eccd21d0ec94c2d8b28e07737fe104a50f02b495ca",
        "path": "javac-1.0.0.tgz",
        "risk": 40,
        "size": 241,
        "type": "npm",
        "facts": {
          "metrics": {
            "file": {
              "size": 241,
              "entropy": 6.98
            },
            "parse": {
              "error_count": 1
            },
            "binary": {
              "peak_region_bytes": 241,
              "peak_region_entropy": 6.98
            }
          }
        },
        "ident": {
          "name": {
            "value": "javac",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "cht8687",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "1.0.0",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "javac",
            "source": "npm.name",
            "verified": false
          }
        },
        "traits": [
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json",
            "from": [
              {
                "file": 1
              }
            ]
          },
          {
            "id": "metadata/package/description/presence::short-description",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package manifest has very short description"
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/skeleton::keywords-single-entry",
            "conf": 0.7,
            "crit": 3,
            "desc": "Keywords array has exactly one entry"
          },
          {
            "id": "metadata/package/versioning/sentinel::npm-version-exactly-1-0-0",
            "atk": "T1195.002",
            "conf": 0.6,
            "crit": 3,
            "desc": "npm package version is exactly 1.0.0"
          },
          {
            "id": "metadata/package/files/included::npm-package-manifest-member",
            "conf": 0.95,
            "crit": 2,
            "desc": "Archive carries npm package manifest"
          },
          {
            "id": "metadata/package/files/missing-entrypoint::npm-main-entrypoint-not-shipped",
            "conf": 0.92,
            "crit": 3,
            "desc": "npm main entrypoint absent from archive",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              0,
              1,
              6
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/trojanized/dist::release-ships-no-runtime-code",
            "atk": "T1195.002",
            "conf": 0.9,
            "crit": 4,
            "desc": "Release declares an entry point it omits",
            "from": [
              {
                "file": 1
              }
            ],
            "uses": [
              0,
              1,
              6
            ],
            "spans": [
              [
                0,
                20
              ]
            ]
          }
        ]
      },
      {
        "ctx": [
          {
            "b": "DKp(rb5Q?awG\u003ceTb5gLfvpHGj3lQDnC4CYnx(v(kiV]R3e?![ia$K6zar\u003eucB7ol8Acb/jzx.a:b5hmwBztlcvpHGj3lQDnzddc@b03?\u003cx(mD)CRi-La$K6zar\u003e(pA+PGmB0rT/DKp(rarR\u003eIwPI@qiV]R*wPI@q3lQEted9Hxb5p+nCw?IjB0rT/tm8F}arR\u003eyB-RUtvrM6?a{]Cnt}us9ar\u003elpBzbPkb03?\u003cv}Y%zhAiSted9Hxb5y$6wO#N2b03?\u003co?wqd3vJl",
            "ln": 0,
            "col": 1,
            "line": 1
          }
        ],
        "depth": 1,
        "facts": {
          "metrics": {
            "file": {
              "size": 215,
              "entropy": 4.39
            },
            "binary": {
              "peak_region_bytes": 215,
              "peak_region_entropy": 4.39
            }
          }
        },
        "id": 1,
        "ident": {
          "name": {
            "value": "javac",
            "source": "npm.name",
            "verified": false
          },
          "trust": "unsigned",
          "authors": [
            {
              "name": "cht8687",
              "role": "author",
              "source": "npm.author"
            }
          ],
          "version": {
            "value": "1.0.0",
            "source": "npm.version",
            "verified": false
          },
          "identifier": {
            "value": "javac",
            "source": "npm.name",
            "verified": false
          }
        },
        "mol": "O(S)Md(Pa₂)",
        "path": "javac-1.0.0.tgz!!package/package.json",
        "pid": 0,
        "refs": [
          {
            "to": "index.js",
            "off": 84,
            "kind": "local"
          }
        ],
        "risk": 4,
        "sha": "f1aa3d5e428b4aee92ec1610566ea00c69a140a6f9a5bb09c8f2748d368250f6",
        "size": 215,
        "traits": [
          {
            "id": "metadata/package/description/presence::short-description",
            "conf": 0.7,
            "crit": 3,
            "desc": "Package manifest has very short description",
            "spans": [
              [
                45,
                9
              ]
            ]
          },
          {
            "id": "metadata/package/entrypoint::main-root-javascript-entry",
            "conf": 0.9,
            "crit": 2,
            "desc": "Root JavaScript main entrypoint",
            "spans": [
              [
                75,
                0
              ]
            ]
          },
          {
            "id": "metadata/package/files/included::npm-publish-root-manifest",
            "conf": 0.95,
            "crit": 2,
            "desc": "Manifest sits at npm publish root"
          },
          {
            "id": "metadata/package/files/included::package-json-basename",
            "conf": 0.95,
            "crit": 3,
            "desc": "Filename is package.json"
          },
          {
            "id": "metadata/package/versioning/sentinel::npm-version-exactly-1-0-0",
            "atk": "T1195.002",
            "conf": 0.6,
            "crit": 3,
            "desc": "npm package version is exactly 1.0.0",
            "spans": [
              [
                23,
                5
              ]
            ]
          },
          {
            "id": "objectives/supply-chain/impersonation/manifest/skeleton::keywords-single-entry",
            "conf": 0.7,
            "crit": 3,
            "desc": "Keywords array has exactly one entry",
            "spans": [
              [
                136,
                11
              ]
            ]
          }
        ],
        "type": "package.json"
      }
    ],
    "rev": "c1ea9",
    "v": "8"
  }
}