PkgRadar

npm · registry.npmjs.org

cloud-web-corejs

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 1.0.54-dev.685

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/src/components/table/plugins/extend-cell-area/vxe-table-extend-cell-area.es6.min.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.54-dev.685Review202026-06-16
1.0.240Review202026-06-16
1.0.54-dev.684Review202026-06-14
1.0.54-dev.683Review202026-06-14
1.0.54-dev.682Review202026-06-13
1.0.54-dev.680Review202026-06-12
1.0.54-dev.681Review202026-06-12
1.0.54-dev.679Review202026-06-12
1.0.54-dev.678Review202026-06-12
1.0.239Review202026-06-12
1.0.54-dev.677Review202026-06-12
1.0.54-dev.676Review202026-06-10
1.0.238Review202026-06-10
1.0.54-dev.675Review202026-06-09
1.0.237Review202026-06-09
1.0.54-dev.674Review202026-06-09
1.0.236Review202026-06-06
1.0.54-dev.673Review202026-06-06
1.0.54-dev.672Review202026-06-06
1.0.54-dev.671Review202026-06-06
1.0.235Review202026-06-05
1.0.54-dev.669Review202026-06-04
1.0.54-dev.668Review202026-06-04
1.0.54-dev.667Review202026-06-04
1.0.54-dev.666Review202026-06-03
1.0.54-dev.665Review202026-06-03
1.0.54-dev.664Review202026-06-03
1.0.54-dev.663Review202026-06-03
1.0.54-dev.662Review202026-06-03
1.0.54-dev.661Review202026-06-03
1.0.54-dev.660Review202026-06-03
1.0.54-dev.659Review202026-06-03
1.0.54-dev.658Review202026-06-02
1.0.54-dev.657Review202026-06-02
1.0.54-dev.656Review202026-06-01
1.0.54-dev.654Review202026-06-01
1.0.54-dev.655Review202026-06-01
1.0.54-dev.653Review202026-06-01
1.0.54-dev.652Review452026-05-28
1.0.234Review452026-05-28
1.0.54-dev.651Review452026-05-28
1.0.54-dev.650Review252026-05-27
1.0.54-dev.649Review252026-05-27
1.0.54-dev.647Review252026-05-26
1.0.54-dev.648Review252026-05-26
1.0.54-dev.645Review252026-05-26
1.0.233Review252026-05-26
1.0.54-dev.644Review252026-05-26
1.0.54-dev.643Review502026-05-25
1.0.232Review502026-05-25
1.0.231Low risk02026-05-25
1.0.54-dev.642Low risk02026-05-25
1.0.230Low risk02026-05-25
1.0.54-dev.641Low risk02026-05-25

Block this in CI

PkgRadar gates cloud-web-corejs (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence