PkgRadar

npm · registry.npmjs.org

@sergienko4/israeli-bank-scrapers

Js Decode Then Exec: base64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern.

Why PkgRadar flagged 8.3.2

SeveritySignalEvidence
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/lib/index.cjs
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/lib/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
8.3.2Review152026-05-28
8.4.0Review152026-05-28

Block this in CI

PkgRadar gates @sergienko4/israeli-bank-scrapers (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @sergienko4/[email protected]