PkgRadar

npm · registry.npmjs.org

@sctg/cline-shared

Js Decode Then Exec: base64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern.

Why PkgRadar flagged 3.86.0-beta.20260529093332

SeveritySignalEvidence
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/index.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/remote-config/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
3.89.2-beta.20260613182604Low risk02026-06-13
3.89.2-beta.20260613180017Low risk02026-06-13
3.89.2-beta.20260613083004Low risk02026-06-13
3.89.2-beta.20260612181745Low risk02026-06-12
3.89.2-beta.20260612145017Low risk02026-06-12
3.89.2-beta.20260612140515Low risk02026-06-12
3.89.1-beta.20260612120107Low risk02026-06-12
3.89.1-beta.20260612105421Low risk02026-06-12
3.89.1-beta.20260611165626Low risk02026-06-11
3.89.1-beta.20260611131749Low risk02026-06-11
3.89.1-beta.20260611123505Low risk02026-06-11
3.89.0-beta.20260611074114Low risk02026-06-11
3.89.0-beta.20260611071233Low risk02026-06-11
3.89.0-beta.20260611061221Low risk02026-06-11
3.89.0-beta.20260611054114Low risk02026-06-11
3.89.0-beta.20260610202522Low risk02026-06-10
3.89.0-beta.20260610194701Low risk02026-06-10
3.89.0-beta.20260610191507Low risk02026-06-10
3.89.0-beta.20260610135422Low risk02026-06-10
3.89.0-beta.20260610081955Low risk02026-06-10
3.89.0-beta.20260610102107Low risk02026-06-10
3.88.1-beta.20260610073946Low risk02026-06-10
3.88.1-beta.20260610062914Low risk02026-06-10
3.88.1-beta.20260609194738Low risk02026-06-10
3.88.1-beta.20260609193634Low risk02026-06-09
3.88.1-beta.20260609193013Low risk02026-06-09
3.88.1-beta.20260609185740Low risk02026-06-09
3.88.1-beta.20260609134344Low risk02026-06-09
3.88.1-beta.20260608153646Low risk02026-06-08
3.88.1-beta.20260608123403Low risk02026-06-08
3.88.1-beta.20260608122621Low risk02026-06-08
3.88.1-beta.20260608121900Low risk02026-06-08
3.88.1-beta.20260608061251Low risk02026-06-08
3.88.1-beta.20260607190154Low risk02026-06-07
3.88.1-beta.20260607164352Low risk02026-06-07
3.88.1-beta.20260607072940Low risk02026-06-07
3.88.0-beta.20260606191201Low risk02026-06-06
3.88.0-beta.20260606083418Low risk02026-06-06
3.88.0-beta.20260605220240Low risk02026-06-05
3.87.0-beta.20260605215747Low risk02026-06-05
3.87.0-beta.20260605211854Low risk02026-06-05
3.87.0-beta.20260605200051Low risk02026-06-05
3.87.0-beta.20260605192025Low risk02026-06-05
3.87.0-beta.20260605155856Low risk02026-06-05
3.87.0-beta.20260605151436Low risk02026-06-05
3.87.0-beta.20260605134923Low risk02026-06-05
3.87.0-beta.20260605122745Low risk02026-06-05
3.87.0-beta.20260605123402Low risk02026-06-05
3.87.0-beta.20260605115041Low risk02026-06-05
3.87.0-beta.20260605081206Low risk02026-06-05
3.87.0-beta.20260604115251Low risk02026-06-04
3.87.0-beta.20260604084927Low risk02026-06-04
3.87.0-beta.20260604082213Low risk02026-06-04
3.87.0-beta.20260604070745Low risk02026-06-04
3.87.0-beta.20260604053300Low risk02026-06-04
3.87.0-beta.20260603184325Low risk02026-06-03
3.87.0-beta.20260603161445Low risk02026-06-03
3.87.0-beta.20260603163105Low risk02026-06-03
3.87.0-beta.20260603084531Low risk02026-06-03
3.87.0-beta.20260603064918Low risk02026-06-03
3.86.2-beta.20260602174530Low risk02026-06-02
3.86.2-beta.20260602182709Low risk02026-06-02
3.86.2-beta.20260602140201Low risk02026-06-02
3.86.2-beta.20260602121048Low risk02026-06-02
3.86.2-beta.20260602124229Low risk02026-06-02
3.86.2-beta.20260602093642Low risk02026-06-02
3.86.2-beta.20260602101221Low risk02026-06-02
3.86.2-beta.20260602083028Low risk02026-06-02
3.86.1-beta.20260601190234Low risk02026-06-01
3.86.1-beta.20260601192122Low risk02026-06-01
3.86.1-beta.20260601144747Low risk02026-06-01
3.86.1-beta.20260601130724Low risk02026-06-01
3.86.1-beta.20260601131045Low risk02026-06-01
3.86.1-beta.20260601102745Low risk02026-06-01
3.86.1-beta.20260601110335Low risk02026-06-01
3.86.1-beta.20260601083953Low risk02026-06-01
3.86.1-beta.20260601084703Low risk02026-06-01
3.86.0-beta.20260601081816Low risk02026-06-01
3.86.0-beta.20260530062515Low risk02026-05-30
3.86.0-beta.20260529165713Low risk02026-05-29
3.86.0-beta.20260529144205Low risk02026-05-29
3.86.0-beta.20260529151407Low risk02026-05-29
3.86.0-beta.20260529115807Low risk02026-05-29
3.86.0-beta.20260529121901Low risk02026-05-29
3.86.0-beta.20260529093332Review152026-05-29
3.86.0-beta.20260529095523Review152026-05-29
3.86.0-beta.20260529084211Review152026-05-29
3.85.0-beta.20260529075443Review152026-05-29
3.85.0-beta.20260528124034Review152026-05-28
3.85.0-beta.20260528081758Review152026-05-28
3.85.0-beta.20260528083617Review152026-05-28
3.85.0-beta.20260526150719Review32026-05-26
3.85.0-beta.20260526174615Review32026-05-26
3.85.0-beta.20260526080712Review32026-05-26
3.85.0-beta.20260525194027Review32026-05-25
3.85.0-beta.20260525190019Review32026-05-25
3.84.0-beta.20260525160333Review32026-05-25
3.84.0-beta.20260525154051Review32026-05-25
3.84.0-beta.20260525134416Review32026-05-25
3.84.0-beta.20260525140028Review32026-05-25
3.84.0-beta.20260524151508Review502026-05-24
3.84.0-beta.20260524150208Review502026-05-24
3.84.0-beta.20260524133242Review502026-05-24
3.84.0-beta.20260524130712Review502026-05-24

Block this in CI

PkgRadar gates @sctg/cline-shared (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @sctg/[email protected]
Start free — 25 scans / moView full evidence