npm · registry.npmjs.org
@getflip/swirl-components-react
Js Decode Then Exec: base64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern.
Why PkgRadar flagged 0.496.0-beta-20260529075935
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Decode Then Exec | base64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/swirl-file-viewer-audio_7.entry.7824c86f.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.503.0 | Low risk | 0 | 2026-06-15 |
0.502.1 | Low risk | 0 | 2026-06-12 |
0.502.0 | Low risk | 0 | 2026-06-12 |
0.501.0 | Low risk | 0 | 2026-06-11 |
0.500.0 | Low risk | 0 | 2026-06-11 |
0.498.1 | Low risk | 0 | 2026-06-08 |
0.498.0 | Low risk | 0 | 2026-06-02 |
0.497.0 | Low risk | 0 | 2026-06-02 |
0.496.0 | Low risk | 0 | 2026-05-29 |
0.496.0-beta-20260529075935 | Review | 13 | 2026-05-29 |
0.495.0 | Review | 3 | 2026-05-26 |
0.494.0 | Review | 3 | 2026-05-25 |
0.494.0-beta-20260525162942 | Review | 3 | 2026-05-25 |
0.493.1 | Review | 10 | 2026-05-25 |
0.493.2 | Review | 10 | 2026-05-25 |
Block this in CI
pkgradar gate --ecosystem npm @getflip/[email protected]