veldora 1.0.1
Node.js createHash('sha256') callPerforms JavaScript SHA-256 operation
SHA-256efbde5e71c7d134514a9f574852bc2574fe5150daf148fa7c4ec511172e8a58b
MaleculeH₂(CrPo)
Also flagged by osv (MAL-2026-11018: Malicious code in veldora (npm)) +1 more.
Evidence
5:71… runs
6// under `vite dev` (via hooks.server.ts) and under `pnpm test`. There is no
7// postinstall and nothing runs at `pnpm install` time.
8
9import { createHash } from 'node:crypto';
⋯4 lines
17:45… ialises it to a stable ISO string.
18 const raw = JSON.stringify({ entries, options });
19 return createHash('sha256').update(raw).digest('hex');
20}
21
⋯15 lines
No evidence locations were recorded for this file. Raw result