PkgRadar

npm · registry.npmjs.org

@fecp/designer

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 5.5.71

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/lib/node_modules/element-plus/es/components/pagination/src/pagination.js
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/es/node_modules/element-plus/es/components/pagination/src/pagination.mjs
mediumLarge Javascript Payload2437477 bytes · package/lib/node_modules/vue3-sfc-loader/dist/vue3-sfc-loader.esm.js
mediumLarge Javascript Payload2437396 bytes · package/es/node_modules/vue3-sfc-loader/dist/vue3-sfc-loader.esm.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
5.5.111Low risk02026-06-12
5.5.110Low risk02026-06-12
5.5.109Low risk02026-06-12
5.5.108Low risk02026-06-12
5.5.106Low risk02026-06-10
5.5.105Low risk02026-06-09
5.5.104Low risk02026-06-09
5.5.103Low risk02026-06-09
5.5.102Low risk02026-06-09
5.5.101Low risk02026-06-08
5.5.100Low risk02026-06-08
5.5.99Low risk02026-06-05
5.5.98Low risk02026-06-05
5.5.96Low risk02026-06-05
5.5.97Low risk02026-06-05
5.5.95Low risk02026-06-05
5.5.93Low risk02026-06-04
5.5.94Low risk02026-06-04
5.5.92Low risk02026-06-04
5.5.91Low risk02026-06-04
5.5.90Low risk02026-06-04
5.5.89Low risk02026-06-04
5.5.88Low risk02026-06-04
5.5.86Low risk02026-06-02
5.5.87Low risk02026-06-02
5.5.84Low risk02026-06-02
5.5.83Low risk02026-06-02
5.5.81Low risk02026-06-02
5.5.82Low risk02026-06-02
5.5.80Low risk02026-06-01
5.5.79Low risk02026-06-01
5.5.78Low risk02026-05-29
5.5.77Low risk02026-05-29
5.5.76Low risk02026-05-29
5.5.75Low risk02026-05-29
5.5.74Low risk02026-05-29
5.5.73Low risk02026-05-29
5.5.71Review492026-05-28
5.5.72Review492026-05-28
5.5.69Review142026-05-28
5.5.67Review142026-05-27
5.5.68Review142026-05-27

Block this in CI

PkgRadar gates @fecp/designer (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @fecp/[email protected]