npm · registry.npmjs.org
@rootauth/hosted-web
Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.
Why PkgRadar flagged 2.1.0
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Split Join Obfuscation | Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/index-losf1jem.cjs |
| medium | Obfuscation Density | high encoded/escaped-token density · package/dist/useThemePage-BUqg7XLX.cjs |
| medium | Obfuscation Density | high encoded/escaped-token density · package/dist/useThemePage-Cf1GlJQj.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
2.1.2-beta.8 | Low risk | 0 | 2026-06-08 |
2.1.2-beta.7 | Low risk | 0 | 2026-06-08 |
2.1.2-beta.6 | Low risk | 0 | 2026-06-08 |
2.1.2-beta.5 | Low risk | 0 | 2026-06-08 |
2.1.2-beta.4 | Low risk | 0 | 2026-06-05 |
2.1.2-beta.3 | Low risk | 0 | 2026-06-05 |
2.1.2-beta.1 | Low risk | 0 | 2026-06-04 |
2.1.2-beta.2 | Low risk | 0 | 2026-06-04 |
2.1.2-beta.0 | Low risk | 0 | 2026-06-03 |
2.1.2 | Low risk | 0 | 2026-06-02 |
2.1.0-beta.4 | Low risk | 0 | 2026-06-01 |
2.1.0-beta.3 | Low risk | 0 | 2026-06-01 |
2.1.0-beta.2 | Low risk | 0 | 2026-06-01 |
2.1.0-beta.1 | Low risk | 0 | 2026-06-01 |
2.1.0 | Review | 44 | 2026-05-28 |
2.1.0-beta.0 | Review | 64 | 2026-05-28 |
1.0.32-beta.19 | Review | 24 | 2026-05-27 |
1.0.32-beta.20 | Review | 16 | 2026-05-27 |
1.0.32-beta.13 | Review | 24 | 2026-05-26 |
1.0.33-beta.0 | Review | 24 | 2026-05-26 |
1.0.32-beta.11 | Review | 24 | 2026-05-25 |
1.0.32-beta.9 | Low risk | 0 | 2026-05-24 |
1.0.32-beta.10 | Low risk | 0 | 2026-05-24 |
Block this in CI
pkgradar gate --ecosystem npm @rootauth/[email protected]