PkgRadar

npm · registry.npmjs.org

@remnic/plugin-openclaw

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 9.3.637

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
9.3.637Review122026-06-15
9.3.636Review122026-06-15
9.3.635Review122026-06-14
9.3.634Review122026-06-14
9.3.632Review122026-06-12
9.3.633Review122026-06-12
9.3.631Review122026-06-12
9.3.630Review122026-06-12
9.3.629Review122026-06-12
1.0.33Review122026-06-12
1.0.34Review122026-06-12
1.0.35Review122026-06-12
9.3.628Review122026-06-12
9.3.624Review122026-06-09
9.3.623Review122026-06-09
9.3.622Review122026-06-08
9.3.621Review122026-06-08
9.3.620Review122026-06-08
9.3.619Review122026-06-08
9.3.618Review122026-06-08
9.3.617Review122026-06-08
9.3.616Review122026-06-08
9.3.615Review122026-06-08
9.3.614Review122026-06-07
9.3.613Review122026-06-05
9.3.612Review122026-06-05
9.3.611Review122026-06-04
9.3.609Review122026-06-04
9.3.610Review122026-06-04
9.3.606Review122026-06-04
9.3.607Review122026-06-04
9.3.602Review122026-06-04
9.3.603Review122026-06-04
9.3.595Review122026-06-04
9.3.594Review122026-06-04
9.3.593Review122026-06-04
9.3.592Review122026-06-04
9.3.591Review122026-06-04
9.3.590Review122026-06-04
9.3.589Review122026-06-04
9.3.588Review122026-06-04
9.3.587Review122026-06-04
9.3.586Review122026-06-04
9.3.585Review122026-06-04
9.3.584Review122026-06-04
9.3.583Review122026-06-04
9.3.582Review122026-06-04
9.3.581Review122026-06-04
9.3.580Review122026-06-04
9.3.579Review122026-06-04
9.3.578Review122026-06-03
9.3.577Review122026-06-03
9.3.576Review122026-06-03
9.3.575Review122026-06-03
9.3.573Review122026-06-03
9.3.571Review122026-06-03
9.3.572Review122026-06-03
9.3.570Review122026-06-03
9.3.569Review122026-06-03
9.3.568Review122026-06-03
9.3.567Review122026-06-03
9.3.566Review122026-06-03
9.3.565Review122026-06-03
9.3.564Review122026-06-03
9.3.563Review122026-06-03
9.3.562Review122026-06-03
9.3.561Review122026-06-03
9.3.560Review122026-06-03
9.3.559Review122026-06-03
9.3.558Review122026-06-03
9.3.557Review122026-06-03
9.3.556Review122026-06-03
9.3.555Review122026-06-03
9.3.554Review122026-06-03
9.3.553Review122026-06-03
9.3.551Review122026-06-03
9.3.552Review122026-06-03
9.3.550Review122026-06-03
9.3.549Review122026-06-03
9.3.548Review122026-06-02
9.3.547Review122026-06-02
9.3.546Review122026-06-02
9.3.544Review122026-06-02
9.3.545Review122026-06-02
9.3.543Review122026-06-02
9.3.541Review122026-06-02
9.3.542Review122026-06-02
9.3.529Review122026-06-02
9.3.528Review122026-06-02
9.3.524Review122026-06-02
9.3.523Review122026-06-02
9.3.522Review122026-06-02
9.3.521Review122026-06-02
9.3.520Review122026-06-01
9.3.518Review122026-06-01
9.3.519Review122026-06-01
9.3.515Review122026-06-01
1.0.54Review152026-06-01
1.0.53Review152026-05-31
1.0.52Review152026-05-31
1.0.51Review152026-05-31
1.0.50Review152026-05-31
1.0.48Review152026-05-30
1.0.49Review152026-05-30

Block this in CI

PkgRadar gates @remnic/plugin-openclaw (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @remnic/[email protected]
Start free — 25 scans / moView full evidence