npm · registry.npmjs.org
@takeoff-ui/core
Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.
Why PkgRadar flagged 0.11.5
| Severity | Signal | Evidence |
|---|---|---|
| high | Js Split Join Obfuscation | Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/core/p-3fdab647.entry.js |
| high | Js Split Join Obfuscation | Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/components/p-DqEwPyAi.js |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
0.11.5 | Review | 25 | 2026-06-08 |
0.11.6 | Review | 25 | 2026-06-08 |
0.11.7 | Review | 25 | 2026-06-08 |
0.11.8 | Review | 25 | 2026-06-08 |
Block this in CI
pkgradar gate --ecosystem npm @takeoff-ui/[email protected]