npm · registry.npmjs.org
@epambot/epam-videoportal-client
Js Decode Then Exec: base64 / atob / fromCharCode decode adjacent to eval / new Function — canonical obfuscated-loader pattern.
Why PkgRadar flagged 3.1.10
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Decode Then Exec | base64 / atob / fromCharCode decode adjacent to eval / new Function — canonical obfuscated-loader pattern. · package/autoconfig.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
3.1.10 | High risk | 50 | 2026-06-03 |
3.1.18 | Review | 5 | 2026-06-02 |
3.1.17 | Review | 3 | 2026-06-02 |
3.1.16 | Review | 5 | 2026-06-01 |
3.1.14 | Review | 17 | 2026-05-30 |
3.1.8 | Review | 5 | 2026-05-30 |
3.1.15 | Review | 17 | 2026-05-29 |
3.1.6 | Review | 5 | 2026-05-29 |
Related campaigns
- js_decode_then_exec:base64 / atob / fromcharcode decode adjacent to eval / new function — canonical obfuscated-loader pattern. — 29 releases, max score 272
- js_decode_then_exec:base64 / atob / fromcharcode decode paired with eval / new function in the same file — canonical obfuscated-loader pattern. — 32 releases, max score 152
Block this in CI
pkgradar gate --ecosystem npm @epambot/[email protected]