PkgRadar

npm · registry.npmjs.org

@pipelab/plugin-discord

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 1.0.0-beta.12

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/prompt-BM3mER_1.cjs
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/prompt-CrnAvfYP.mjs
mediumLarge Javascript Payload5344213 bytes · package/dist/index.cjs
mediumLarge Javascript Payload5330390 bytes · package/dist/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.0.1Low risk02026-06-17
1.0.0-beta.19Low risk02026-06-17
1.0.0-beta.18Low risk02026-06-05
1.0.0-beta.17Low risk02026-06-05
1.0.0-beta.16Low risk02026-06-05
1.0.0-beta.15Low risk02026-06-05
1.0.0-beta.14Low risk02026-05-29
1.0.0-beta.12Review132026-05-27
1.0.0-beta.13Review132026-05-27

Block this in CI

PkgRadar gates @pipelab/plugin-discord (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @pipelab/[email protected]