{ "ml": { "v": "7", "id": 10, "lvl": -1, "conf": 0, "prob": 0.000017275413483730517, "type": "javascript", "version": "v18.18", "analyzed_at": "2026-09-18T19:21:39Z" }, "path": "package/bin/executor.exe##unicode-escape@112637027", "raw": { "rev": "e86a6", "files": [ { "id": 10, "mol": "O(As₂)H(Db₃)Md", "pid": 1, "rel": "fetched", "sha": "fa82eeb7e7c636016fa7b0d4eafd613cbc4eee3d4b3c60e8e75b9ae9df77fcb3", "via": "https://registry.npmjs.org/executor/-/executor-1.6.10-windows-arm64.tgz", "path": "pkg:npm/executor@1.6.10-windows-arm64!!package/bin/executor.exe!!package/bin/executor.exe##unicode-escape@112637027", "risk": 6, "size": 8361, "type": "javascript", "depth": 4, "facts": { "imp": [ [ "", "we" ], [ "", "Es" ], [ "", "PK" ], [ "", "JSON.stringify" ], [ "", "Error" ], [ "", "Set" ], [ "", "Jxr.visit" ], [ "", "t.add" ], [ "", "t.has" ], [ "", "Map" ], [ "", "n.push" ], [ "", "Ejt" ], [ "", "Ijt" ], [ "", "a.add" ], [ "", "r.get" ], [ "", "Ajt.isScalar" ], [ "", "Ajt.isCollection" ], [ "", "Error" ], [ "", "we" ], [ "", "Array.isArray" ], [ "", "RK" ], [ "", "String" ], [ "", "Array.from" ], [ "", "r.keys" ], [ "", "r.get" ], [ "", "RK" ], [ "", "r.delete" ], [ "", "r.set" ], [ "", "Array.from" ], [ "", "RK" ], [ "", "r.delete" ], [ "", "r.delete" ], [ "", "r.add" ], [ "", "Object.entries" ], [ "", "RK" ], [ "", "e.call" ], [ "", "we" ], [ "", "Es" ], [ "", "Array.isArray" ], [ "", "e.map" ], [ "", "jjt" ], [ "", "String" ], [ "", "lkr.hasAnchor" ], [ "", "e.toJSON" ], [ "", "n.anchors.set" ], [ "", "e.toJSON" ], [ "", "n.onCreate" ], [ "", "Number" ], [ "", "we" ], [ "", "NMe" ], [ "", "Es" ], [ "", "FA" ], [ "", "Object.defineProperty" ], [ "", "Object.create" ], [ "", "Object.getPrototypeOf" ], [ "", "Object.getOwnPropertyDescriptors" ], [ "", "Njt.isDocument" ], [ "", "TypeError" ], [ "", "Map" ], [ "", "pkr.toJS" ], [ "", "o.anchors.values" ], [ "", "dkr.applyReviver" ], [ "", "we" ], [ "", "Zde" ], [ "", "PK" ], [ "", "Es" ], [ "", "Yde" ], [ "", "FA" ], [ "", "Object.defineProperty" ], [ "", "Error" ], [ "", "gkr.visit" ], [ "", "$L.isAlias" ], [ "", "$L.hasAnchor" ], [ "", "n.push" ], [ "", "ReferenceError" ], [ "", "n.get" ], [ "", "vkr.toJS" ], [ "", "n.get" ], [ "", "ReferenceError" ], [ "", "Jde" ], [ "", "ReferenceError" ], [ "", "hkr.anchorIsValid" ], [ "", "e.anchors.has" ], [ "", "Error" ], [ "", "$L.isAlias" ], [ "", "t.resolve" ], [ "", "n.get" ], [ "", "$L.isCollection" ], [ "", "Jde" ], [ "", "$L.isPair" ], [ "", "Jde" ], [ "", "Jde" ], [ "", "Math.max" ], [ "", "we" ], [ "", "Es" ], [ "", "Yde" ], [ "", "FA" ], [ "", "wkr.toJS" ], [ "", "String" ], [ "", "we" ], [ "", "AK" ], [ "", "Es" ], [ "", "Wp" ], [ "", "n.filter" ], [ "", "r.find" ], [ "", "Error" ], [ "", "n.find" ], [ "", "r.identify" ], [ "", "TO.isDocument" ], [ "", "TO.isNode" ], [ "", "TO.isPair" ], [ "", "p.items.push" ], [ "", "e.valueOf" ], [ "", "s.get" ], [ "", "Rkr.Alias" ], [ "", "s.set" ], [ "", "t.startsWith" ], [ "", "t.slice" ], [ "", "Ekr" ], [ "", "e.toJSON" ], [ "", "Djt.Scalar" ], [ "", "Object" ], [ "", "c.createNode" ], [ "", "c.nodeClass.from" ], [ "", "Djt.Scalar" ], [ "", "we" ], [ "", "EK" ], [ "", "Es" ], [ "", "Yde" ], [ "", "Number.isInteger" ], [ "", "Map" ], [ "", "Okr.createNode" ], [ "", "Error" ], [ "", "Map" ], [ "", "Object.defineProperty" ], [ "", "Object.create" ], [ "", "Object.getPrototypeOf" ], [ "", "Object.getOwnPropertyDescriptors" ], [ "", "t.items.map" ], [ "", "Iw.isNode" ], [ "", "Iw.isPair" ], [ "", "n.clone" ], [ "", "Mjt" ], [ "", "Iw.isCollection" ], [ "", "a.addIn" ], [ "", "OMe" ], [ "", "Error" ], [ "", "Iw.isCollection" ], [ "", "r.deleteIn" ], [ "", "Error" ], [ "", "Iw.isScalar" ], [ "", "Iw.isCollection" ], [ "", "a.getIn" ], [ "", "Iw.isPair" ], [ "", "Iw.isScalar" ], [ "", "Iw.isCollection" ], [ "", "r.hasIn" ], [ "", "Iw.isCollection" ], [ "", "a.setIn" ], [ "", "OMe" ], [ "", "Error" ], [ "", "e.replace" ], [ "", "e.substring" ], [ "", "e.replace" ] ], "mbr": [ "$L.ALIAS", "$L.hasAnchor", "$L.isAlias", "$L.isCollection", "$L.isPair", "$kr.NodeBase", "Ajt.isCollection", "Ajt.isScalar", "Array.from", "Array.isArray", "Djt.Scalar", "Dkr.Collection", "Dkr.collectionFromPath", "Dkr.isEmptyPath", "Iw.isCollection", "Iw.isNode", "Iw.isPair", "Iw.isScalar", "JSON.stringify", "Jxr.visit", "Math.max", "Njt.NODE_TYPE", "Njt.isDocument", "Number.isInteger", "Object.create", "Object.defineProperty", "Object.entries", "Object.getOwnPropertyDescriptors", "Object.getPrototypeOf", "Okr.createNode", "Rkr.Alias", "SO.BLOCK_FOLDED", "SO.BLOCK_LITERAL", "SO.PLAIN", "SO.QUOTE_DOUBLE", "SO.QUOTE_SINGLE", "Symbol.iterator", "TO.MAP", "TO.SEQ", "TO.isDocument", "TO.isNode", "TO.isPair", "Tkr.Scalar", "Tkr.isScalarValue", "Zxr.Directives", "a.add", "a.addIn", "a.aliasCount", "a.anchor", "a.count", "a.getIn", "a.setIn", "a.value", "bkr.NodeBase", "c.createNode", "c.default", "c.nodeClass", "c.nodeClass.from", "c.tag", "ckr.toJS", "dkr.applyReviver", "e.anchors", "e.anchors.has", "e.call", "e.contents", "e.endsWith", "e.implicitKey", "e.map", "e.options", "e.options.verifyAliasOrder", "e.range", "e.replace", "e.substring", "e.toJSON", "e.valueOf", "gkr.visit", "hkr.anchorIsValid", "i.aliasCount", "i.anchor", "i.count", "i.node", "i.node.anchor", "i.res", "i.tags", "ikr.applyReviver", "jkr.createNode", "kkr.NodeBase", "l.anchor", "l.node", "lkr.hasAnchor", "mkr.NodeBase", "n.anchors", "n.anchors.set", "n.clone", "n.comment", "n.commentBefore", "n.filter", "n.find", "n.get", "n.keep", "n.length", "n.onCreate", "n.onTagObj", "n.push", "n.schema", "n.tag", "n.value", "o.anchors", "o.anchors.values", "o.format", "o.tag", "p.items", "p.items.push", "pkr.toJS", "r.add", "r.anchor", "r.delete", "r.deleteIn", "r.find", "r.format", "r.get", "r.hasIn", "r.identify", "r.keys", "r.length", "r.res", "r.set", "s.get", "s.set", "s.source", "t.add", "t.aliasResolveCache", "t.has", "t.items", "t.items.map", "t.keep", "t.key", "t.length", "t.range", "t.resolve", "t.schema", "t.slice", "t.startsWith", "t.value", "t_.defaultTags", "t_.defaultYaml", "tkr.anchorIsValid", "tkr.anchorNames", "tkr.createNodeAnchors", "tkr.findNewAnchor", "u.tag", "vkr.toJS", "wkr.toJS", "xkr.SCALAR", "ykr.Alias" ], "tgt": [ "$L.hasAnchor", "$L.isAlias", "$L.isCollection", "$L.isPair", "AK", "Ajt.isCollection", "Ajt.isScalar", "Array.from", "Array.isArray", "Djt.Scalar", "EK", "Ejt", "Ekr", "Error", "Es", "FA", "Ijt", "Iw.isCollection", "Iw.isNode", "Iw.isPair", "Iw.isScalar", "JSON.stringify", "Jde", "Jxr.visit", "Map", "Math.max", "Mjt", "NMe", "Njt.isDocument", "Number", "Number.isInteger", "OMe", "Object", "Object.create", "Object.defineProperty", "Object.entries", "Object.getOwnPropertyDescriptors", "Object.getPrototypeOf", "Okr.createNode", "PK", "RK", "ReferenceError", "Rkr.Alias", "Set", "String", "TO.isDocument", "TO.isNode", "TO.isPair", "TypeError", "Wp", "Yde", "Zde", "a", "a.add", "a.addIn", "a.getIn", "a.setIn", "c.createNode", "c.nodeClass.from", "dkr.applyReviver", "e.anchors.has", "e.call", "e.map", "e.replace", "e.substring", "e.toJSON", "e.valueOf", "gkr.visit", "hkr.anchorIsValid", "jjt", "lkr.hasAnchor", "n.anchors.set", "n.clone", "n.filter", "n.find", "n.get", "n.onCreate", "n.push", "o", "o.anchors.values", "p.items.push", "pkr.toJS", "r", "r.add", "r.delete", "r.deleteIn", "r.find", "r.get", "r.hasIn", "r.identify", "r.keys", "r.set", "s.get", "s.set", "t.add", "t.has", "t.items.map", "t.resolve", "t.slice", "t.startsWith", "vkr.toJS", "we", "wkr.toJS" ], "funcs": [ [ "anonymous", 121 ], [ "Qxr", 151 ], [ "Ejt", 306 ], [ "Value", 356 ], [ "Ijt", 400 ], [ "ekr", 476 ], [ "anonymous", 536 ], [ "anonymous", 611 ], [ "anonymous", 974 ], [ "RK", 982 ], [ "anonymous", 1590 ], [ "jjt", 1611 ], [ "anonymous", 1664 ], [ "anonymous", 1843 ], [ "anonymous", 2018 ], [ "constructor", 2068 ], [ "clone", 2135 ], [ "toJS", 2281 ], [ "anonymous", 2716 ], [ "constructor", 2805 ], [ "set", 2884 ], [ "resolve", 2937 ], [ "anonymous", 3033 ], [ "toJSON", 3198 ], [ "toString", 3753 ], [ "Jde", 4029 ], [ "anonymous", 4348 ], [ "anonymous", 4392 ], [ "constructor", 4474 ], [ "toJSON", 4520 ], [ "toString", 4583 ], [ "anonymous", 4812 ], [ "Ekr", 4875 ], [ "anonymous", 4916 ], [ "anonymous", 4941 ], [ "anonymous", 5026 ], [ "Ikr", 5059 ], [ "anonymous", 6117 ], [ "OMe", 6156 ], [ "anonymous", 6404 ], [ "anonymous", 6511 ], [ "constructor", 6612 ], [ "clone", 6727 ], [ "anonymous", 6863 ], [ "addIn", 6956 ], [ "deleteIn", 7201 ], [ "getIn", 7404 ], [ "hasAllNullValues", 7548 ], [ "anonymous", 7592 ], [ "hasIn", 7727 ], [ "setIn", 7846 ], [ "anonymous", 8198 ], [ "$Me", 8236 ] ], "metrics": { "ast": { "op.eq": 31, "op.ge": 3, "op.gt": 2, "op.lt": 2, "op.ne": 7, "op.add": 2, "op.lor": 11, "op.mul": 2, "op.sub": 1, "op.land": 25, "op.lnot": 40, "max_depth": 27, "call_count": 190, "node_count": 5359, "op.coalesce": 3, "member_count": 155, "max_array_len": 2, "op_density.eq": 0.01, "op_density.ge": 0, "op_density.gt": 0, "op_density.lt": 0, "op_density.ne": 0, "op_density.add": 0, "op_density.lor": 0, "op_density.mul": 0, "op_density.sub": 0, "sequence_count": 19, "op_density.land": 0, "op_density.lnot": 0.01, "max_concat_chain": 2, "member_depth_max": 3, "op_density.coalesce": 0 }, "file": { "size": 8361, "entropy": 5.28 }, "text": { "lines": 1, "top_char": 101, "max_ws_run": 1, "digit_ratio": 0.01, "space_count": 317, "char_entropy": 5.28, "unique_chars": 83, "top_char_null": 0, "lines_over_200": 1, "lines_over_500": 1, "string_density": 48, "top_char_ratio": 0.09, "avg_line_length": 8361, "lines_over_1000": 1, "max_line_length": 8361, "null_byte_count": 1, "last_line_length": 8361, "long_token_count": 16, "whitespace_ratio": 0.04, "identifier_density": 1155, "non_printable_ratio": 0, "normalized_string_count": 48, "suspicious_identifier_ratio": 0.06 }, "binds": { "count": 137 }, "binary": { "peak_region_bytes": 6313, "peak_region_entropy": 5.46 }, "source": { "class_count": 4, "function_count": 25 }, "strings": { "bytes": 919, "count": 48, "avg_length": 19.15, "max_length": 78, "avg_entropy": 2.87, "empty_count": 3, "entropy_stddev": 1.17 }, "functions": { "count": 29, "nested": 17, "density": 5300, "anonymous": 22, "avg_params": 1.45, "code_ratio": 53, "max_params": 4, "one_liners": 53, "avg_name_length": 5.71, "no_params_count": 5, "avg_length_lines": 1, "max_length_lines": 1, "min_length_lines": 1, "avg_nesting_depth": 1.06, "max_nesting_depth": 2, "single_char_params": 68, "avg_param_name_length": 1.87 }, "consistency": { "extension_content_mismatch": 1, "extension_content_mismatch.script_as_unknown": 1 }, "identifiers": { "count": 1155, "unique": 214, "avg_length": 5.91, "max_length": 25, "min_length": 1, "avg_entropy": 2.06, "reuse_ratio": 0.19, "length_stddev": 4.09, "sequential_names": 12, "single_char_count": 12, "single_char_ratio": 0.06, "high_entropy_count": 7, "high_entropy_ratio": 0.03, "all_lowercase_ratio": 0.42, "all_uppercase_ratio": 0.09 } } }, "traits": [ { "id": "metadata/file/extension/identity::script-content-extension-mismatch", "conf": 0.9, "crit": 3, "desc": "Script content mismatches extension" }, { "id": "metadata/lang/natural::lang-english--atom-1", "conf": 0.8, "crit": 1, "desc": "English function-word token \"the\"", "spans": [ [ 3334, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-4", "conf": 0.8, "crit": 1, "desc": "English function-word token \"have\"", "spans": [ [ 2922, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-5", "conf": 0.8, "crit": 1, "desc": "English function-word token \"for\"", "spans": [ [ 418, 0 ] ] }, { "id": "metadata/lang/natural::lang-english--atom-7", "conf": 0.8, "crit": 1, "desc": "English function-word token \"this\"", "spans": [ [ 806, 0 ] ] }, { "id": "micro-behaviors/data/control-flow/analysis::js-conditional-matcher-call", "conf": 0.88, "crit": 3, "desc": "Calls a matcher in a conditional expression", "spans": [ [ 167, 23 ], [ 8254, 16 ] ] }, { "id": "micro-behaviors/data/serialize/json::json-stringify-identifier", "conf": 0.85, "crit": 3, "desc": "Serializes an identifier as JSON", "spans": [ [ 262, 14 ] ] }, { "id": "micro-behaviors/data/source/syntax/array::temporary-array-element-read", "conf": 0.8, "crit": 2, "desc": "Reads an array element into a variable", "spans": [ [ 1081, 0 ] ] }, { "id": "micro-behaviors/data/string/conversion::tostring-token", "conf": 1.0, "crit": 3, "desc": "References the toString conversion method", "spans": [ [ 3753, 8 ] ] }, { "id": "metadata/file/function::high-function-density", "conf": 0.85, "crit": 2, "desc": "High function density" }, { "id": "metadata/file/naming::sequential-identifiers", "conf": 0.8, "crit": 2, "desc": "Sequential source identifier names" }, { "id": "metadata/file/padding::low-whitespace", "conf": 0.7, "crit": 2, "desc": "Very low whitespace ratio (minified/compressed)" }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::last-line-over-1000", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Last line is over 1000 chars" }, { "id": "objectives/anti-static/obfuscation/code-metrics/structure::single-long-line-outlier", "atk": "T1027", "mbc": "B0032", "conf": 0.9, "crit": 3, "desc": "Exactly one line exceeds 1000 chars" }, { "id": "objectives/anti-static/obfuscation/string/reconstruct::js-empty-string-accumulator", "conf": 0.85, "crit": 3, "desc": "JavaScript empty-string accumulator initializer", "spans": [ [ 4854, 20 ] ] } ] } ] } }