npm · registry.npmjs.org

@torbeck/heap

Js Obfuscator Packer

Early detection

PkgRadar flagged this 10h before public disclosure

Detected 2026-07-12 · disclosed as MAL-2026-10405 on 2026-07-13

Why PkgRadar flagged 4.3.10

Severity	Signal	Evidence
high	Js Obfuscator Packer	—

Showing signal labels only. Sign in to view the exact matched indicators for each finding.

Scanned versions

Version	Verdict	Score	Scanned (UTC)
`4.3.10`	High risk	45	2026-07-14
`4.3.14`	Review	45	2026-07-12
`4.3.11`	Review	45	2026-07-12
`4.3.12`	Low risk	0	2026-07-12
`4.3.8`	Low risk	0	2026-06-22

Block this in CI

PkgRadar gates @torbeck/heap (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @torbeck/[email protected]