PkgRadar

npm · registry.npmjs.org

@secondlayer/cli

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 8.3.0

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/cli.js

Scanned versions

VersionVerdictScoreScanned (UTC)
8.10.2Low risk02026-06-13
8.10.1Low risk02026-06-12
8.10.0Low risk02026-06-12
8.8.0Low risk02026-06-12
8.9.0Low risk02026-06-12
8.7.1Low risk02026-06-11
8.7.0Low risk02026-06-11
8.6.4Low risk02026-06-10
8.6.3Low risk02026-06-07
8.6.2Low risk02026-06-07
8.6.1Low risk02026-06-06
8.6.0Low risk02026-06-06
8.5.2Low risk02026-06-06
8.5.0Low risk02026-06-04
8.5.1Low risk02026-06-04
8.4.2Low risk02026-06-04
8.4.3Low risk02026-06-04
8.4.1Low risk02026-06-02
8.4.0Low risk02026-06-02
8.3.0Review202026-05-30
8.2.0Review202026-05-30
8.0.0Review282026-05-29
8.1.0Review282026-05-29
7.0.1Review282026-05-29
7.0.0Review282026-05-29
6.0.0Review282026-05-29
5.10.0Review282026-05-29
5.10.1Review282026-05-29
5.6.6Review82026-05-27
5.6.4Review122026-05-24
5.6.5Review122026-05-24

Block this in CI

PkgRadar gates @secondlayer/cli (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @secondlayer/[email protected]
Start free — 25 scans / moView full evidence