{ "llm": { "conf": 0.96189016, "grade": "hostile", "model": "Qwen/Qwen3.8-27B", "before": { "lvl": -1, "prob": 0.94311965, "class": "benign" }, "outcome": "suspicious", "interpretation": "obfuscated eval preinstall payload" }, "ml": { "v": "7", "eng": "2.8.0", "lvl": 279, "conf": 80, "mods": [ { "cls": 0, "raw": 0.94311965, "rte": "az", "prob": 0.94311965 }, { "cls": 0, "raw": 0.95882815, "rte": "az/npm", "prob": 0.95882815 } ], "prob": 0.96189016, "files": [ { "id": 0, "lvl": 279, "conf": 80, "prob": 0.9618901610374451, "type": "npm" }, { "id": 1, "lvl": -1, "conf": 0, "prob": 0.0002974271774291992, "type": "javascript" }, { "id": 2, "lvl": -1, "conf": 0, "prob": 0.00001432498265785398, "type": "javascript" }, { "id": 4, "lvl": -1, "conf": 0, "prob": 0.00004881620407104492, "type": "package.json" }, { "id": 17, "lvl": -1, "conf": 0, "prob": 0.000013768672943115234, "type": "javascript" }, { "id": 18, "lvl": -1, "conf": 0, "prob": 0.000015040238395158667, "type": "javascript" }, { "id": 20, "lvl": -1, "conf": 0, "prob": 0.000018904605894931592, "type": "javascript" } ], "version": "v18.18", "analyzed_at": "2026-09-08T00:06:05Z" }, "path": "react-native-country-select-0.3.91.tgz", "raw": { "files": [ { "id": 0, "ctx": [ { "b": "abZy8000000@}S2x)nq\u003eWL(\u003ci(SpsDW{eLPcM%{ln$zG3j\u003cPs5tD551sR7\u003chV)nMd\u0026hGJd?*MvwquQS:qC#+\u003epo6Q9LFChJVgmeY3JN8jJnAlFaaS5h)sUC9WF{[eqbXg5\u003e^-8\u003eIy@UXu+il:n%l6dITRAVL4m\u0026m@V.v62Ma", "ln": 0 } ], "mol": "O₂(S₂As₂)H₅(CmCrDb₄Os₃Po₄)Md₂(Pa₄)", "sha": "f04950abd52ceacf6d1fc5931b83ea3d0b9018e34084b0b9885387b6055ef7c6", "path": "react-native-country-select-0.3.91.tgz", "refs": [ { "to": "pkg:github/astroonauta/react-native-country-select", "off": 0, "kind": "repository" } ], "risk": 54, "size": 656525, "type": "npm", "facts": { "metrics": { "file": { "size": 656525, "entropy": 8 }, "parse": { "error_count": 1 }, "binary": { "peak_region_bytes": 656384, "peak_region_entropy": 7.86 }, "consistency": { "name_repo_mismatch": 0 } } }, "ident": { "name": { "value": "react-native-country-select", "source": "npm.name", "verified": false }, "urls": [ { "url": "git+https://github.com/AstrOOnauta/react-native-country-select.git", "kind": "repository", "source": "npm.repository.url" }, { "url": "https://github.com/AstrOOnauta/react-native-country-select#readme", "kind": "homepage", "source": "npm.homepage" } ], "trust": "unsigned", "authors": [ { "url": "https://github.com/AstrOOnauta", "name": "AstrOOnauta", "role": "author", "source": "npm.author" } ], "version": { "value": "0.3.91", "source": "npm.version", "verified": false }, "identifier": { "value": "react-native-country-select", "source": "npm.name", "verified": false } }, "traits": [ { "id": "metadata/file/profile/language::script-cyrillic", "conf": 0.8, "crit": 3, "desc": "Contains a Cyrillic script sequence", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-date-method-call", "conf": 0.82, "crit": 3, "desc": "Calls a Date method through bracket notation", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/hidden-payload/encoding::eval-atob", "atk": "T1195.002", "conf": 0.95, "crit": 4, "desc": "eval() of atob() decoded data", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/encode/char-code::fromcharcode-call", "conf": 0.9, "crit": 3, "desc": "Builds characters with String.fromCharCode", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/interpreter/eval::js-eval-call-expression-arg", "conf": 0.9, "crit": 3, "desc": "JavaScript eval executes a call result", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/module/dynamic-load::node-dynamic-require-call", "conf": 0.82, "crit": 3, "desc": "Requires a module named by a call", "from": [ { "file": 1 } ] }, { "id": "metadata/file/extension/identity::declaration-file-extension", "conf": 1.0, "crit": 1, "desc": "File uses a source declaration extension", "from": [ { "file": 21 } ] }, { "id": "metadata/file/profile/identity::common-node-lifecycle-script-basename", "conf": 0.8, "crit": 1, "desc": "Common Node.js lifecycle-script filename", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/data/source/arithmetic::js-binary-subtraction-cluster", "conf": 0.95, "crit": 2, "desc": "Many JavaScript infix subtraction expressions" }, { "id": "micro-behaviors/data/decode/base64::atob-decode", "conf": 0.9, "crit": 3, "desc": "Decodes Base64 data with JavaScript atob()", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::preinstall-runs-node-local-script", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "preinstall hook runs a local Node.js script" }, { "id": "metadata/package/scripts/develop::has-test-script", "conf": 1.0, "crit": 1, "desc": "package.json declares a test script" }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata" }, { "id": "micro-behaviors/data/control-flow/membership::country-list-membership-call", "conf": 0.92, "crit": 3, "desc": "JavaScript checks country list membership", "from": [ { "file": 18 } ] }, { "id": "micro-behaviors/data/decode/base64::lower-first-base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a lower-first Base64 alphabet", "from": [ { "file": 1 } ] }, { "id": "metadata/import/builtin::require-os", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js os module", "from": [ { "file": 1 } ] }, { "id": "metadata/lang/scripted::dts-declaration-file", "conf": 0.99, "crit": 2, "desc": "TypeScript declaration file", "from": [ { "file": 21 } ] }, { "id": "metadata/file/profile/locale::translation-module-basename", "conf": 0.9, "crit": 2, "desc": "Translation module basename", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/os/module/load::node-system-module-import-set", "conf": 0.88, "crit": 3, "desc": "Imports at least two Node system modules", "from": [ { "off": 1030, "file": 1, "line": 24 } ], "uses": [ 15, 24 ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-require", "conf": 0.85, "crit": 3, "desc": "Node.js vm module import", "from": [ { "file": 1 } ] }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.9, "crit": 3, "desc": "Repository identifies major Git host" }, { "id": "metadata/package/manifest/entrypoint::main-runtime-tree-entrypoint", "conf": 0.85, "crit": 2, "desc": "Package main targets runtime tree" }, { "id": "metadata/file/profile/locale::russian-locale", "conf": 0.75, "crit": 1, "desc": "Russian locale identifier", "from": [ { "file": 1 } ], "uses": [ 38 ] }, { "id": "metadata/package/manifest/entrypoint::pkg-types-field", "conf": 0.9, "crit": 3, "desc": "Package declares TypeScript types entry" }, { "id": "metadata/import/builtin::require-fs", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js fs module", "from": [ { "file": 1 } ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::push-shift-bracket-pattern", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Bracket-notation push/shift self-rotation", "from": [ { "file": 1 } ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/decode/base64::base64-decode-call-text", "conf": 0.86, "crit": 3, "desc": "JavaScript invokes a Base64 decoder", "from": [ { "file": 1 } ] }, { "id": "objectives/supply-chain/hidden-payload/encoding::eval-call-expr-arg", "atk": "T1195.002", "conf": 0.8, "crit": 3, "desc": "eval() decoder-like call argument" }, { "id": "metadata/package/testing/presence/harness::test-or-declaration-file", "conf": 0.85, "crit": 1, "desc": "File is a test or type-declaration source file", "from": [ { "file": 21 } ], "uses": [ 6 ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::js-arithmetic-array-init", "conf": 0.95, "crit": 3, "desc": "Array initialization with repetitive arithmetic expressions (obfuscation)", "from": [ { "off": 65, "file": 1, "line": 3 }, { "file": 2 } ], "uses": [ 8, 31, 37, 49 ] }, { "id": "metadata/file/profile/metrics::js-minus-operator-node-density", "conf": 0.95, "crit": 2, "desc": "Subtraction nodes exceed 2% AST density", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/os/sysinfo/platform/browser::browser-identity-input", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "Reads browser identity or display input", "from": [ { "file": 2 } ], "uses": [ 43 ] }, { "id": "metadata/package/scripts/lifecycle::has-preinstall-script", "conf": 0.95, "crit": 3, "desc": "Manifest declares npm preinstall lifecycle hook" }, { "id": "micro-behaviors/process/user/query::node-os-alias-userinfo-call", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "Node os-alias user identity query", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-korean", "conf": 0.8, "crit": 3, "desc": "Contains Hangul script", "from": [ { "file": 20 } ] }, { "id": "micro-behaviors/data/encoded::base64-token", "conf": 0.7, "crit": 2, "desc": "Calls a Base64 conversion helper", "from": [ { "file": 1 } ] }, { "id": "metadata/file/extension/identity::javascript-source-extension", "conf": 1.0, "crit": 1, "desc": "JavaScript source filename extension", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/locale::locale-ru-ru-dash", "conf": 0.7, "crit": 1, "desc": "Russian locale identifier (ru-RU)", "from": [ { "file": 1 } ] }, { "id": "supply-chain/install-hook/preinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'preinstall' hook that runs during install" }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::has-preinstall", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Has preinstall script hook" }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Package script invokes a language interpreter" }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::has-preinstall-raw", "conf": 0.88, "crit": 3, "desc": "Raw content contains preinstall hook", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/communications/http/user-agent::navigator-useragent-read", "atk": "T1082", "conf": 0.75, "crit": 3, "desc": "Reads browser User-Agent string", "from": [ { "file": 2 } ] }, { "id": "metadata/file/profile/language::lang-japanese", "conf": 0.8, "crit": 3, "desc": "Contains Hiragana or Katakana script", "from": [ { "file": 20 } ] }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.85, "crit": 2, "desc": "package.json declares a repository URL" }, { "id": "micro-behaviors/crypto/symmetric/xor/loop::xor-modulo-key-loop", "atk": "T1027", "mbc": "B0032", "conf": 0.8, "crit": 3, "desc": "XOR loop uses repeating-key modulo indexing", "from": [ { "file": 1 } ] }, { "id": "micro-behaviors/process/interpreter/eval::js-eval-raw", "conf": 0.7, "crit": 3, "desc": "Executes JavaScript dynamically with eval()", "from": [ { "file": 1 } ] }, { "id": "metadata/file/profile/language::lang-arabic-script", "conf": 0.8, "crit": 3, "desc": "Contains Arabic-script text", "from": [ { "file": 20 } ] }, { "id": "metadata/file/profile/metrics::js-many-minus-operator-nodes", "conf": 0.95, "crit": 2, "desc": "JavaScript AST has 30+ subtraction nodes", "from": [ { "file": 1 } ] }, { "id": "metadata/package/quality/profile::has-typescript", "conf": 0.9, "crit": 3, "desc": "Package declares TypeScript tooling", "from": [ { "file": 4 } ] }, { "id": "micro-behaviors/data/decode/base64::base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a Base64 alphabet", "from": [ { "off": 15268, "file": 1, "line": 389 } ], "uses": [ 14 ] } ] }, { "ctx": [ { "b": "c$WQtv@#B6zxHuBefERnaBsCrarR!sB-7Yhx(v(inHOEcawssengU(RdiJ%AarR^HarR^HA+funA=90%c#HdVat2o(ggq{?awjdB3lQDlaBKOtarR!sB-7Yhx(v(irW.\u0026pawssengU(RdiJ%AarR^HarR^HA+funA=90%c}+Wmat2o(ggAc)awsjC3lQDlaBKOtarR!pz/fSrav)Rraz@ORi%)8MarU(wx(4u6c)o:rt}3[y3lQDlarR^HaARTHaBsCrarR^HarR^HarR!pz/fSrawi?uaAg+fB7E{XBsoZeeIIAegaTL1fNbP/efDI#CSvDeasyn{BY{dwdiHn", "ln": 0, "col": 1, "line": 1 }, { "b": "au.\u003eJawsi\u003earR^HarR^HarR^HarR^HvSD3*yDz\u003eCarR^HarR^HarR!ry\u0026:d{arR^HarR^HarR^HarR^HnlWDXB-Rjzt{@lFcV-%nw]]zac[cPb3lQDlarR^HaBLwxvru0)asIgTaBsCrarR^HarR^HarR^$tpjxjB7=}bc}EL\u0026B7/o1BsguxdjEs=arR^HarR^HEf}8tarV7tEje8Datw3@hz!]6djEs=C42zlmiB-opHX6Iv@${Jc[])SvK@SQCW\u0026Y:asy00l3T*", "ln": 640, "col": 18, "line": 12 }, { "b": "fNbrcwgO\u0026PfNdaZdp1FEm\u003c6@qc#HNUoER8Ej%ioxzy=]ac[])Sf!sC3CRH{YefDrgzZ=[UefDS\u003ev(bR=aBsCrarR^HarR^OC42ifwHxIYoE{I[arR^HarR^Ov@Dl%x\u003eINevpB4:cPSv[fNbnUarR^HEjlY\u0026xDPCXA+flkx(W=kcVs5Ndj=PAauZ\u0026/wPq\u003cbA+cTDw]/sGefE+ijS[=RADL#owHI4peIIATvK@SHc}NA.cOcw(fNd1=efDI#CXeYWdlv(BB9RUkazb+lv@#B6zxI?9ngU(RauZ\u0026]Ejlp=3lQDlazb+lv@#B6zxJErzy=]7efEFmawjdaDKp(rarR^HarUYoBAIRwawTz6at1Y\u0026CRJR=efEOdeG=-(gI5o(awsseoct/efNbrdhyQY{arR^HEf}8tarUGiBrCJBjS)y4wHGlSg=Nfuasy39qB-8=atw3%iwA6cfNbAjvKUO9E0^4\u003cCR-[\u003cefFTHjS)@oarR^HarR^HarR^HwHGlSg+Z*sasx/tr9pO1atw3@wIL!VfNbAfvjrrHay((OCR\u0026\u0026uefDrYl\u0026", "ln": 883, "col": 64, "line": 21 }, { "b": "efDS\u003eg=Efvatw3%vQQYdd\u003cevJfNbDei4Mg1ngDu8cOcw]CR\u0026(vefDS\u003eg?f@yed9HxarR^HarR^HarUhyfNbA^f!sB{p?SducOcw]CR\u0026$=efDS\u003eg?f#zas!MZe[X:qvR/%)yC3$Sd\u003cevJfNbAlhy]%#lSV=acOcw]CR?utefDS\u003eg?5c/as!NCc[])5i5AfecS1FxC{+c=fNbAli4MgaCR?xmdiHb-wgfcRg=40uasyn{BY{dzatw3%ixeMjfNbAkgass@asw)2h8eO*ed9HxarR^HarR^HarUkzfNbAff!sB{f^x*/cOcw]CR?ciefDS\u003eg=c)nas!MZy*?i\u0026ePL/ue]SfXd\u003cevJfNbAhh.l70xL?%4cOcw]CR\u0026?!efDS\u003eg=NDzas!MZv@Diied9HxarR^HarR^HarUkzfNbx=h7P\u003c$l2QykcOcw]CR.u\u003eefDS\u003egI5J{as!NBc[])6g+*K7cUN0*AWJyXfNbDig+o+6CR\u003c1/diHb-cVgLYD3Rb+z!@\u0026fas!NCc[])5h8u^acS\u0026#QzZN7UfNbAkwH[@TCR?i/diHb-wgfcRg+@F\u003casy\u0026tCvq\u003cIatw3%ixm", "ln": 1507, "col": 94, "line": 31 }, { "b": "as!NBc[])6ggz^ScVh\u003c]vKAYHfNbA:wH[@TCR\u003c1?dj+/GarR^HarR^HarR^OxMOunB2\u003e%cB8JAGd\u003cevJfNbA:g+o:%q6P*jcOcw]CR}fnefDS\u003eg?wS}as!MZz!0M]Bs}DxBAY8Pd\u003cciTA+^rQ3lQDlarR^HaycJvBS-*\u0026zGP=ii%)8MarUoszEW^5z/cXec#HNUoE}qSefEOmaBsCrarR^HarR!EwPS6nzxJBqzxHINfNbDigB%UxefEFaeG=-(iC6/+oct/efNbrfwHPXFarR^HEf}8tarUomAV==DwPP4[aA7\u003cmx^\u003cxiarR^HarR!GA^n^O3lQDlarR^HarR^Hay/tcB95K0auZ\u0026]Eld=UarR^HarR^HarR!3tvYcoCR?rkefDrgyedUOefDS\u003eg=moAatw3%vkPFRd\u003cciUwHy+ajS[q:fA", "ln": 2377, "col": 109, "line": 37 }, { "b": "fNbAkh7pP]arR^HarR^HarR^Hv@DmaBrCVFjS]91i%)8MarR^HarR^HarU=gwgfcRg=Noxasx/tr9pO1atw3%wItUTfNbA+v\u003c$XajS[Y93lQDlarR^HarR^Haz+RhaBb7)ayPF5x(\u003eFfwPRA}c@RVtDKp(rarR^HarR^HarR^HarS4GwPRQ7wg6zXwHGlSg=n.[asz59wNW2ratw3%ia:Y:fNbAfvKS\u0026narR^HarR^HarR^HarR^HcUN71wmY!5cPSwAed9HxarR^HarR^HarR^HarS4vz!abviV}3[pFLb8c[])5h-00ccU)EoB%!*-fNbAfwgO\u0026SCR?uldp1uG3lQDlarR^HarR^HarR^HarR^Hasy]Bz/fPmv\u003c:qWwHGlSg+@L(aswQTz^B!xatw3%h-AogfNbAfh7p6-arR^HarR^HarR^HarR^HarR^HcUW9siV{b3f!rUOarR^HarR^HarR^HarR^HarR^OzdN*5z!7jRasy/kBw()^zEETfcM\u003c]ZwHGlSg=c{rasy00l3T?eatw3%ggI\u003cTfNbAiwHO-Lay((OCR\u0026(sefDq#vNA:nefDS\u003eg?5l(atw3%whtU=3lQDlarR^HarR^HarR^HarR^HaszbpA:-*acPSwO3lQDlarR^HarR^HarR^HarR^HarR^Hav]ZEc[])6fK#ZScNzV0xEttNfNbDgh.l79CR\u003c1\u003edp1tJed9HxarR^HarR^HarR^HarR^HarR^HarU+karR^HarR^HarR^HarR^HarR^Ht).X%arR^HarR^HarR^HarV7Y3lQDlarR^HarR^HaBLX23lQDlarR^HarR^HazCBgc)r\u003eucVr=Ft}3a6arR^HarR^HarR^HarR!GxMw3naz$+mavQr\u003ez/NlNcN?a:arR^HarR^HarR^Hy?mYhs%b%JvrVc]BrC\u003ckwHGlSg=mlzasy2hybvp?atw3%fFLa3fNbAghZ@2Xdlv\u003eVarR^HarR^HarR!vw/@H9tv/ipCR?9=efDq-m@6O4efDS\u003eg=moAatw3%fFB{#d\u003cciTAWLcw3lQDlarR^HarR^HarR^HaARpqz*9swwP]m=A=M8sc){w\u003ei%)8MarR^HarR^HarUYoBAIRwax?#Wc[])5wI#7Z", "ln": 2776, "col": 113, "line": 46 }, { "b": "3lQDlarR^HaBLwxvru0)asIpWaBsCrarR^HarR^HarR!HauZ\u0026*efFwBvqf*azE[2mp\u0026ZF\u003ex(^\u0026lsrG:\u003caAIaorb3hXz/{dIss+NGCS4xcdlv\u003eVarR^HarR^HarR!pz/fVhzGPIL3lQDlarR^HaBKOtarR!GxMw3naz$+mavQr\u003ez/NlNcM\u003c]ZBW4G.wHGlSg+Z{vasx3Th-8)katw3%f\u003c#Q", "ln": 3703, "col": 54, "line": 67 }, { "b": "arR^HarR^HarR^HarR^Hv@DmaBrCJBjS]91i%)8MarR^HarR^HarR^HarUScl)%B5gGF3lefDI#CSdDgat2o(h8^6eeIIAcwgp!bjS(C6gI5Kc3lQDlarR^HarR^HarR^Haz+Rhazz@YayPF5x(\u003eE}c}2EhsxY\u0026JcOcw(fNbrfh.l76fNbrefA", "ln": 4234, "col": 1, "line": 86 }, { "b": "n[?iKas!NKc[])3h!sJ.cUN0*AWJyXfNbufiv(pbCRRc!dj=PXdlv\u003eVarR^HarR^HarR^HarR!vw/@GBl2}0OD0rV+cPbD]g::*%eIIA7i4Mg7fNbu+efDI#CS4l8t{%zoaBFLVl2}0OD0tblfNbuYh.l70B#1hccOcw]CRRlsefDS\u003egbZ{qt{%zoasnATx\u003ckB5fNbuZh.l70l2QykcOcw]CRRi!efDS\u003egbZ*nt{8o[atw3]diJ%AarR^HarR^HarR^HarR^HarR^HvrVc]BrCEjCox.5z/6ifwHIWzjW70fwPQ)=zdNTdBsqn.atw3}h.^0ndlv\u003eVarR^HarR^HarR^HarR^HarR!pz/fVhzGPIL3lQDlarR^HarR^HarR^HaBKOtarR^HarR^HarR^HarR^$auZ\u0026Ytso\u003e!ngDu8cOcw(fNbrdf!sC0fNbrbiv(p8fNbrai4nbYBS-?haAY[3tso\u003e!nm^3GcOcw(fNd4XefDI#CW+noat2o(wI\u003e]xdo!GJfKm[1c[])3gH?%UcS\u0026#QzZN7UfNbuhvK@SQCRRi\u0026dp1FEvrVc]BrCEjCox.5z/6ifwHIWzjW70fwPQ)=zdNTdBsqn.atw3}h.^0ndlv\u003eVarR^HarR^HarR!P3lQDlarR^HarR^Haz+Rhawi?uav]Z8c){rsvq42tat2o(hzD:9eIIAUv\u003en-OfNd4=dp1tPtW7Dzd{Mv+B1e*]aswJ=i%)8MarR^HarR^HarUYoBAIRwawsgQq+{d)l)%A:t5Og7efDI#CW-DWat2o(vpZ#jeIIAYwHQ[kodqqK3lQDlarR^HaBLwxvru0)asIvYaBsCrarR^HarR^HarR!EwPS6nzxIR3BZ5YhfNbuYw?k5Lvq[NUcOcw]CRS!=efDS\u003egb\u0026R\u003ct{}cJi%)8MarR^HarV7tarR^HEjmk+Ef@E)xdLfnc[Nb$f!\u003eNqasyk]z!*ZK", "ln": 4465, "col": 143, "line": 88 }, { "b": "3vJn0wP]m[A=k/eB7D+qau.[hB7GC)x(dB1B-Y3HefDS\u003eviv3xfNbx+i4lpXv\u003c\u0026].CRI3lefDrNd0Y$-efDI#CXe]^at2o(f/g\u003cst{%OkjW70n3lQDlazb+lv@#B6zxKlNzy=]7efEFmawjdaDKp(rarR^HarUYoBAIRway=/[at1Y\u0026CS4lfec", "ln": 10274, "col": 29, "line": 291 }, { "b": "arR!vw/@Huc[cOLarR^HarR^HA+funA=9@CarR^Hy?mYhoDVFvAb](bwPI]%DmgE(h8/a#atw3$h90igfNbDkvK@SHAcBrqcN\u0026t9DmgE(h8m6vatw3$h8u^afNbDev\u003en-IpF+XocN*e*asxP9t{aJxazs#5c[])5vk/.WfNbAih.l79CR?f^efDrirZpawdp1tJefEFajS)N9DmgE(g?5r[atw3%vMk[YfNbAlwH[@Kl2QykcN\u0026sHoE}qlx(mTbe]2DCzyl\u003e{3lQDlazb+l", "ln": 10453, "col": 2, "line": 297 }, { "b": "fF\u003es6fNbDei4MgaCR}l*efDr-giC@idp15Datw3}asXG/CRIf2dJ*A\u0026gH?KSatw3@v\u003c0lzfNbx+i3psal$7gGtpjrbCpcVAdjDXMarR^HarR^HarR^HarR^HA+funA=9@CarR^HarR^HarR^HoiVM/fNbAjhy]$8CR?x\u0026efDS\u003eg*%/zasyrhoirL\u003ct{8oMl$7gGtpjrbCpcVAdj=PAty4XKCR\u0026$\u003cefDS\u003eg?wG{atw3%iB%-:cPB*/wHw]Hd\u003cf0-", "ln": 10985, "col": 110, "line": 306 }, { "b": "atw3%ggI\u003cTcS\u003cL{s%\u003e+8c}=0ri%)8MarR^HarV7Pv{%E?xDRTearR^HarR^HEf}8tarV7tarR^HxJ]^hfNbDevK@SQCR\u0026(tefDS\u003eg?nA]aszd+r+9Nbt{}cAjV%{hc[])5wIU\u003eWfNbAmve", "ln": 11242, "col": 154, "line": 308 }, { "b": "aswxSh-r3jdj=POc[ewDc[])5v(2UUfNbA=wH[@TCR}fnefDrqbwG4.dp1uvau.[hDKp(rarR^HarTc4vruA%c#-xry?W^5cTweLayPtpzET!qx!gxN3lQDlarR^HarR^Hazbn2y\u003cf$ZaAYjxarR^HarR^HarR^HzHb/fA:@Vwax6/#arR^HarR^HarR^HB7F\u003c4wPQNRC@^6?wN/:(Bw3g\u003c3lQDlarR^HaBLWYjW70n3lQDlarR^HarR^HazCBgc)rZZaBsCrarR^HarR^HarR^HarR!pz/fSmy?l*{c[])7iB\u003cV-fNbGoi4Mg1sxY\u0026JcOcw]CS4D?dp1t]c[])5vl2\u003eYcVqu#gBBZ@fNbA-iv(pbCR\u0026$^diHb-cV\u0026Qrgb9uLBsZWwgb77bayPwgvKMh1cV0HmyBrypdlv\u003eVarR^HarR^HarR^HarR!EwPS6nzAwgFarR^H", "ln": 11532, "col": 235, "line": 312 }, { "b": "wP8Zkc}#lnfNbx+i4lpcazi8Ki%)8MarR^HarR^HarUliB7DFv3lQDlarR^HarR^HarR^HazCBgd0m:bts{p$CR\u0026]sefDrNd0Y$-efDS\u003eg*%]Catw3%iBKvxau.\u003egfNbrediJ%AarR^HarR^HarR^HarR^HarR^HwP?G#c$djovKMvFdlv\u003eVarR^HarR^HarR^HarR^HarR!EwPS6nzAwgFarR^HarR^HarR^HarR!P3lQDlarR^HarR^HarR^HazCBgc$(?ec[])7v(M1ZfNbG=i4Mg1AcBrqcOcw]CS4Gvdp1tJau.\u003egn*(xrg?el\u003easyk]z!*ZKatw3%w\u0026Is:fNbDigBT:}DKp(rarR^HarR^HarR^HarR^HarUGiBrB}8B%5{\u003cluM)LwPz0Ec[])5vR48kcUN0*AWJyXfNbA-i4MgaCR\u003c1)dp1u2efDrHvrl0rg::.l3lQDlarR^HarR^HarR^HarR^Haz2.8y:-.lz^\u003ebqdjEs=arR^HarR^HarR^HarR^HEir9qB7DFv3lQDlarR^HarR^HarR^HarR^Haz+RhawA$waAz4kB.L(cc)%gPcN*O?BrAZ?DKp(rarR^HarR^HarR^HarR^HarR^HarR^HarS4LwPq\u003cbA+cQVaAz4kB.L(ced9HxarR^HarR^HarR^HarR^HarR^HarR^HarS3#B.kk%AWJ)\u003cA+flkx(W=kCpkd\u0026hE[S}atw3#vkGITcUK]NB%!*-fNbGng:%\u003eTCpkd\u0026hEOo\u003catw3#gbpy6cT*ZPCk", "ln": 12151, "col": 46, "line": 329 }, { "b": "h8E3sasws5yBQX.atw3%w[0qlfNbDfi4nbYC}p7gc[])5wIL!VcR587bpt2+fNbA=wH[@TCR?A\u003edjFEGBz\u003e91A+PA7cTwb)c[])5hF1AZcS1FxC{+c=fNbA.i4MgaCR?r/djD!\u003cn*(xrg?5x{asy2hybvp?atw3%iwJcdfNbA:w*]eW3lQDlarR^HarR^HarR^HarR^HarR^HarR^HaszbGz!0v1B0\u003c0\u003eAb](bwPI]z3lQDlarR^HarR^H", "ln": 13053, "col": 55, "line": 343 }, { "b": "arR^HarS4wy?m3}nP5SYA=$(ccPSwWy?m3}nP5SYA=$(c3lQDlarR^HarR^HarR^HarR^HarR^HaBMrUarR^HarR^HarR^HarR^HarR^Ho\u003cpjrfNbA:w?k5Lsw0sDcOcw]CR\u0026[\u003cefDS\u003eg=Wuvas!NUc[])7i5@JjfNbGggaTK}i88+KcOcw]CS4xpdp1uzdj=PVwP]m\u003etpsXzfNbGih7P\u003e7CS4A\u0026efDr2g!qHiefDS\u003ehz)irdp1t]c[])5vL]XVcS1FxC{+c=fNbDev\u003en-RCR\u0026$(diHb-Cpkd\u0026hA0xyatw3$whC?WcTe[^sskTxfNbGghyP+0asyAsgbrJ+Bz#qaCRR36j6W1:vj9fFaA]j/CR%7)efDS\u003ehzWcuasxfannY!aatw3$wO0qkd\u003cf3:fNbGfwH[@TCS4GoefDrhdLUDYefDS\u003ehzOX\u0026as!NQwN/:(Bw3g\u003cas!M.cTp)Kh-\u003en?fKXEfzGx]8CRQ%WcM\u003c]Zn*(xrg=e!}asxJTm\u003c]-oatw3%i5SrgfNbA:vjrrHaA]j/CS4olefDS\u003ehz^oxaswxSh-r3matw3$w\u0026zd/as!Nkas!M.Cpkd\u0026hzW3ratw3#hA09ecQzV-q70[qfNbGmh7oT#aA]j/CR%4*efDS\u003ehdwG}asx6RlRnZSatw3$wmWhjd\u003cdCjfNbA-gB%T@B#1hccOcw]CR}fnefDS\u003eh840sdiHb-BS-gSn*(xrg?5r[aszs/BWEJcatw3%vLxtQfNbAkh7o$UcVTuEnP3[lzGGCqas!MZCYUrsd0c[13lQDlarR^HarR^HarR^HaBKOtarR^HarR^HarR!P3lQDlarR^HaBLX23lQDlaBLX23vKu+3u/\u0026#avWFpav^?*B9RUkasIaUawsjbjW70n3lQDlazb+lv@#B6zxJWxzy=]7efEFmawjdaDKp(rarR^HarUX", "ln": 13538, "col": 23, "line": 350 }, { "b": "i%)8MarV7tarR^HBAhTHDKp(rarR^HarUGiBrB9%jS[fSvqf*aw[u6]xEE:HaBtjUxK$Q.wPz\u0026tiV@+(cVs5NiV@9uCQLm\u003cggT]Daszs/BWEJcatw3}vkPOUfNbu.g:#YUdiK3YEjmk+arR^HarR^Hx\u003ewFonlWDWyBrypaBsCrarR^HarR^HarR!ywPP4/auZ\u0026QCvticav]ZKc)@$TizH}Matw3$whC?WfNbD-h7P\u003e7CR%2ydp1tJec", "ln": 14411, "col": 52, "line": 363 }, { "b": "awsjbDKp(rarULAjS[R+eG=-(f\u003eJj63lQDlay/tcB95J[auZ\u0026Ec[dj+arR^Hy?mYhm\u003c6@qmo:Uni%)8MarUxgasH8\u003ecUWG^s4C!dt{8o[jS[(+wmYv!zE)ucaBsCrarR^HarR!Ivr9G7auZ\u0026VB-7Yhx(v(ic}kTdDKp(rarR^HarR^HarUfjzGx[xzY?g=cT*E]wmYv=xLzi%y\u0026a6dAb/]tBAI+JCZjQ3lpjdfmN{0vn\u003eR\u0026LpesX-qD3K{r--yas$?V^gC*%Eh-J/FffHWA3lQDlarR^HarR^Haz+Rhav)RraswJ/awi?uaswJ#3lQDlarR^HarR^HazbLjasI5qBrCJBjS(C6fF1tXefG6^ax6yCatw3]j0nU*jS)i#cU3*#AZs^{t{@S4d\u003e9L5ESV+WclKZJauZ\u0026^asec:CR*Kcazz@Fatw3%fD.\u003e*BS-Z/BU1UOd\u003eq.*atw3%diH?$nfxACax9x5x(mM/cUvyqz9}#BAZK+QwHy+ifNdhwasnjBau?$ic[Nb$g9w4?A3cFIfNbG8diHU]fNbo2aBsCrarR^HarR^HarR^HarR!HauZ\u0026=tpjc5wmZ0Yw*Z\u003ejBTYxVarR^HarR^HarR^HEf}8tarR^HarR^HarUomAV==DwPP4?auZ\u00263CRyV\u003eBrAZ?nlWDTwO#d5xEv7EawA$vaAPW/o!d.yaBsCrarR^HarR^HarR^HarR!1as/O$cNyb.d\u003cck/fFB\u003c%d\u003cdw!cU3*#AZK+QwKgz=t{@z@tpjJhq/)4]zF7t5c[])2fEXCPcV:9rv}v2[c[Nb$gato(arR^HarR^HarR^HEf}8tarR^HarR^HarUYoBAIRway]4[z!9AVqB%k]ze:AhwO#Prodq}farR^HarR^HEld=UarR^HarR!pz/fSrazh/Wazb+lv@#B6zxHt%efF\u003cWaBsCrarR^HarR^HarR!ywPP4=auZ\u0026Kt}v9\u003eauZ\u00263CRyV\u003eA4AbOauZ?{cP.U", "ln": 15115, "col": 14, "line": 383 }, { "b": "tt5lMav]Zft{8oMA4AbOas/O$q/)4]zF9f3w].*blUG[GlVlHDcTwb\u0026tpi]]vra.NwmX5GcTwb{diI}tnlWGktt[/Id\u003cdw!oi\u0026$?b{j)^f!+p!dlv\u003eVarR^HarR^HarR!P3lQDlarR^HarR^HaAz4nB-IvxBVP{MarR^HarR!Pi%)8MarR^HarTJ=cW5AUB.1@et{8oMxdLf5tph{!qa1=qcTv\u0026TaBwI/aw(t\u003cx(uvunjB$jauZ?\u003caZnkl3lQDlaBKOtarR!pz/fSraxY*IavPG*CRAzOaw:gzaz@qLaxZlrqxOaBqcLzrDqN4rC{=)4p*Dc\u0026arR^HA+funA=90yqxOgDc@Bg@q+{E\u003eCsT8!au.\u003eJaA.NjwObT]wN(]gclKZltpiuBs5s9icTv\u0026Tar.)", "ln": 16358, "col": 82, "line": 411 }, { "b": "ttOPFjS)lzauySnauZ\u0026BefECA3vJm[B-7Yhx(v(izZW4SDKp(rarUGiBrCDzjS)@oarR^HarR^HarR^HxJ(\u003cbB7Gw-zF0/mt{}dayBy+*CX5Y.asz5uAbE3Oat2o(f!+Qsat2o(whC-ved9HxarR^HarR^HarUSzz!0v1B6AAdeIIA7fLh\u003cUcQxC0pa4OneIIAYhy]$5fNbrff!3yjlmsiJxLQ)3efDS\u003ehE*hEatw3#gD3^bfNbGmh7q/Z3lQC", "ln": 16720, "col": 103, "line": 418 }, { "b": "yBy+*CXe(=asxcylUdR@at2o(vkGITeIIAVfEZoQBS-?haAX!NclK%ZBZF3DD#:uYqDn9xB-RRrvqZEkB-RRrvqW-jts6.=xK:$YcOcw]CS4DrefDS\u003ehEOD]atw3#h8D:/d0l%/efERejS)@oarR^HarR^HarR^HnP5S^ts6.=ngDu8cOcw]CS4onefDR", "ln": 17224, "col": 11, "line": 427 }, { "b": "yBy+*CRI6!efDrxt6j0@efDI#CRI9pefDI#CRH)gdp1FiarR^HarR^HarR^HzE[2ml$7gGc[ewoc[Nb$f/Rczasyn{BY{dzat2o(f/7:tat2o(f/R0st{}cearR^HarR^Ht}v9?auZ\u0026K3lQDlarR^HarR^HavmF7ts6=vcOcw]CR@[=efDS\u003ehzEfxatw3$", "ln": 17491, "col": 152, "line": 428 } ], "depth": 1, "facts": { "imp": [ [ "", "parseInt" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "parseInt" ], [ "", "H.push" ], [ "", "H.shift" ], [ "", "H.push" ], [ "", "H.shift" ], [ "", "require" ], [ "", "require" ], [ "", "require" ], [ "", "fetch" ], [ "", "Error" ], [ "", "Error" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "Error" ], [ "", "Promise" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "Date.now" ], [ "", "Date.now" ], [ "", "atob" ], [ "", "atob" ], [ "", "Promise" ], [ "", "setTimeout" ], [ "", "eval" ], [ "", "atob" ], [ "", "eval" ], [ "", "atob" ], [ "", "require" ], [ "", "require" ], [ "", "fetch" ], [ "", "atob" ], [ "", "atob" ], [ "", "Error" ], [ "", "F.charAt" ], [ "", "String.fromCharCode" ], [ "", "o.indexOf" ], [ "", "H.charCodeAt.toString" ], [ "", "H.charCodeAt" ], [ "", "decodeURIComponent" ], [ "", "o.charCodeAt" ], [ "", "String.fromCharCode" ], [ "", "F.charCodeAt" ], [ "", "Q.vSGudb" ], [ "", "h.userInfo" ], [ "", "Date" ], [ "", "Date" ], [ "", "fs" ], [ "", "os" ], [ "", "vm" ] ], "mbr": [ "Date.now", "F.charAt", "F.charCodeAt", "F.length", "H.charCodeAt", "H.charCodeAt.toString", "H.length", "H.ok", "H.push", "H.shift", "Q.GzQCay", "Q.SOWPwH", "Q.ioCWHF", "Q.vSGudb", "String.fromCharCode", "h.userInfo", "o.charCodeAt", "o.indexOf", "o.length", "p.link", "y.ok" ], "tgt": [ "B", "D", "Date", "Date.now", "E", "Error", "F", "F.charAt", "F.charCodeAt", "G", "H.charCodeAt", "H.charCodeAt.toString", "H.push", "H.shift", "I", "J", "L", "O", "Promise", "Q", "Q.vSGudb", "R", "String.fromCharCode", "U", "V", "atob", "c", "d", "decodeURIComponent", "e", "eval", "fetch", "g", "h", "h.userInfo", "j", "k", "m", "n", "o", "o.charCodeAt", "o.indexOf", "parseInt", "require", "setTimeout", "v", "w", "x", "z" ], "funcs": [ [ "anonymous", 1 ], [ "I", 23 ], [ "V", 91 ], [ "anonymous", 903 ], [ "R", 1090 ], [ "d", 1124 ], [ "e", 2519 ], [ "X", 3763 ], [ "g", 3958 ], [ "L", 3996 ], [ "m", 4017 ], [ "D", 4096 ], [ "u", 4699 ], [ "u", 4833 ], [ "u", 4931 ], [ "U", 5250 ], [ "anonymous", 10164 ], [ "O", 10221 ], [ "n", 10289 ], [ "n", 10356 ], [ "z", 10367 ], [ "v", 10670 ], [ "p", 11579 ], [ "anonymous", 11613 ], [ "w", 11917 ], [ "J", 12008 ], [ "M", 12140 ], [ "y", 12822 ], [ "y", 13037 ], [ "anonymous", 14225 ], [ "j", 14247 ], [ "x", 14335 ], [ "c", 15046 ], [ "Q", 15102 ], [ "anonymous", 15230 ], [ "anonymous", 15840 ], [ "o", 16743 ], [ "u", 17256 ], [ "u", 18366 ], [ "S", 18410 ], [ "B", 18641 ], [ "k", 18730 ] ], "metrics": { "ast": { "op.eq": 7, "op.ge": 1, "op.le": 1, "op.lt": 5, "op.add": 103, "op.div": 9, "op.lor": 4, "op.mod": 7, "op.mul": 8, "op.shr": 1, "op.sub": 159, "op.xor": 1, "op.band": 2, "op.bnot": 1, "op.land": 9, "op.lnot": 13, "max_depth": 42, "call_count": 317, "node_count": 7613, "member_count": 21, "max_array_len": 179, "op_density.eq": 0, "op_density.ge": 0, "op_density.le": 0, "op_density.lt": 0, "op_density.add": 0.01, "op_density.div": 0, "op_density.lor": 0, "op_density.mod": 0, "op_density.mul": 0, "op_density.shr": 0, "op_density.sub": 0.02, "op_density.xor": 0, "sequence_count": 14, "op_density.band": 0, "op_density.bnot": 0, "op_density.land": 0, "op_density.lnot": 0, "max_concat_chain": 15, "member_depth_max": 3, "xor_mod_loop_count": 1, "infinite_loop_count": 1, "const_return_function_count": 1, "const_return_function_ratio": 0.02 }, "file": { "size": 18886, "entropy": 4.89 }, "text": { "lines": 453, "top_char": 39, "max_ws_run": 1, "digit_ratio": 0.26, "space_count": 5787, "char_entropy": 4.89, "unique_chars": 93, "top_char_null": 0, "escape_density": 0.04, "lines_over_200": 5, "lines_over_500": 1, "string_density": 1.03, "top_char_ratio": 0.05, "avg_line_length": 40.69, "max_line_length": 556, "hex_escape_count": 8, "last_line_length": 45, "whitespace_ratio": 0.33, "identifier_density": 1.6, "line_length_stddev": 49.46, "encoded_string_ratio": 0.07, "normalized_string_count": 21.85, "repeated_char_sequences": 149, "suspicious_identifier_ratio": 0.62, "normalized_unique_identifiers": 7.71 }, "binds": { "count": 77 }, "binary": { "peak_region_bytes": 11718, "peak_region_entropy": 5.08 }, "source": { "function_count": 21 }, "imports": { "count": 3, "stdlib_count": 3, "stdlib_ratio": 1 }, "strings": { "bytes": 4100, "count": 465, "url_count": 2, "avg_length": 8.82, "max_length": 65, "avg_entropy": 2.61, "empty_count": 8, "entropy_stddev": 0.91, "base64_candidates": 32, "high_entropy_count": 1 }, "functions": { "count": 21, "nested": 12, "density": 9.27, "anonymous": 21, "avg_params": 1.88, "code_ratio": 1.43, "max_params": 4, "one_liners": 11, "length_stddev": 31.16, "over_100_lines": 1, "avg_name_length": 1, "no_params_count": 18, "avg_length_lines": 15.38, "max_length_lines": 187, "min_length_lines": 1, "avg_nesting_depth": 1.12, "max_nesting_depth": 3, "single_char_names": 21, "single_char_params": 78, "avg_param_name_length": 2.14 }, "identifiers": { "count": 724, "unique": 68, "avg_length": 3.41, "max_length": 18, "min_length": 1, "avg_entropy": 0.94, "reuse_ratio": 0.09, "length_stddev": 3.74, "sequential_names": 42, "single_char_count": 42, "single_char_ratio": 0.62, "all_lowercase_ratio": 0.44, "all_uppercase_ratio": 0.32, "underscore_prefix_count": 1 } } }, "id": 1, "mol": "O₄(C₂S₂As₄P)H₅(CmCr₂Db₉OsPo₃)Md₂(Pa)", "path": "react-native-country-select-0.3.91.tgz!!package/install.js", "pid": 0, "risk": 209, "sha": "59221aa9623d86c930357dba7e3f54138c7ccbd0daa9c483d766cd8ce1b6ad26", "size": 18886, "traits": [ { "id": "metadata/file/extension/identity::javascript-source-extension", "conf": 1.0, "crit": 2, "desc": "JavaScript source filename extension" }, { "id": "metadata/file/size::common-node-lifecycle-script-basename", "conf": 0.8, "crit": 3, "desc": "Common Node.js lifecycle-script filename" }, { "id": "metadata/file/string/identity::userinfo-token", "conf": 0.95, "crit": 3, "desc": "userInfo string literal token", "spans": [ [ 16787, 8 ] ] }, { "id": "metadata/import/builtin::require-fs", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js fs module", "spans": [ [ 1030, 0 ] ] }, { "id": "metadata/import/builtin::require-os", "conf": 0.7, "crit": 2, "desc": "Imports the Node.js os module", "spans": [ [ 1011, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 2607, 0 ] ] }, { "id": "metadata/lang/source::js-ts-source-basename", "conf": 0.95, "crit": 2, "desc": "JavaScript or TypeScript source filename" }, { "id": "metadata/package/files/included::install-js-basename", "conf": 0.85, "crit": 3, "desc": "Filename is install.js/cjs/mjs" }, { "id": "micro-behaviors/communications/http/url/rpc::solana-rpc-host-fragment", "conf": 0.86, "crit": 3, "desc": "Obfuscated Solana RPC host fragment", "spans": [ [ 1771, 10 ] ] }, { "id": "micro-behaviors/communications/http/url/rpc::solana-signature-method-fragment", "conf": 0.88, "crit": 1, "desc": "Obfuscated Solana signature method fragment", "spans": [ [ 3174, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/rpc::solana-transaction-method-fragment", "conf": 0.86, "crit": 1, "desc": "Obfuscated Solana transaction method fragment", "spans": [ [ 1603, 0 ] ] }, { "id": "micro-behaviors/crypto/symmetric/stream/rc4::js-rc4-prga-output", "mbc": "C0027", "conf": 0.92, "crit": 3, "desc": "RC4 PRGA keystream output index", "spans": [ [ 16422, 24 ] ] }, { "id": "micro-behaviors/data/control-flow/dispatch::js-function-derived-computed-call", "conf": 0.9, "crit": 3, "desc": "Calls computed member from function result", "spans": [ [ 3014, 33 ], [ 3310, 33 ], [ 3519, 33 ], [ 4534, 33 ], [ 4578, 33 ], [ 4797, 36 ], [ 4995, 33 ], [ 5072, 33 ] ] }, { "id": "micro-behaviors/data/control-flow/module-exec::js-synchronous-iife-start", "conf": 0.86, "crit": 3, "desc": "Starts a synchronous function expression", "spans": [ [ 0, 18 ] ] }, { "id": "micro-behaviors/data/decode/base64::lower-first-base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a lower-first Base64 alphabet", "spans": [ [ 15268, 65 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::platform-field-key", "conf": 0.86, "crit": 3, "desc": "JSON-like platform or OS field", "spans": [ [ 14475, 5 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-decoder-call-prefix", "conf": 0.9, "crit": 3, "desc": "Computed call uses a decoder function", "spans": [ [ 3010, 37 ], [ 3309, 34 ], [ 3518, 34 ], [ 4529, 38 ], [ 4573, 38 ], [ 4796, 37 ], [ 4994, 34 ], [ 5068, 37 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-obfuscated-computed-call-cluster", "conf": 0.86, "crit": 3, "desc": "Obfuscated computed call cluster", "spans": [ [ 704, 10 ], [ 714, 11 ], [ 3010, 37 ], [ 3309, 34 ], [ 3518, 34 ], [ 4529, 38 ], [ 4573, 38 ], [ 4796, 37 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::shift-string-literal", "conf": 0.6, "crit": 3, "desc": "String literal names the shift method", "spans": [ [ 717, 5 ] ] }, { "id": "micro-behaviors/data/source/syntax/credential::secret-key-identifier", "conf": 0.85, "crit": 3, "desc": "References a secretKey identifier", "spans": [ [ 11684, 9 ], [ 13602, 9 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-call", "conf": 0.94, "crit": 3, "desc": "Calls JavaScript toString conversion method", "spans": [ [ 15701, 21 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 13117, 8 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-eval-call-expression-arg", "conf": 0.9, "crit": 3, "desc": "JavaScript eval executes a call result", "spans": [ [ 12279, 4 ] ] }, { "id": "micro-behaviors/process/user/query::node-os-alias-userinfo-call", "atk": "T1033", "conf": 0.8, "crit": 3, "desc": "Node os-alias user identity query", "spans": [ [ 16784, 10 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/hex::hex-byte-token-ff", "mbc": "B0032", "conf": 0.5, "crit": 3, "desc": "0xff hex byte token", "spans": [ [ 15515, 4 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/xor::atob-call-site", "atk": "T1027,T1059.007", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Calls atob to decode a Base64 blob", "spans": [ [ 11596, 5 ], [ 11743, 5 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/xor::eval-call-site", "atk": "T1027,T1059.007", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Calls eval on recovered source", "spans": [ [ 12279, 5 ] ] }, { "id": "objectives/command-and-control/dropper/staged-loader::remote-module-method-field", "atk": "T1105,T1627.001", "mbc": "B0042", "conf": 0.94, "crit": 3, "desc": "Remote module method field", "spans": [ [ 3163, 11 ] ] }, { "id": "objectives/persistence/login/ssh/backdoor::js-windows-drive-enumeration", "atk": "T1098.004", "conf": 0.9, "crit": 3, "desc": "Contains Windows drive-letter enumeration string", "spans": [ [ 15296, 24 ] ] }, { "id": "metadata/file/arithmetic::js-many-minus-operator-nodes", "conf": 0.95, "crit": 2, "desc": "JavaScript AST has 30+ subtraction nodes" }, { "id": "metadata/file/arithmetic::js-minus-operator-node-density", "conf": 0.95, "crit": 2, "desc": "Subtraction nodes exceed 2% AST density" }, { "id": "metadata/lang/locale::locale-ru-ru-dash", "conf": 0.7, "crit": 2, "desc": "Russian locale identifier (ru-RU)", "spans": [ [ 17272, 0 ] ] }, { "id": "micro-behaviors/crypto/symmetric/xor/loop::xor-modulo-key-loop", "conf": 0.8, "crit": 3, "desc": "Loop XORs through modulo-indexed accumulator" }, { "id": "micro-behaviors/data/decode/base64::base64-decode-call-text", "conf": 0.86, "crit": 3, "desc": "JavaScript invokes a Base64 decoder", "spans": [ [ 11596, 5 ], [ 11743, 5 ] ] }, { "id": "micro-behaviors/data/decode/symbol-base64::atob-decode", "conf": 0.9, "crit": 3, "desc": "Decodes Base64 data with JavaScript atob()", "spans": [ [ 11596, 4 ] ] }, { "id": "micro-behaviors/data/encode/char-code::fromcharcode-call", "conf": 0.9, "crit": 3, "desc": "Builds characters with String.fromCharCode", "spans": [ [ 15492, 19 ] ] }, { "id": "micro-behaviors/data/encoded::base64-token", "conf": 0.7, "crit": 2, "desc": "Calls a Base64 conversion helper", "spans": [ [ 11596, 0 ], [ 11743, 0 ] ] }, { "id": "micro-behaviors/data/source/arithmetic::js-binary-subtraction-cluster", "conf": 0.95, "crit": 2, "desc": "Many JavaScript infix subtraction expressions", "spans": [ [ 2575, 0 ] ] }, { "id": "micro-behaviors/data/source/property/computed::js-computed-date-method-call", "conf": 0.82, "crit": 3, "desc": "Calls a Date method through bracket notation", "spans": [ [ 11049, 12 ] ] }, { "id": "micro-behaviors/process/interpreter/eval/direct::js-eval-raw", "conf": 0.7, "crit": 3, "desc": "Executes JavaScript dynamically with eval()", "spans": [ [ 12279, 4 ] ] }, { "id": "micro-behaviors/process/interpreter/vm::vm-require", "conf": 0.85, "crit": 3, "desc": "Node.js vm module import", "spans": [ [ 12604, 13 ] ] }, { "id": "objectives/anti-static/obfuscation/obfuscator/js-obfuscator::push-shift-bracket-pattern", "atk": "T1027", "conf": 0.9, "crit": 3, "desc": "Bracket-notation push/shift self-rotation", "spans": [ [ 704, 23 ] ] }, { "id": "objectives/anti-static/obfuscation/string/fragmentation::js-split-literal-member-name", "atk": "T1027", "mbc": "B0032", "conf": 0.94, "crit": 3, "desc": "Member name assembled inside bracket access", "spans": [ [ 13602, 27 ], [ 14126, 27 ] ] }, { "id": "objectives/supply-chain/hidden-payload/encoding::eval-atob", "atk": "T1195.002", "conf": 0.95, "crit": 4, "desc": "eval() of atob() decoded data", "spans": [ [ 12279, 10 ] ] }, { "id": "objectives/supply-chain/hidden-payload/encoding::eval-call-expr-arg", "atk": "T1195.002", "conf": 0.8, "crit": 3, "desc": "eval() decoder-like call argument", "spans": [ [ 12279, 4 ], [ 12284, 4 ] ] }, { "id": "objectives/supply-chain/hidden-payload/eval::eval-transform-ast", "atk": "T1195.002", "conf": 0.88, "crit": 3, "desc": "eval of transformed local data", "spans": [ [ 12279, 12 ] ] }, { "id": "micro-behaviors/data/encode/char-code::multiple-fromcharcode-calls", "conf": 0.92, "crit": 3, "desc": "Calls String.fromCharCode multiple times", "spans": [ [ 15492, 19 ] ] }, { "id": "metadata/build/bundler/javascript-bundle-markers::js-multi-line-blob-recognized-text", "conf": 0.95, "crit": 1, "desc": "Text tokens identify a normal JavaScript bundle blob", "uses": [ 36 ], "spans": [ [ 11596, 0 ], [ 11743, 0 ] ] }, { "id": "metadata/lang/locale::russian-locale", "conf": 0.75, "crit": 1, "desc": "Russian locale identifier", "uses": [ 31 ], "spans": [ [ 17272, 0 ] ] }, { "id": "micro-behaviors/communications/http/url/rpc::solana-obfuscated-signature-dead-drop", "atk": "T1102", "conf": 0.96, "crit": 4, "desc": "Obfuscated Solana signature and transaction dead drop", "uses": [ 8, 9, 10 ], "spans": [ [ 1603, 10 ], [ 1771, 10 ], [ 3174, 10 ] ] }, { "id": "micro-behaviors/data/decode/base64::base64-alphabet", "conf": 0.9, "crit": 3, "desc": "JavaScript embeds a Base64 alphabet", "uses": [ 14 ], "spans": [ [ 15268, 65 ] ] }, { "id": "micro-behaviors/os/module/require::node-system-module-import-set", "conf": 0.88, "crit": 3, "desc": "Imports at least two Node system modules", "uses": [ 3, 4 ], "spans": [ [ 1011, 7 ] ] }, { "id": "objectives/command-and-control/dropper/delivery/blockchain::solana-obfuscated-dead-drop-loader", "atk": "T1102,T1105,T1027,T1059.007", "mbc": "B0024,B0032", "conf": 0.98, "crit": 5, "desc": "Obfuscated Solana dead-drop loader", "uses": [ 32, 43, 49, 51 ], "spans": [ [ 1011, 7 ], [ 1603, 10 ], [ 1771, 10 ], [ 3174, 10 ], [ 12279, 10 ] ] }, { "id": "objectives/anti-static/obfuscation/encoding/arithmetic::js-arithmetic-array-init", "conf": 0.95, "crit": 3, "desc": "Array initialization with repetitive arithmetic expressions (obfuscation)", "uses": [ 0, 29, 30, 37 ], "spans": [ [ 65, 10 ], [ 133, 10 ], [ 1166, 9 ], [ 1177, 9 ], [ 1191, 9 ], [ 2561, 9 ], [ 2575, 8 ], [ 2585, 9 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "zGGr3zE)\u0026HaBsCrarR^HazbC3CSD%4ed9HxarR^HCwgPfxGvm-f!+pccObPEarR^Haztt2xj#xFasw($fEn7$3lQDlarR!ovpK7=A=l8rwj7oKz/N(YcV\u003cxqzGx=9A+fcgcObPEarR^HayP82xkQp.wO(GH", "ln": 146, "col": 7, "line": 5 }, { "b": "BzkujlVl\u003c:wO#PJ3lQDlarR^Haz(4cvqF[*AaHdPjV%]nAbPYrA3(=QD)0cAmS\u0026J-q!6\u0026VwO@RPasyVgzGGDgcM\u003eC)cUvgaCR9GAwg5]narR^HEjLZFarR!ovpK7-A=k[TaBs", "ln": 290, "col": 10, "line": 11 }, { "b": "arR^HarR^HvQS+Zxl4{kzE=aMy\u0026stPaARpdzdK?MjV%]nwmoH]cM\u003eR@cNgx2gb7EqcM\u003eC)cNh8ImN/\u003cpcObPEarR^HarR^HarR!oz/Px1A-csRx)1FTatLS43lQDlarR^Hao", "ln": 733, "col": 5, "line": 29 }, { "b": "z/fU^vqPZ{C@=oParR^HarR!6y*?A$z/PXEpG5x0jV%]nCv+kh3lQDlarR^HarR^\u003eaAR)FwP8f6zEEZ5xjk[2AV=I*jS(a{zE^r\u003cx(mG)cM\u003c-.3lQDlarR^HarR^Haz$Rhx\u003eH\u003c@z/O5{B-Rbml1:+DBu.x(zEWH9wmY*gcS+21cN/xBarR^HarR^HarR^\u003easycjwO(v2x?-I(x(4P]cKH$sarR^HarR^HarSY/cStqiBy/qp3lQDlarR^HarR^/asy9kB97#gcObPEarR!Ped9HxarUfjB-8qwC$z)=z-P1/3lQDlarR!s", "ln": 2474, "col": 8, "line": 94 } ], "depth": 1, "facts": { "imp": [ [ "", "StyleSheet.create" ], [ "", "navigator.userAgent.includes" ], [ "", "react-native" ] ], "mbr": [ "Platform.OS", "StyleSheet.create", "navigator.userAgent", "navigator.userAgent.includes" ], "tgt": [ "StyleSheet.create", "navigator.userAgent.includes" ], "funcs": [ [ "anonymous", 82 ] ], "metrics": { "ast": { "op.eq": 22, "op.ne": 1, "op.lor": 2, "op.land": 1, "max_depth": 17, "call_count": 2, "node_count": 1315, "member_count": 4, "op_density.eq": 0.02, "op_density.ne": 0, "op_density.lor": 0, "op_density.land": 0, "member_depth_max": 3 }, "file": { "size": 4756, "entropy": 4.58 }, "text": { "lines": 183, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.12, "space_count": 1357, "char_entropy": 4.58, "unique_chars": 72, "top_char_null": 0, "string_density": 0.56, "top_char_ratio": 0.05, "avg_line_length": 24.99, "max_line_length": 70, "empty_line_ratio": 0.01, "last_line_length": 5, "whitespace_ratio": 0.32, "identifier_density": 0.96, "line_length_stddev": 15.91, "normalized_string_count": 7.61, "repeated_char_sequences": 17, "normalized_unique_identifiers": 9.31 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 4756, "peak_region_entropy": 4.61 }, "imports": { "count": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 658, "count": 103, "avg_length": 6.39, "max_length": 24, "avg_entropy": 1.7, "entropy_stddev": 0.72 }, "functions": { "density": 0.55, "anonymous": 1, "avg_params": 3, "code_ratio": 0.99, "max_params": 3, "over_100_lines": 1, "avg_length_lines": 181, "max_length_lines": 181, "min_length_lines": 181, "avg_param_name_length": 8.67 }, "identifiers": { "count": 176, "unique": 70, "avg_length": 11.89, "max_length": 26, "min_length": 2, "avg_entropy": 3, "reuse_ratio": 0.4, "length_stddev": 5.49, "high_entropy_count": 9, "high_entropy_ratio": 0.13, "all_lowercase_ratio": 0.26, "all_uppercase_ratio": 0.01 } } }, "id": 2, "mol": "H₂(CmOs)Md(Pa)", "path": "react-native-country-select-0.3.91.tgz!!package/lib/components/styles.js", "pid": 0, "risk": 3, "sha": "f4ed62a3e3881c6e5a43c5197868caab1965735025b7ccad02230ac47e7fca7c", "size": 4756, "traits": [ { "id": "metadata/package/files/runtime::javascript-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript file under lib" }, { "id": "micro-behaviors/communications/http/user-agent::navigator-useragent-read", "atk": "T1082", "conf": 0.75, "crit": 3, "desc": "Reads browser User-Agent string", "spans": [ [ 2575, 19 ] ] }, { "id": "micro-behaviors/os/sysinfo/platform/browser::browser-identity-input", "atk": "T1082", "conf": 0.9, "crit": 3, "desc": "Reads browser identity or display input", "uses": [ 1 ], "spans": [ [ 2575, 19 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "DKp(rb5Q?awG\u003ceTb64m6v@%quvrujbwI4zgB-8qwC}B8Gy?m9#a$K6zar\u003e#uA=U@kzx.a:a$$S9e\u0026+Tged9Hxb4Lnav@=p5BzkVhb03?\u003c[sLV0aw#=Vv@@?*vrujbwGUG3B-8qwC{46uv@2T@aA}KwxDQ]6vp%TjaAIa5A:@=laxiS9wM98Vx(FeBazAL\u0026zy=]szE:(dw[C\u003c[zE\u003c@iB-qqrA=-]RoLFcMBA.qgxj#xray/LnBz(2gDspo0wH[%jzE:(2wPIM#zE)u3CwhejayMyfz!9B1zxI}Je*q?NarR\u003eBvqfQ6iV]R.x\u003c@-fzE^s6e{8eVa$K6zar\u003e]MAaK8miV]R.x\u003c@-fzE^s6e[uORB0rdxarR\u003ezwQeGrA+6kniV}SlarR^Hb64m6v@%quvrujbwI4zgB-8qwC}A#Hv@2T@a$K6zarR^JA+eV?Bs?xsBzk]feN@ZwzGG]AePUGtwN/*aed9HxarR\u003eGwNP7\u003cePb0sx)a5tv@DHcBAhTUv@C)?B0rdxarR^Hb4CLlzGG]AePtAlyH}Jged9HxarR\u003erz/]@tA^olTwO+{/BrSmyarR^Hb4CLlzGG]AePUGtwN/?2AW04warR^Hb4CLlzGG]AeO]cxBrSmyarR^Hb5?jlzE\u003ezfz!9B2a$K6zarR^Jx(n37A=brcx(v($y?Xi7BzkVha$K6zarR^Jx!.O+a$K6zarR^Jw]7)*B0rdxarR^Hb6n9HwPIv4x(Fered9HxarR\u003eDw[C\u003c[zE\u003ezvB-qqrA=-GR3lQDlar\u003errB98tqx)Kh%y?j!w3lQDlar\u003eVvwmY!0eP\u003e+Ked9HxarR\u003epzE^^ax\u003eezs3lQDlar\u003eJrB0rdxarR^Hb4CUiB8@{Ly*?A$z/PXsed9HxarR\u003eGwNP7\u003caz$Rfx)a5gv@DHcBAhTHAa@/$wPw$C3lQDlar\u003e\u0026qvpKy4zEET3C4z!az/]@tA^n^GwO+{/BrR5maycJ9arR^Hb6dmmx(Ffnb03\u0026[3lQDlar\u003e]sB95P!ar\u003exbxM21#b1lJ)z/N(YzF{UtwPI@oB8UY2x\u003ez6\u003cwlZr3cmf\u003cDCXImxf^ndQarR^Hb5?Nlx(n0lvqG:7iV]R:z!9A4x(n0lvqG:jyi7NaarV7-3lQDnA+fidB7]-mA^n\u0026\u0026aBsCrarR^JBA}?pb03?\u003cxk8Died9HxarR\u003eJA+({Xar\u003eDjBsR3DBz#pZfe3%LBzb/ae[n*pff%V3A./FGvrDW2flgSjv@%quvrujbwI4zgB-8qwC}B8Gy?m9#e[X)ua{]CnEjLZFar\u003elpBzbPkb03?\u003cl34c*pFU\u003epB-.4mc$)ZAAc15[fk20vxMW=pv@Diql34c*pFU\u003epB-.4va$K6zar\u003eSov}xL0wG\u003ceTb1UZ2a$K6zar\u003eoqxlbmTaBsCrarR^JB-IpxiV]RWBAzFyiXJd0x([3hvLheez7!g@BAgeMzEEWfvj#UjvpKyhzEET3C4Amnz/]@tA^olTwO+{/Bt4uHB9h5na{]CnEjLZFar\u003eGqzdNV{xjSnFar\u003eGvBz#pZfe3%LBzb/ae[n*pff%V3A./FGvrDW2flgSjv@%quvrujbwI4zgB-8qwC}B8Gy?m9#bxvv7wnL)4ed9Hxb5?Wly?W%7lVl\u003cOx\u003eFRJaBsCrarR^JA+e($B98CFb03?\u003cxMOunB2\u003e%cA+e($B98CFe]CSByi81CA+v3H3lQEted9Hxb5?a8AZP", "ln": 0, "col": 1, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "\u003e=4.0.0", "react-native-safe-area-context" ], [ "*", "react" ], [ "*", "react-native" ] ], "metrics": { "file": { "size": 1463, "entropy": 4.73 }, "binary": { "peak_region_bytes": 1463, "peak_region_entropy": 4.79 }, "consistency": { "name_repo_mismatch": 0 } } }, "id": 4, "mol": "O(S)H(Po)Md(Pa₄)", "path": "react-native-country-select-0.3.91.tgz!!package/package.json", "pid": 0, "refs": [ { "to": "pkg:github/astroonauta/react-native-country-select", "off": 938, "kind": "repository" }, { "to": "lib/index.tsx", "off": 247, "file": 39, "kind": "local" } ], "risk": 6, "sha": "bfa5ba28572dfececda39ab5f6329769b2a85d724c1c3791f10cf106d06b3a47", "size": 1463, "traits": [ { "id": "supply-chain/install-hook/preinstall", "conf": 0.8, "crit": 3, "desc": "Package has 'preinstall' hook that runs during install", "spans": [ [ 852, 15 ] ] }, { "id": "metadata/package/files/included::npm-publish-root-manifest", "conf": 0.95, "crit": 2, "desc": "Manifest sits at npm publish root", "spans": [ [ 0, 0 ] ] }, { "id": "metadata/package/manifest/entrypoint::main-runtime-tree-entrypoint", "conf": 0.85, "crit": 2, "desc": "Package main targets runtime tree", "spans": [ [ 238, 0 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-field", "conf": 0.9, "crit": 2, "desc": "package.json declares repository metadata", "spans": [ [ 891, 0 ] ] }, { "id": "metadata/package/manifest/repository::has-repository-url", "conf": 0.85, "crit": 2, "desc": "package.json declares a repository URL", "spans": [ [ 930, 0 ] ] }, { "id": "metadata/package/manifest/repository::repo-url-git-host", "conf": 0.9, "crit": 3, "desc": "Repository identifies major Git host", "spans": [ [ 930, 66 ] ] }, { "id": "metadata/package/scripts/develop::has-test-script", "conf": 1.0, "crit": 1, "desc": "package.json declares a test script", "spans": [ [ 793, 0 ] ] }, { "id": "metadata/package/manifest/entrypoint::pkg-types-field", "conf": 0.9, "crit": 3, "desc": "Package declares TypeScript types entry", "spans": [ [ 265, 14 ] ] }, { "id": "metadata/package/quality/profile::has-typescript", "conf": 0.9, "crit": 3, "desc": "Package declares TypeScript tooling", "spans": [ [ 576, 12 ] ] }, { "id": "metadata/package/scripts/lifecycle::has-preinstall-script", "conf": 0.95, "crit": 3, "desc": "Manifest declares npm preinstall lifecycle hook", "spans": [ [ 852, 15 ] ] }, { "id": "micro-behaviors/process/interpreter/npm::npm-script-interpreter", "atk": "T1059", "mbc": "B0030", "conf": 0.85, "crit": 3, "desc": "Package script invokes a language interpreter", "spans": [ [ 776, 15 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::has-preinstall", "atk": "T1195.002", "conf": 0.85, "crit": 3, "desc": "Has preinstall script hook", "spans": [ [ 852, 15 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::has-preinstall-raw", "conf": 0.88, "crit": 3, "desc": "Raw content contains preinstall hook", "spans": [ [ 852, 13 ] ] }, { "id": "objectives/supply-chain/install-hook/scripts/lifecycle::preinstall-runs-node-local-script", "atk": "T1195.002", "conf": 0.97, "crit": 3, "desc": "preinstall hook runs a local Node.js script", "spans": [ [ 852, 15 ] ] } ], "type": "package.json" }, { "ctx": [ { "b": "Aa\u0026V?wPP4TasFW1aAITBx(mM/t{8o]aBsCraAz4nB-Ivxl2}0OC}JYHz/3[Hy?mG%Bz9YTgb:LiasHPuefFTQau.[hq/)4]zF7OlA=k!ZxKL{Gz!9Achz(QcazAnNi%{x$3i", "ln": 21, "col": 22, "line": 1 } ], "depth": 1, "facts": { "imp": [ [ "", "Array.from" ], [ "", "String.fromCharCode" ] ], "mbr": [ "Array.from", "String.fromCharCode" ], "tgt": [ "Array.from", "String.fromCharCode" ], "funcs": [ [ "anonymous", 30 ], [ "anonymous", 82 ] ], "metrics": { "ast": { "op.add": 1, "max_depth": 13, "call_count": 2, "node_count": 65, "member_count": 2, "op_density.add": 0.02, "max_concat_chain": 2, "member_depth_max": 2 }, "file": { "size": 126, "entropy": 4.93 }, "text": { "lines": 3, "top_char": 114, "max_ws_run": 1, "digit_ratio": 0.05, "space_count": 17, "char_entropy": 4.93, "unique_chars": 43, "top_char_null": 0, "string_density": 0.33, "top_char_ratio": 0.09, "avg_line_length": 41, "max_line_length": 74, "last_line_length": 2, "whitespace_ratio": 0.16, "identifier_density": 3, "line_length_stddev": 29.7, "normalized_string_count": 0.58, "suspicious_identifier_ratio": 0.13, "normalized_unique_identifiers": 5.05 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 126, "peak_region_entropy": 4.93 }, "strings": { "bytes": 6, "count": 1, "avg_length": 6, "max_length": 6, "avg_entropy": 2.58 }, "functions": { "nested": 1, "density": 66.67, "anonymous": 2, "avg_params": 1, "code_ratio": 1.33, "max_params": 2, "one_liners": 1, "length_stddev": 1, "no_params_count": 1, "avg_length_lines": 2, "max_length_lines": 3, "min_length_lines": 1, "avg_nesting_depth": 0.5, "max_nesting_depth": 1, "single_char_params": 1, "avg_param_name_length": 1.5 }, "identifiers": { "count": 9, "unique": 8, "avg_length": 6.25, "max_length": 14, "min_length": 1, "avg_entropy": 2.04, "reuse_ratio": 0.89, "length_stddev": 4.26, "sequential_names": 1, "single_char_count": 1, "single_char_ratio": 0.13, "all_lowercase_ratio": 0.5, "underscore_prefix_count": 1 } } }, "id": 17, "mol": "H(Db)Md(Pa)", "path": "react-native-country-select-0.3.91.tgz!!package/lib/utils/createAlphabet.ts", "pid": 0, "risk": 2, "sha": "10fbafef50cca0c98b7cf58bb424c04ee198815d9cf4fc1e8d225d9124209b45", "size": 126, "traits": [ { "id": "metadata/package/files/runtime::javascript-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript file under lib" }, { "id": "micro-behaviors/data/encode/char-code::fromcharcode-call", "conf": 0.9, "crit": 3, "desc": "Builds characters with String.fromCharCode", "spans": [ [ 93, 19 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "cP.VHze:AlBrC7iB-8qwx\u003equdw].*basw=]fjO{rB97\u0026dBAo9Bz/]@tA+P9ae]2DCzymHMx(d*cA=-BJzF%MjvqGU7wKyxUzGG]Apgn0JEircxz/3QAe?.9XA=2l3x)KtTz/]@tA^pz*zdL7R3tBu@z/P}xDR3OyB-8qwC}p7flVm9+BAhU9wO+{/Bn", "ln": 44, "col": 45, "line": 1 }, { "b": "A=k!qcOv28x(n37A+n-\u0026wHxLDx(d*cA=-BJB8M8vlVm9+BAh8bB3TRYxKLvYBzkk[y\u00261xBazbUjz6ghUflq5LBvf$?zGG]kwPHdNAa\u0026V?wPRS@vqG+9cP.UxBA}?paw=G!vqQ6djS]7UarU-pvrb\u003c\u003eqfuC\u003cC@^6?BAh8kxfcCyaAhmrB.\u003eGblVm9+BAh8bB2\u003eB+BAh8kxiOU63lQEcvqY.2vp%djaw1}sB-8qwC#Fo\u003cwN/*QvqY.2vp%d)i%)8MC4(2ivR/Qyz/]@tA+P9aiV@G=A+PA7tu%q$arUuiwmPm?", "ln": 216, "col": 56, "line": 4 }, { "b": "aA.NqzF%-payPslnKEAszGG]Atu%q$3lQE9w/@HBx(^#$y?k$LB-8qwx\u003equry?mG%Bz8^Xats]+clM#owmPm?lVm9+BAh8bB1RouzFa68au*]4diJ%AarR^Hv@DHcBAh8bB3%CUvivYQc$vgrzGG]kwPF#5B0bQyyI[6mzxJweaw1}sB-8qwD0sM6e[O*lBy/Fvv@DHcBAhTHjW70n3lQDlarR!EwPS6nzxHtmarR^HarR^HC4(2ivR/Qyz/]@tA+P9ae[]iky\u0026%o1B0$KpB-8qwC}JPpvkonOcmf6xarR^HarR^IxLz0/wO%\u003eNB-8qwx\u003equrx(mA%B.268c$vgrzGG]Ae[ny1garLMarR^HasPwVarR^HEjmk+arV7t3lQE9w/@HBx(^#$y?k$LB-8qwx\u003equry?mG%Bz8^Xats]+clM#owmPm?lVm9+BAh8bB1RouzFa68au.\u003eJattk!DKp(rarUfjB-8qwx\u003equNvrt{2jS(d.zV", "ln": 713, "col": 35, "line": 24 }, { "b": "wHF#?3lQDlarR!pz/fSrazbB#xcotWv@DHcBAhTVw]7)*e{829z*b=klT+4Ec[dj+arR^HarUfjzGx[xv@DHcBAhT]z!9A4jS[lMB-8qwC}JPpvkoDSz+L7[wPydDB7D:Gi%(rqarR^HaAz4nB-Ivxc\u003c?7tarR^HarUMuA=2l3x)Ku3lVm9+BAhU4vqPNdx(mA%B.268c#J%zzddl{DsZR:B.bPsdiK1=3lQDlarR^Hay/tjzGG]Apgn0Je{81", "ln": 1832, "col": 54, "line": 55 }, { "b": "z/P}!z/]@tA+P9al2pHNvpA!\u0026x\u003e7N/y\u003cvAoarR^Hv@DHcBAh8bB3%CUvj(eay\u0026\u003clec$vgrzGG]Aau.[hAbPYry*?uKz/]@tA+P9ae[]iky\u0026%o1B0$KpB-8qwC}JPpvkonXed9HxarUGezFa92xjSR3arS9{3jm)#v@DmaBrCHzxK#iKz/]@tA+P9al$7gCauZ\u0026*z/P}!z/]@tA+P9al2pHNvpA!\u0026x\u003e7N/y\u003cvAoarR^Hv@DHcBAh8bB3%CUvj(eay\u0026\u003clec$vgrzGG]AauY", "ln": 2297, "col": 33, "line": 71 }, { "b": "djD!ParR^Hy*?i]BZX]]ed9Hxdlv\u003ezarUfjzGx[xA+frmy\u0026?YXnLA\u0026tBv*N=zcHo*jS)%mi%(rqazCBgc#:9zB.\u003eGblVm9+BAh8bB3%CUvj(wczFa68au*]4diJ%AarR^", "ln": 2556, "col": 76, "line": 77 } ], "depth": 1, "facts": { "imp": [ [ "", "searchQuery.toLowerCase.trim" ], [ "", "searchQuery.toLowerCase" ], [ "", "visibleCountries.includes" ], [ "", "hiddenCountries.includes" ], [ "", "visibleCountries.includes" ], [ "", "hiddenCountries.includes" ], [ "", "countriesData.filter" ], [ "", "normalizeCountryName" ], [ "", "countryName.toLowerCase" ], [ "", "normalizeCountryName" ], [ "", "country.idd.root.toLowerCase" ], [ "", "country.flag.toLowerCase" ], [ "", "country.cca2.toLowerCase" ], [ "", "normalizedCountryName.includes" ], [ "", "countryName.toLowerCase.includes" ], [ "", "countryName.toLowerCase" ], [ "", "callingCode.includes" ], [ "", "flag.includes" ], [ "", "countryCode.includes" ], [ "", "sortCountriesAlphabetically" ], [ "", "sortCountriesAlphabetically" ], [ "", "countriesData.filter" ], [ "", "popularCountries.includes" ], [ "", "sortCountriesAlphabetically" ], [ "", "countriesData.filter" ], [ "", "popularCountries.includes" ], [ "", "result.push" ], [ "", "result.push" ], [ "", "result.push" ], [ "", "result.push" ], [ "", "../constants/countries.json" ], [ "", "../interface" ], [ "", "./getTranslation" ], [ "", "./normalizeCountryName" ], [ "", "./sortCountriesAlphabetically" ] ], "mbr": [ "callingCode.includes", "countriesData.filter", "country.cca2", "country.cca2.toLowerCase", "country.flag", "country.flag.toLowerCase", "country.idd", "country.idd.root", "country.idd.root.toLowerCase", "country.name", "country.name.common", "country.translations", "countryCode.includes", "countryName.toLowerCase", "countryName.toLowerCase.includes", "flag.includes", "hiddenCountries.includes", "hiddenCountries.length", "normalizedCountryName.includes", "popularCountries.includes", "popularCountriesData.length", "query.length", "result.push", "searchQuery.toLowerCase", "searchQuery.toLowerCase.trim", "translations.allCountriesTitle", "translations.popularCountriesTitle", "visibleCountries.includes", "visibleCountries.length" ], "tgt": [ "callingCode.includes", "countriesData.filter", "country.cca2.toLowerCase", "country.flag.toLowerCase", "country.idd.root.toLowerCase", "countryCode.includes", "countryName.toLowerCase", "countryName.toLowerCase.includes", "flag.includes", "hiddenCountries.includes", "normalizeCountryName", "normalizedCountryName.includes", "popularCountries.includes", "result.push", "searchQuery.toLowerCase", "searchQuery.toLowerCase.trim", "sortCountriesAlphabetically", "visibleCountries.includes" ], "funcs": [ [ "getCountriesList", 488 ], [ "country", 869 ], [ "country", 1151 ], [ "country", 1361 ], [ "country", 1502 ], [ "country", 2350 ], [ "country", 2506 ] ], "metrics": { "ast": { "op.eq": 2, "op.gt": 6, "op.lor": 6, "op.land": 4, "op.lnot": 3, "max_depth": 22, "call_count": 33, "node_count": 858, "member_count": 29, "op_density.eq": 0, "op_density.gt": 0.01, "op_density.lor": 0.01, "op_density.land": 0, "op_density.lnot": 0, "member_depth_max": 4 }, "file": { "size": 3061, "entropy": 4.75 }, "text": { "lines": 100, "top_char": 116, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 475, "char_entropy": 4.75, "unique_chars": 58, "top_char_null": 0, "string_density": 0.1, "top_char_ratio": 0.07, "avg_line_length": 29.61, "max_line_length": 80, "empty_line_ratio": 0.15, "last_line_length": 1, "whitespace_ratio": 0.19, "identifier_density": 1.67, "line_length_stddev": 25.73, "normalized_string_count": 1, "suspicious_identifier_ratio": 0.05, "normalized_unique_identifiers": 6.32 }, "binds": { "count": 15 }, "binary": { "peak_region_bytes": 3061, "peak_region_entropy": 4.84 }, "source": { "function_count": 1 }, "imports": { "count": 5, "relative": 5, "relative_ratio": 1, "third_party_count": 5, "third_party_ratio": 1 }, "strings": { "bytes": 130, "count": 10, "avg_length": 13, "max_length": 29, "path_count": 5, "avg_entropy": 3.19, "empty_count": 1, "entropy_stddev": 0.59 }, "functions": { "count": 1, "nested": 1, "density": 7, "anonymous": 6, "avg_params": 0.14, "code_ratio": 1.16, "max_params": 1, "one_liners": 3, "length_stddev": 28.98, "avg_name_length": 16, "no_params_count": 6, "avg_length_lines": 16.57, "max_length_lines": 86, "min_length_lines": 1, "avg_nesting_depth": 0.86, "max_nesting_depth": 1, "avg_param_name_length": 89 }, "identifiers": { "count": 167, "unique": 42, "avg_length": 11.12, "max_length": 27, "min_length": 3, "avg_entropy": 2.88, "reuse_ratio": 0.25, "length_stddev": 6.18, "has_digit_ratio": 0.02, "high_entropy_count": 7, "high_entropy_ratio": 0.17, "all_lowercase_ratio": 0.4, "numeric_suffix_count": 1, "keyboard_pattern_names": 2 } } }, "id": 18, "mol": "H₂(CmDb)Md(Pa)", "path": "react-native-country-select-0.3.91.tgz!!package/lib/utils/getCountriesList.ts", "pid": 0, "refs": [ { "to": "./getTranslation", "off": 28, "kind": "local" }, { "to": "../constants/countries.json", "off": 70, "file": 2, "kind": "local" }, { "to": "./normalizeCountryName", "off": 136, "kind": "local" }, { "to": "../interface", "off": 221, "kind": "local" }, { "to": "./sortCountriesAlphabetically", "off": 279, "kind": "local" } ], "risk": 4, "sha": "658ecb77cf642428bdf1fe5569e5bdcb5d6803a4607e09260976f0ffbb84a413", "size": 3061, "traits": [ { "id": "metadata/package/files/runtime::javascript-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript file under lib" }, { "id": "micro-behaviors/communications/http/url/encoded::long-base64-like-path-segment", "conf": 0.9, "crit": 3, "desc": "Path has long Base64-like segment", "spans": [ [ 280, 29 ] ] }, { "id": "micro-behaviors/data/control-flow/membership::country-list-membership-call", "conf": 0.92, "crit": 3, "desc": "JavaScript checks country list membership", "spans": [ [ 905, 26 ], [ 957, 25 ], [ 2361, 26 ] ] }, { "id": "micro-behaviors/data/serialize/schema-object::country-code-camel", "conf": 0.5, "crit": 3, "desc": "Contains a countryCode data field", "spans": [ [ 1896, 11 ] ] } ], "type": "javascript" }, { "ctx": [ { "b": "vqZd5vruj4zGv\u0026Yrb#z+B8kobx(v(-vq)tLaBsCraAIa5A:@=Vy***+xM4Y$wPx*ODKp(rarU9kvlbIU/R^zQ/R)D8/ScdEX.hYW/R)FR/SM[We*\u0026gSarR^HvR6vpasCKd^7W[-^sY/SaKEZEFy7KFME9s)I.lRmcObPEarR!oA+doOcRFn:B88[cA=iM.e*\u0026gSarR^HvS=GFasCKg^tDt4^sGVL^7N/laKE*GUPRr1^tDt4^6?r9^6z35e?O+7ed9HxarUf9B2\u003eA\u003ennI\u003cFvrrSrwO(cle?OI53lQDlay]5aiV]!zvqYP#B9g#awO%aMe*\u0026gSarR^HwO=fzasCD%=B}Jd=Bh33=XfPM=X6JLaKt??J)Ap4VcO1Oe?OI53lQDlaz2C6iV]!GwNPQ?xDQ/6B-8qw", "ln": 798, "col": 16, "line": 27 }, { "b": "z/N(YcQI@%v{%y2AacU^B1P6$cObPEarR!Ez/dPUcQU?8B-.5jwGY6-vrfqse?O+7ed9HxarUYEB2\u003eA\u003e^4wX0^74FO^7gvEFZG7%Fy7KEZ0R-\u003ce?OI53lQDlaAIvmiV]!v-j/U\u003cvA25=yJr\u0026#x(n5Ce?OI53lQDlaAIHgiV]!pB-R53AV/sf.(W#je?OI53lQDlaAINxiV]/%Pv5hoWB6PNFy7KEV^t{0^6RhJ^6?r9^6z3ae?O+7ed9HxarU-HwJy}Yq]u4Vaz+F7wg/F!cObPEarR!GB-GI=c=qD\u003cyH[R%A:ZNMe*\u0026gSarR^HB.=1UasCKd^7W[-^sY/SaKEZEFy7KFM^AB)XgPx^cObPEarR!HA+4iNcOv27/[Faj*nMjES[A6TR}wv0*nS-f*L\u003c\u003c$cObPEarR!MxM2{Oc*3IX\u003eD{#BO4W{^WK%f+cObPEarR^ODt4jGnmuyScPSv$\u003e8=a@W4=VKZ2=A9e?O+7ed9HxarS4TxM2E[vqZfmiV]*jKEUBpI@*E!\u003c/V3Ae?OI53lQEted9HxAbPYry*?uKz/]@tA+P9arb3C\u003cwJy@X3lQDlayPq0iV]*5R}D:QSm=\u003cRUH]=aH9kcD/[w1+/R^x0/TYUlcObPEarR!owO:yIc^XHjU*yejGv4lTKi@H8Z0R+=K08/X^sxPF^u-d)^tGw63lQDlayYw5iV]!pA=kVg.){)^z^)K9B0\u0026HCarR^HvS=GFasCKd^7W(w^sY/T^e", "ln": 1501, "col": 6, "line": 49 }, { "b": "zAn)/:Ep51A+MUnz/x\u0026nvrb{bed9HxarUYEB2\u003eA\u003e^4wX0^7^$X^7vX^^sxPS^tMwVaKL+/G3/a}U*y8hIZH4.arR^HB8kRMasy07Acl0mP(L3ZazV1ayh4NhcObPEarR!FAa7^IcS1l?T-F5{", "ln": 2653, "col": 7, "line": 85 }, { "b": "Xf\u0026*marR^HB-I1NasC\u0026@/[d\u003eP/[!smaLzF4H1JrRGXAyMed9HxarU#zz-P0*\u003eyY]3M-f2nZ2=A9cObPEarR^ODt4jGnmuyScPSv$\u003eyY]3M-f2nZ2=A9cObPEarR^ODt4jGnmuyTcPSv$\u003ez3naMvO7!I@?aIcObPEaBL^FarU9ey^Sb-zGG]kwPH*+BzLIHaBsCrarR!nA:.0Kc!Td9GDO{B/[w1R/[w1Y/R^zScObPEarR!owO:yIc^XToFZy!E^7mRP^6g]-^7N?+cObPE", "ln": 2926, "col": 41, "line": 92 }, { "b": "3lQDlazt[niV]!Ax(mD)zxJ\u003erB9+-$xd2kqarR^Hx()=AasychBAzjtx={kXwPIMked9HxarUArzAn)/\u003caiSUFW%/(RSilg\u003c^S}hed9HxarUDrAYLr\u003c(-c]HLB%5-Wxn.#Ff#(ParR^HzFS\u0026AasxD\u003ey?j-9vqYQ!zyl$xarR^HAaK5JasC\u0026$/[FamaLJ*EWaQn/VdT]+RZB25arR^HAbPLNasyliDu\u003cNNyIvu5yJr\u0026#wHx2oarR^HAbP+Tasycb", "ln": 3458, "col": 24, "line": 111 }, { "b": "Z0Knped9HxarU/Ewi7?X/S9RU/R^zRaLzF4H1JrRGXAyMed9HxarU#zz-P0*\u003e81SJOqDu%Z2=A9cObPEarR^ODt4jGnmuyScPSv$\u003e81SJOqDu%Z2=A9cObPEarR^ODt4jGnmuyTcPSv$\u003e81SJOqDu$I@?aIcObPEaBL^FarU-pvrb\u003c\u003eph+kzz/]@do\u003ewx!vp%djaBsCrarR!nA:.0Kc!Tg9RY:S(/[!pZ/SMBIUI1-+GDO%4/TGIh/R)FP/R{kH3lQDlayX[#iV]/%N:DVjU*F=-Z0R-X^7N/laKEQAZ0KHuXZm.gX6RLfZ0R-=ed9HxarUclwJy}Tpa6Q\u003caz2ElvR6T9ed9HxarUcoy=SW^^4eNB^7E-faKE*GU*y5fWB6JKWA#RlXffe9^tDt4^6?r9^6z3dcObPEarR!pwPG)PcR!kZD2d:GzEEu)DsZ#taJq7jP\u003e55U", "ln": 3905, "col": 27, "line": 127 }, { "b": "VMKgbB9+-$xd2kqarR^Hx()=Aasx]}B8#FwaAg+2B7DFoA=lbfBz\u0026JT3lQDlazL\u003ekiV]*iO4W\u003ckJoEc%\u003caj2^FS5MuISoo4\u003caiYWF%dMk3lQDlazU[oiV]*nWxn.#FA%5AaNDtD)45!L)1?2K)3AE[INz=dI0G${cObPEarR!Ay?bNHcR4-VzxJ+7zE^r@azknez/f8%zyl$xarR^HAaK5JasC\u0026$*L\u003c\u003cvaLJ*EWaQn/Vd\u003eiW*L\u003c^./[4!QaLzI4WaIMfed9HxarUSwy=SW^phanZDtWecwQn6ezF{UkA:-.2VV^=F3lQDlaAhmtiV]!B", "ln": 4586, "col": 25, "line": 147 }, { "b": "wi7?X*nS+Y/RWzZaLzF4GXAyF/[Omj*L\u003c\u003c$aLzF4GXigIed9HxarU#zz-P0*\u003ecyYyOqDx+Zu7fP\u003c^S%BUc]Ye3lQDlaszFGz.jH*zGvf^asDrSQ2}(4\u003e83?lH{l0gZ2=A9cObPEarR^ODt4jGnmuyTcPSv$\u003e83?kXq/QaU\u0026Ryk\u003c/V3ted9HxEjLZFayO+\u0026wPI{bvRGT)BA{L*vR6vxvpK7-A=k[TaBsCrarR!nA:.0Kc!LPPGXp}fIRa)J/[OdS/[4!W/R{1CR}wf8S[AoZR}wl%/R^zQ/R)FR/SMUN3lQDlayX[#iV]/%Q%M\u003c5Y=+Xm^6g)7^6g)e^tVC=^6g)6^6aUtU*x#dZ0J#a^6z5S^6p%4^sxR%aKEZEFy7KFME9s)IZH4.arR^HvSD3vasxM$wOV9[v\u003c2Sbwmop=zxF", "ln": 5206, "col": 7, "line": 163 }, { "b": "x(n33at4CGwmn[.x(k5nvrDTkvj9PkarR^Hw].rvasxD}A+SB\u0026A+c?wy*?i7wmV)1vixe[zO@F@A+cw7wGV6iSCDcQBzkVhay]4aAaa3kcObPEarR!uwNWXyc!CrGR}mT=/o+9V/oK%WaLh+cM!dUSSmO3(/pHPT/o$l-/ovTl3lQDlazt!siV[", "ln": 5938, "col": 19, "line": 178 }, { "b": "y?W@kxV3J=BI\u003e7#cObPEarR!vByviMcSsR}zE^VdwmYN[vixe@zE))hA:Z83x=}Fdy?m{bz/fbeAa9s0wHx2oarR^Hyh!5KasDouZ3g9T\u003e8b+\u003cGqdyUYYjS{\u003caBz)FV!i?JolLicObPEarR!xz/N(Yc*Faw(AC^Y)1z50GpKdJS\u0026klwTru\u0026kU\u003ceKccObPEarR!Ay?bNHcQzlQBy/G9A=k\u0026aaA?ghaz+F7wohr#wN/*@wGU\u0026dwmop4ed9HxarUSmAYLr\u003c/$MaB\u0026^^0uVE%@^Jm\u0026%sHALm", "ln": 6157, "col": 37, "line": 182 }, { "b": "Hs\u0026JUUgPV8S36/[/Tfs//S=!P3lQDlaAhmniV]!H-E-1JzeS@[y*!DgD17YjBS+Euvqo{jed9HxarUSwAYLr\u003cmS\u0026PVzY\u0026Oeaz(4cvqE5%wGV59y?pIZ.\u003eRb)wmU", "ln": 6397, "col": 43, "line": 187 }, { "b": "w5$cNwGY6-vrfqscObPEarR!EB-PO^c^XWoZr\u003cLo^7E-t^6Rf7^7vX:^7N/u^6I9kaKE\u003cHY3OdqUPRq#^tMwR^7W[T^6aUuFZG7%Fy7KEZ0R-=ed9HxarU-wyDrN=p\u0026yU*wnbP$zeS$5P\u003e[QT", "ln": 6547, "col": 44, "line": 190 }, { "b": "YuXgpV^b-1F/@x{=Ylt5=AUYEcObPEarR!rzF80McQRY:v@0iezY\u0026Laz/YFjBzbkdlVm9+BAhTHq!o=Rv@@\u0026gz!9o)cObPEarR!rB96C=cRFo[WqZg}yH]4twPP5oB.\u003eY4wmlQ3x\u003e.i]aA?gfx(dN9wGU\u0026dwmn[.cObPEarR!sx(k%OcRFn\u0026yINt", "ln": 7802, "col": 89, "line": 210 }, { "b": "wPI%lvix8{aAIagwQn6ezE\u003c@fvp:H\u003ecObPEarR!wAbEYVc/{\u0026h(4cwbIK@\u003cXQt{)s\u003caz)xGra3:LiFo?\u003caiPTF@wVuTk!=m\u003casF{Gr0%:Gx4M!cObPEarR!xz/N(Yc*Faw(AC^Y)1z50GpKdJS\u0026klwTN8HhaNs@^)3$-OPRQ[MV([:!WcKP\u003ecObPEarR!Ay?bNHcRFn\u0026yANLjazttdaz+F7wohr#wN/*@wGU\u0026dwmoo%By=Ooy\u0026%DlwO@\u003eD3lQDlaAg[jiV]*5SmXxcR}WdM/R)De/S9RVaLBGZHs\u0026PWVdT)P/R^zS/S9Pb/R^x2aLJ*EWaQn/U]}=1/-", "ln": 8295, "col": 37, "line": 218 }, { "b": "Uo$\u003edarR^HAbPLNasx/#x\u003e}Q2yaHGovTf8xvqP^$-d=c+az(4cvqE6gD17YjBS+Euvqo{jed9HxarUSwAYLr\u003clU{ERB.8Xmvrb^0w[tE=vr9Geaz(4cvqE5%wGV59", "ln": 8573, "col": 78, "line": 222 }, { "b": "y?)P8B7Jm!x(dMbzeS@[y@AO@-iyC2vq]T%zddi5x#u\u0026.zxK5tV1[e:DbM$9cObPEarR!HyJqDUc^XBhU*F6HXy2(OZ0Sd[G3/JdaKM4)Zr\u003cbc^6}xa^7mRP^74FP=\u0026", "ln": 9189, "col": 13, "line": 231 }, { "b": "Jn6Hr*nS+U*nMjGSO1GgJm$\u0026\u003ced9HxarU#zz-P0*\u003eyQnaHR8V4V*0*U\u003c^S%BUd0OBIro.}\u003ebt0oFpV\u003cRH9[IVarR^HcWGDAeL6q/B0\u003c0\u003ec*c8(\u003c+HFfG%Q3gT(V4=\u003c/V5RFqJADSPHdM\u003e753BP[T{C3lQDlaszFGz.jH*zGEl!asDA=P5#k](6E}8MwKZ[I@?aI(4cwbLzwq0Q2}5!\u003eaNISed9HxEjLZFayO+\u0026wPI{bvRGT)BA{L*vR6vyy\u0026sxaluNx(z/dPUDKp(rarU9kvlbIU/S%emaLrKy", "ln": 9432, "col": 85, "line": 233 }, { "b": "w[=c]B98Chay]geB7Gf0DtdqnwGU@2wPIAged9HxarUArzAn)/\u003c^S%FFW\u003c\u003c1P5UD$\u003caC28GmJ0mTlC}b\u003caiPTF@wVwOA2jo\u003caBV=ed9HxarUDrAYLr\u003c(B0+VUZ^\u003e.GRmZ+OGNl#SoYwyaNs@^(Bs5v(-#ihIO7q/3lQDlaz#1aiV]!Gy\u0026%DlyI[6faA?ghaz+F7wohr#wN/*@wGU\u0026dwmop4ed9HxarUSmAYLr\u003c/ST2d/[FamaLrTBV!hqhH9kf-/[Ob", "ln": 10611, "col": 38, "line": 253 }, { "b": "/[!p=cObPEarR!Cz!}DScS1\u0026fD1gMfyAN}izej36-f\u003eaHvixA9wmop.aA@9uz/P$yyJr\u0026#BTFZEarR^HAbP+TasxG]BI\u003c\u003e(ay]4aw[tE=vr9G3zY\u0026[nwmoo%wmU", "ln": 10841, "col": 57, "line": 257 }, { "b": "SO1GeHtd\u003el*nS-5aLrTCX.hY+ed9HxarU#zz-P0*\u003c^S%BUd0OBIro.}\u003ebt0oFpV\u003cRHujb}(6FKmJeu!ZT%U+carR^HcWGDAeL6q/B0\u003c0\u003ec/{\u0026h\u003c/V5RFqJADSPHdM\u003e753BP[.V.V*0*U\u003e8teYLcce-3lQDlaszFGz.jH*zGEl!asDovI@?aI(4cwbLzwq0Q2}5!\u003eaNK]MZ)raIro+N(4\u003ePLed9HxEjLZFayO+\u0026wPI{bvRGT)BA{z\u003ezGFlZz/YFRB-..zzAn[!3lQDlayPq0iV]*5R}D*TG4NsJ", "ln": 11632, "col": 69, "line": 268 }, { "b": "UfR^DX6GYLW\u0026\u003c1L=Ylt5=AUYEcObPEarR!rzF80McSCwgwGV8kaAIa5A:@=9w]zYjvix5#B-8qwC{+cIarR^HwPI@Oasy94B7GAmvp%c]A+Pl2x=}toB7]G9B7GcdcObPEarR!sx(k%OcRFe]yhW*dvixc6B7@K/yJB6dx=}n3vrt{9ed9HxarUm", "ln": 16309, "col": 56, "line": 350 }, { "b": "ed9HxarUxuvlbIUl${pFByuqhwPw]6wPzo?A+cwozxJ[bwPIAged9HxarUArzAn)/\u003c^S%zF%bn(OAEnN\u003caiSUF@wVuPw$JO\u003cajn)G@9)*N\u003cP-]arR^HyJ1kOasDDZT)icv(.Rlp(AU%bGnF#XNcQAv(-4ll)4e{%PRT1!3lQDlaz#1aiV]!HD2K)Az6i.8vr9G4wO@SbvqYP#By=Ovz!iY}zyl$xarR^HAaK5JasC*u/S\u003c8b*L^ocTK%(iS[sAaH$^\u003eh*nS-i/[!p=aLrZDR}Wf-Z98de/[Omu/SMUN3lQDlaAhmniV]!KAa%v", "ln": 16630, "col": 43, "line": 357 }, { "b": "AbEYVc/{\u0026h\u003carDUFW\u003c\u003c1P5Ux\u0026\u003cariHFVE*ZUJ7kr\u003caBw(Gm\u0026ioUo$\u003edarR^HyJ1kOasDDZT)icv(.Rlp)1z50GpRy{NcQAv(-4ll)szUgRMzi%3lQDlaz#1aiV]!yy?WVcz/3RdwO@SbvqYP#By=OowO+{/By/G7zyl$xarR^HAaK5JasC*u/S\u003c8b*L^ocR}D*SS[sGbR}v{\u003c*nS-i/[!p=aLJ*FGXIEtSux]]/[Omu/SMUN3lQDlaAhmniV]!yy?WU", "ln": 22078, "col": 6, "line": 499 }, { "b": "y\u00260V9y?mZgwPzufed9HxarUArzAn)/\u003cas2=Gra3+Me^E\u0026\u003caA=WGm\u0026ipH#=6@\u003e++m9ed9HxarUDrAYLr\u003c)3iK%JeW8dVMOOlSQ3mGcObPEarR!Ay?bNHcQzMXvpA!\u0026y?WT9BseQDarR^HAaK5JasC\u0026[/[Xj+/T6kgaLr*GVdT@^FHq#QarR^HAbPLNasx\u0026%B97?ky?X05AWJyBarR^HAbP+Tasx\u0026%B97?kvqGK:v-bf!x\u003e7N0ed9HxarUYyzu", "ln": 23451, "col": 20, "line": 533 }, { "b": "BAz8mvj9PkarR^Hyh!5KasDi3UJ7nn\u003caA0AG0ji=M/AT]\u003e9y!:T^w71LiELc\u003e8b-Ted9HxarUDrAYLr\u003c(BqxhO@\u0026omYDDM]PZvx5)uK78PRQ[MV([:!WcKP\u003ecObPEarR!Ay?bNHcRFn\u0026yANLjaz2b4az+RhBy/FnBy=OowO+{/By/G7zyl$xarR^HAaK5JasC*u/S\u003c8b*L^ocR}D*SS[sGbR}v{\u003c/SA/h/)$p1SO8%VJm$lN*nS+W*L\u003c^*cJ", "ln": 27024, "col": 39, "line": 638 } ], "depth": 1, "facts": { "imp": [ [ "", "../interface" ] ], "metrics": { "ast": { "max_depth": 22, "call_count": 0, "node_count": 5170 }, "file": { "size": 27924, "entropy": 5.76 }, "text": { "lines": 658, "top_char": 208, "max_ws_run": 1, "space_count": 4630, "char_entropy": 5.76, "unique_chars": 153, "top_char_null": 0, "string_density": 0.99, "top_char_ratio": 0.05, "avg_line_length": 41.44, "invisible_chars": 1, "max_line_length": 130, "non_ascii_ratio": 0.36, "empty_line_ratio": 0, "last_line_length": 11, "whitespace_ratio": 0.19, "identifier_density": 0.89, "line_length_stddev": 19.19, "encoded_string_ratio": 0.01, "normalized_string_count": 25.34, "normalized_unique_identifiers": 5.77 }, "binds": { "count": 1 }, "binary": { "peak_region_bytes": 25876, "peak_region_entropy": 5.82 }, "imports": { "count": 1, "relative": 1, "relative_ratio": 1, "third_party_count": 1, "third_party_ratio": 1 }, "strings": { "bytes": 19217, "count": 650, "avg_length": 29.56, "max_length": 118, "path_count": 1, "avg_entropy": 3.5, "entropy_stddev": 0.47, "base64_candidates": 5 }, "identifiers": { "count": 585, "unique": 54, "avg_length": 11.98, "max_length": 32, "min_length": 3, "avg_entropy": 2.43, "reuse_ratio": 0.09, "length_stddev": 11.46, "high_entropy_count": 18, "high_entropy_ratio": 0.33, "all_lowercase_ratio": 0.59 } } }, "id": 20, "mol": "Md₃(PaPt)", "path": "react-native-country-select-0.3.91.tgz!!package/lib/utils/getTranslation.ts", "pid": 0, "refs": [ { "to": "../interface", "off": 39, "kind": "local" } ], "risk": 3, "sha": "88a91e1d90d9b567b3c8c733b096de59b76221abd4b3c19b59cac78b352b90f5", "size": 27924, "traits": [ { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 7850, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 16357, 0 ] ] }, { "id": "metadata/package/files/runtime::javascript-lib-tree-artifact", "conf": 0.95, "crit": 3, "desc": "JavaScript file under lib" }, { "id": "metadata/file/data-blob::high-byte-script-text", "conf": 0.88, "crit": 3, "desc": "High-byte script text (\u003e=12%)" }, { "id": "metadata/lang/natural::lang-arabic-script", "conf": 0.8, "crit": 3, "desc": "Contains Arabic-script text", "spans": [ [ 862, 10 ] ] }, { "id": "metadata/lang/natural::lang-japanese", "conf": 0.8, "crit": 3, "desc": "Contains Hiragana or Katakana script", "spans": [ [ 3522, 12 ], [ 4650, 18 ], [ 6250, 6 ], [ 8359, 12 ], [ 8371, 12 ], [ 10675, 6 ], [ 10681, 9 ], [ 16694, 15 ] ] }, { "id": "metadata/lang/natural::lang-korean", "conf": 0.8, "crit": 3, "desc": "Contains Hangul script", "spans": [ [ 4681, 9 ], [ 4702, 12 ], [ 8410, 9 ], [ 8420, 12 ], [ 16738, 15 ], [ 22142, 15 ], [ 23515, 9 ], [ 27088, 9 ] ] }, { "id": "metadata/lang/natural::script-cyrillic", "conf": 0.8, "crit": 3, "desc": "Contains multiple standalone Cyrillic words", "spans": [ [ 900, 10 ], [ 911, 12 ], [ 964, 14 ], [ 984, 14 ], [ 1565, 10 ], [ 1576, 12 ], [ 1664, 16 ], [ 1681, 12 ] ] } ], "type": "javascript" } ], "rev": "479f3", "v": "8" } }