PkgRadar

npm · registry.npmjs.org

@incodetech/web

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 0.0.0-dev-20260613-66946835

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/lottie_light-BG-RL2Iu.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.0-dev-20260613-66946835Review122026-06-13
0.0.0-dev-20260612-0e76faafReview122026-06-12
0.0.0-dev-20260612-10760bb1Review122026-06-12
0.0.0-dev-20260612-f9815010Review122026-06-12
0.0.0-dev-20260612-6b4f7f65Review122026-06-12
0.0.0-dev-20260611-dc1ec43bReview122026-06-11
0.0.0-dev-20260611-09d74a69Review122026-06-11
0.0.0-dev-20260611-0919e3b5Review122026-06-11
2.1.0-rc.1Review122026-06-11
0.0.0-dev-20260611-98c2faa6Review122026-06-11
0.0.0-dev-20260611-3dbdc7fdReview122026-06-11
0.0.0-dev-20260611-dd69339bReview122026-06-11
2.1.0-rc.0Review122026-06-10
0.0.0-dev-20260610-866621c5Review122026-06-10
0.0.0-dev-20260610-5aedda37Review122026-06-10
0.0.0-dev-20260610-cb59ad8bReview122026-06-10
0.0.0-dev-20260610-d8176e6aReview122026-06-10
0.0.0-dev-20260610-3e0cbc39Review122026-06-10
0.0.0-dev-20260610-f906b117Review122026-06-10
0.0.0-dev-20260610-1fe09049Review122026-06-10
0.0.0-dev-20260610-999fd965Review122026-06-10
0.0.0-dev-20260610-e5b4c4d5Review122026-06-10
0.0.0-dev-20260610-8787196eReview122026-06-10
0.0.0-dev-20260610-60785e38Review122026-06-10
2.0.1Low risk02026-06-10
0.0.0-dev-20260609-d8422416Review122026-06-09
0.0.0-dev-20260609-c65d205cReview122026-06-09
0.0.0-dev-20260609-155c16bfReview122026-06-09
0.0.0-dev-20260609-6cfe5bbeReview122026-06-09
0.0.0-dev-20260609-11ba3e8aReview122026-06-09
0.0.0-dev-20260608-fe5ac64fReview122026-06-08
0.0.0-dev-20260608-c8c427caReview122026-06-08
0.0.0-dev-20260605-51c15373Review122026-06-05
0.0.0-dev-20260605-65da28c6Review122026-06-05
0.0.0-dev-20260605-8c0b1a53Review122026-06-05
0.0.0-dev-20260605-bd2483d8Review122026-06-05
0.0.0-dev-20260605-2716caa2Review122026-06-05
0.0.0-dev-20260605-d822e497Review122026-06-05
0.0.0-dev-20260605-73760ce4Review122026-06-05
0.0.0-dev-20260605-ef19b3d6Review122026-06-05
0.0.0-dev-20260604-f34187f1Review122026-06-04
0.0.0-dev-20260604-659ac57fReview122026-06-04
0.0.0-dev-20260604-edfbb573Review122026-06-04
0.0.0-dev-20260604-0577f678Review122026-06-04
0.0.0-dev-20260603-50bbeb7aReview122026-06-03
0.0.0-dev-20260603-573a942aReview122026-06-03
0.0.0-dev-20260603-88f57200Review122026-06-03
0.0.0-dev-20260603-99aac394Review122026-06-03
0.0.0-dev-20260602-5f4d4b36Review122026-06-02
0.0.0-dev-20260602-a6391d74Review122026-06-02
0.0.0-dev-20260602-ff711e15Review122026-06-02
0.0.0-dev-20260601-9fa409c7Review122026-06-01
0.0.0-dev-20260601-f07567f1Review122026-06-01
0.0.0-dev-20260601-f2520217Review122026-06-01
0.0.0-dev-20260529-98a68b6cReview122026-05-29
0.0.0-dev-20260529-2e406f03Review122026-05-29
0.0.0-dev-20260529-bbc34b14Review122026-05-29
0.0.0-dev-20260529-318988c7Review122026-05-29
0.0.0-dev-20260529-ab174ea7Review122026-05-29
0.0.0-dev-20260529-392f1cccReview122026-05-29
0.0.0-dev-20260528-e63e949bReview122026-05-29
0.0.0-dev-20260528-ef6f8814Review122026-05-28
0.0.0-dev-20260528-7fc5569fReview122026-05-28
0.0.0-dev-20260528-ea3f2abeReview122026-05-28
0.0.0-dev-20260527-1113f768Review12026-05-28
0.0.0-dev-20260527-f70fcb48Review12026-05-28
0.0.0-dev-20260527-927030e4Review12026-05-27
0.0.0-dev-20260527-56bd80a4Review12026-05-27
0.0.0-dev-20260526-ff50bd63Review12026-05-26
0.0.0-dev-20260526-d2037557Review12026-05-26
0.0.0-dev-20260525-09ff3879Review52026-05-25
0.0.0-dev-20260522-31c2a308Review52026-05-25
0.0.0-dev-20260525-ce9a6d54Review52026-05-25

Block this in CI

PkgRadar gates @incodetech/web (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @incodetech/[email protected]