PkgRadar

npm · registry.npmjs.org

cross-seed

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 7.0.0-18

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/node_modules/zod/v3/types.cjs
mediumRemote Payloadmatched "cUrl " · package/node_modules/@cross-seed/shared/dist/constants.js
mediumRemote Payloadmatched "cUrl " · package/dist/clients/Deluge.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/node_modules/zod/v3/types.js
mediumRemote Payloadmatched "cUrl " · package/dist/webui/assets/use-settings-form-submit-DyXR3etD.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/node_modules/zod/src/v3/types.ts

Scanned versions

VersionVerdictScoreScanned (UTC)
7.0.0-22Low risk02026-06-01
7.0.0-20Low risk02026-05-29
7.0.0-21Low risk02026-05-29
7.0.0-19Low risk02026-05-29
7.0.0-18Review362026-05-24
7.0.0-17Review362026-05-24
7.0.0-15Review362026-05-24
7.0.0-16Review362026-05-24

Related campaigns

Block this in CI

PkgRadar gates cross-seed (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]