PkgRadar

npm · registry.npmjs.org

cc-ding

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 0.0.5

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/bin/cc-ding.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/src/biz/commands.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/dist/src/biz/cron.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.5Low risk02026-06-17
1.0.6Low risk02026-06-17
1.0.4Low risk02026-06-15
1.0.3Low risk02026-06-15
1.0.2Low risk02026-06-14
1.0.1Low risk02026-06-13
1.0.0Low risk02026-06-13
0.4.1Low risk02026-06-13
0.4.0Low risk02026-06-12
0.3.1Low risk02026-06-11
0.3.0Low risk02026-06-07
0.3.0-beta.1Low risk02026-06-07
0.3.0-betaLow risk02026-06-06
0.2.0Low risk02026-06-06
0.1.0Low risk02026-05-30
0.0.5Review362026-05-26
0.0.4Review362026-05-25
0.0.3Review362026-05-25
0.0.2Review242026-05-25

Block this in CI

PkgRadar gates cc-ding (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]