PkgRadar

npm · registry.npmjs.org

@adhdev/daemon-core

Js Decode Then Exec: base64 / atob / fromCharCode decode adjacent to eval / new Function — canonical obfuscated-loader pattern.

Why PkgRadar flagged 0.9.82-rc.311

SeveritySignalEvidence
highJs Decode Then Execbase64 / atob / fromCharCode decode adjacent to eval / new Function — canonical obfuscated-loader pattern. · package/src/providers/sdk/v1/validators/taint.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
0.9.82-rc.311Review452026-06-17
0.9.82-rc.310Review222026-06-17
0.9.82-rc.309Review452026-06-17
0.9.82-rc.308Review452026-06-17
0.9.82-rc.307Review222026-06-17
0.9.82-rc.305Review222026-06-17
0.9.82-rc.306Review222026-06-17
0.9.82-rc.304Review222026-06-17
0.9.82-rc.303Review452026-06-17
0.9.82-rc.302Review452026-06-17
0.9.82-rc.301Review452026-06-17
0.9.82-rc.299Review452026-06-16
0.9.82-rc.300Review452026-06-16
0.9.82-rc.298Review452026-06-16
0.9.82-rc.297Review222026-06-16
0.9.82-rc.296Review452026-06-16
0.9.82-rc.295Review452026-06-16
0.9.82-rc.294Review452026-06-16
0.9.82-rc.293Review452026-06-16
0.9.82-rc.292Review452026-06-16
0.9.82-rc.291Review452026-06-16
0.9.82-rc.290Review222026-06-16
0.9.82-rc.289Review452026-06-16
0.9.82-rc.288Review452026-06-16
0.9.82-rc.287Review222026-06-16
0.9.82-rc.286Review222026-06-16
0.9.82-rc.284Review452026-06-16
0.9.82-rc.285Review222026-06-16
0.9.82-rc.283Review452026-06-15
0.9.82-rc.282Review452026-06-15
0.9.82-rc.281Review452026-06-15
0.9.82-rc.280Review452026-06-15
0.9.82-rc.279Review222026-06-15
0.9.82-rc.278Review222026-06-15
0.9.82-rc.276Review452026-06-15
0.9.82-rc.277Review452026-06-15
0.9.82-rc.275Review222026-06-15
0.9.82-rc.274Review452026-06-15
0.9.82-rc.273Review452026-06-15
0.9.82-rc.272Review222026-06-15
0.9.82-rc.271Review222026-06-15
0.9.82-rc.270Review222026-06-14
0.9.82-rc.269Review222026-06-14
0.9.82-rc.268Review222026-06-14
0.9.82-rc.267Review222026-06-14
0.9.82-rc.266Review222026-06-14
0.9.82-rc.265Review222026-06-14
0.9.82-rc.264Review222026-06-14
0.9.82-rc.263Review222026-06-14
0.9.82-rc.262Review452026-06-14
0.9.82-rc.261Review452026-06-14
0.9.82-rc.260Review452026-06-14
0.9.82-rc.259Review222026-06-14
0.9.82-rc.258Review222026-06-14
0.9.82-rc.257Review222026-06-13
0.9.82-rc.256Review222026-06-13
0.9.82-rc.255Review222026-06-13
0.9.82-rc.254Review222026-06-13
0.9.82-rc.253Review452026-06-13
0.9.82-rc.252Review312026-06-13
0.9.82-rc.251Review312026-06-13
0.9.82-rc.250Review312026-06-13
0.9.82-rc.249Review312026-06-13
0.9.82-rc.248Review312026-06-13
0.9.82-rc.246Review312026-06-13
0.9.82-rc.247Review312026-06-13
0.9.82-rc.245Review312026-06-13
0.9.82-rc.244Review312026-06-13
0.9.82-rc.243Review312026-06-12
0.9.82-rc.242Review312026-06-12
0.9.82-rc.241Review312026-06-12
0.9.82-rc.240Review452026-06-12
0.9.82-rc.239Review452026-06-12
0.9.82-rc.237Review452026-06-12
0.9.82-rc.238Review452026-06-12
0.9.82-rc.236Review452026-06-12
0.9.82-rc.234Review452026-06-12
0.9.82-rc.235Review452026-06-12
0.9.82-rc.233Review452026-06-12
0.9.82-rc.231Review452026-06-12
0.9.82-rc.232Review312026-06-12
0.9.82-rc.230Review452026-06-12
0.9.82-rc.229Review452026-06-12
0.9.82-rc.228Review312026-06-12
0.9.82-rc.227Review312026-06-12
0.9.82-rc.226Review312026-06-12
0.9.82-rc.225Review452026-06-12
0.9.82-rc.224Review452026-06-12
0.9.82-rc.222Review312026-06-11
0.9.82-rc.223Review312026-06-11
0.9.82-rc.221Review452026-06-11
0.9.82-rc.220Review452026-06-11
0.9.82-rc.219Review452026-06-11
0.9.82-rc.218Review312026-06-11
0.9.82-rc.216Review452026-06-11
0.9.82-rc.217Review452026-06-11
0.9.82-rc.215Review312026-06-11
0.9.82-rc.214Review452026-06-11
0.9.82-rc.213Review312026-06-11
0.9.82-rc.212Review312026-06-11
0.9.82-rc.210Review312026-06-10
0.9.82-rc.211Review312026-06-10
0.9.82-rc.209Review312026-06-10
0.9.82-rc.208Review312026-06-10
0.9.82-rc.207Review452026-06-10
0.9.82-rc.206Review452026-06-10
0.9.82-rc.205Review312026-06-10
0.9.81Low risk02026-06-10
0.9.82-rc.204Review312026-06-10
0.9.82-rc.203Review452026-06-10
0.9.82-rc.202Review452026-06-10
0.9.82-rc.201Review452026-06-09
0.9.82-rc.200Review312026-06-09
0.9.82-rc.199Review312026-06-09
0.9.82-rc.198Review312026-06-09
0.9.82-rc.197Review312026-06-09
0.9.82-rc.196Review452026-06-09
0.9.82-rc.195Review312026-06-09
0.9.82-rc.194Review312026-06-09
0.9.82-rc.193Review312026-06-09
0.9.82-rc.192Review312026-06-08
0.9.82-rc.191Review452026-06-08
0.9.82-rc.190Review312026-06-08
0.9.82-rc.189Review452026-06-08
0.9.82-rc.188Review312026-06-08
0.9.82-rc.187Review312026-06-07
0.9.82-rc.186Review312026-06-07
0.9.82-rc.185Review312026-06-07
0.9.82-rc.184Review452026-06-07
0.9.82-rc.183Review312026-06-07
0.9.82-rc.182Review312026-06-07
0.9.82-rc.181Review312026-06-07
0.9.82-rc.180Review312026-06-07
0.9.82-rc.179Review312026-06-07
0.9.82-rc.178Review312026-06-07
0.9.82-rc.177Review312026-06-07
0.9.82-rc.176Review312026-06-07
0.9.82-rc.175Review312026-06-07
0.9.82-rc.174Review312026-06-07
0.9.82-rc.173Review312026-06-06
0.9.82-rc.172Review312026-06-06
0.9.82-rc.171Review312026-06-06
0.9.82-rc.170Review312026-06-06
0.9.82-rc.168Review312026-06-06
0.9.82-rc.169Review312026-06-06
0.9.82-rc.167Review312026-06-06
0.9.82-rc.165Review312026-06-06
0.9.82-rc.166Review312026-06-06
0.9.82-rc.163Review312026-06-05
0.9.82-rc.164Review312026-06-05
0.9.82-rc.161Review312026-06-05
0.9.82-rc.160Review312026-06-04
0.9.82-rc.159Review312026-06-04
0.9.82-rc.158Review452026-06-04
0.9.82-rc.157Review452026-06-04
0.9.82-rc.156Review312026-06-04
0.9.82-rc.155Review452026-06-04
0.9.82-rc.154Review312026-06-04
0.9.82-rc.153Review312026-06-04
0.9.82-rc.152Review312026-06-04
0.9.82-rc.151Review312026-06-04
0.9.82-rc.149Review312026-06-04
0.9.82-rc.147Review312026-06-04
0.9.82-rc.146Review312026-06-04
0.9.82-rc.145Review452026-06-04
0.9.82-rc.144Review312026-06-04
0.9.82-rc.143Low risk02026-06-03
0.9.82-rc.142Low risk02026-06-03
0.9.82-rc.140Low risk02026-06-02
0.9.82-rc.141Low risk02026-06-02
0.9.82-rc.138Low risk02026-06-02
0.9.82-rc.139Low risk02026-06-02
0.9.82-rc.137Low risk02026-06-01
0.9.82-rc.136Low risk02026-06-01
0.9.82-rc.135Low risk02026-06-01
0.9.82-rc.134Low risk02026-06-01
0.9.82-rc.133Low risk02026-06-01
0.9.82-rc.131Low risk02026-05-31
0.9.82-rc.132Low risk02026-05-31
0.9.82-rc.130Low risk02026-05-30
0.9.82-rc.129Low risk02026-05-30
0.9.82-rc.128Low risk02026-05-30
0.9.82-rc.127Low risk02026-05-30
0.9.82-rc.126Low risk02026-05-30
0.9.82-rc.125Low risk02026-05-30
0.9.82-rc.123Low risk02026-05-30
0.9.82-rc.124Low risk02026-05-30
0.9.82-rc.121Low risk02026-05-30
0.9.82-rc.122Low risk02026-05-30
0.9.82-rc.119Low risk02026-05-30
0.9.82-rc.120Low risk02026-05-30
0.9.82-rc.118Low risk02026-05-29
0.9.82-rc.116Low risk02026-05-29
0.9.82-rc.117Low risk02026-05-29
0.9.82-rc.115Low risk02026-05-29
0.9.82-rc.114Low risk02026-05-29
0.9.82-rc.112Low risk02026-05-29
0.9.82-rc.113Low risk02026-05-29
0.9.82-rc.110Low risk02026-05-29
0.9.82-rc.111Low risk02026-05-29

Block this in CI

PkgRadar gates @adhdev/daemon-core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @adhdev/[email protected]
Start free — 25 scans / moView full evidence