npm · registry.npmjs.org
@prose-reader/core
Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.
Why PkgRadar flagged 1.308.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Split Join Obfuscation | Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/index.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
1.313.0 | Low risk | 0 | 2026-06-01 |
1.312.0 | Low risk | 0 | 2026-06-01 |
1.311.0 | Low risk | 0 | 2026-05-31 |
1.310.0 | Low risk | 0 | 2026-05-31 |
1.309.0 | Low risk | 0 | 2026-05-31 |
1.308.0 | Review | 20 | 2026-05-31 |
1.307.0 | Review | 20 | 2026-05-30 |
1.306.0 | Review | 20 | 2026-05-30 |
1.305.0 | Review | 20 | 2026-05-30 |
1.303.0 | Low risk | 0 | 2026-05-24 |
1.304.0 | Low risk | 0 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @prose-reader/[email protected]