PkgRadar

npm · registry.npmjs.org

@elementor/twing

Js Decode Then Exec: base64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern.

Why PkgRadar flagged 4.2.0-903

SeveritySignalEvidence
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/index.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/index.mjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/index.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
4.2.0-931Low risk02026-06-11
4.2.0-930Low risk02026-06-11
4.2.0-929Low risk02026-06-11
4.2.0-928Low risk02026-06-10
4.0.9Low risk02026-06-10
4.2.0-927Low risk02026-06-10
4.2.0-926Low risk02026-06-09
4.2.0-925Low risk02026-06-08
4.2.0-924Low risk02026-06-08
4.2.0-923Low risk02026-06-07
4.2.0-922Low risk02026-06-05
4.2.0-921Low risk02026-06-04
4.2.0-920Low risk02026-06-04
4.2.0-919Low risk02026-06-03
4.2.0-918Low risk02026-06-03
4.2.0-917Low risk02026-06-03
4.2.0-916Low risk02026-06-03
4.2.0-915Low risk02026-06-03
4.2.0-913Low risk02026-06-02
4.2.0-914Low risk02026-06-02
4.2.0-912Low risk02026-06-01
4.2.0-911Low risk02026-06-01
4.2.0-910Low risk02026-06-01
4.2.0-909Low risk02026-06-01
4.2.0-908Low risk02026-05-31
4.2.0-907Low risk02026-05-31
4.2.0-906Low risk02026-05-31
4.2.0-905Low risk02026-05-31
4.2.0-904Low risk02026-05-31
4.2.0-903Review372026-05-28
4.2.0-902Review372026-05-28
4.2.0-900Review122026-05-27
4.2.0-901Review122026-05-27
4.2.0-898Review122026-05-26
4.2.0-897Review122026-05-25
4.2.0-896Review242026-05-25
4.2.0-894Review242026-05-25
4.2.0-895Review242026-05-25

Block this in CI

PkgRadar gates @elementor/twing (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @elementor/[email protected]
Start free — 25 scans / moView full evidence