PkgRadar

npm · registry.npmjs.org

genesys-cloud-webrtc-sdk

Js Decode Then Exec: base64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern.

Why PkgRadar flagged 13.1.1-STREAM-1224.2

SeveritySignalEvidence
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/genesys-cloud-webrtc-sdk.bundle.min.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/v13.1.1/genesys-cloud-webrtc-sdk.bundle.min.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/v13/genesys-cloud-webrtc-sdk.bundle.min.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/genesys-cloud-webrtc-sdk.min.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/v13.1.1/genesys-cloud-webrtc-sdk.min.js
highJs Decode Then Execbase64 / atob / fromCharCode decode paired with eval / new Function in the same file — canonical obfuscated-loader pattern. · package/dist/v13/genesys-cloud-webrtc-sdk.min.js

Scanned versions

VersionVerdictScoreScanned (UTC)
14.0.1-release.1Low risk02026-06-12
14.0.0-develop.22Low risk02026-06-12
14.0.0Low risk02026-06-12
13.2.1-STREAM-456-2.29Low risk02026-06-10
13.2.1-STREAM-456-2.28Low risk02026-06-10
13.2.1-STREAM-456-2.27Low risk02026-06-10
13.2.1-STREAM-456-2.25Low risk02026-06-10
13.2.1-STREAM-456-2.26Low risk02026-06-10
13.2.1-STREAM-456-2.24Low risk02026-06-10
14.0.0-release.2Low risk02026-06-09
13.2.1-STREAM-456-2.23Low risk02026-06-09
13.2.1-STREAM-456-2.22Low risk02026-06-08
13.2.1-STREAM-456-2.21Low risk02026-06-08
13.2.1-STREAM-456-2.19Low risk02026-06-08
13.2.1-STREAM-456-2.20Low risk02026-06-08
14.0.0-release.1Low risk02026-06-08
13.2.1-STREAM-1600.2Low risk02026-06-06
13.2.1-release.1Low risk02026-06-02
13.2.0Low risk02026-06-01
13.1.1-STREAM-456-2.18Low risk02026-05-30
13.1.1-STREAM-456-2.17Low risk02026-05-29
13.1.1-STREAM-1224.2Review152026-05-29
13.1.1-portrait-with-demo-app.4Review152026-05-28
13.1.1-portrait-with-demo-app.5Review152026-05-28
13.1.1-portrait-with-demo-app.2Review332026-05-28
13.1.1-portrait-with-demo-app.3Review332026-05-28
13.1.1-STREAM-456-2.16Review182026-05-28
13.1.1-STREAM-1224.1Review182026-05-27
13.1.1-STREAM-456-2.15Review182026-05-27
13.1.1-STREAM-456-2.13Review182026-05-26
13.1.1-STREAM-456-2.14Review182026-05-26
13.1.2-TWO-portrait.1Review302026-05-25
13.1.67-TWO-portrait.2Review302026-05-25

Block this in CI

PkgRadar gates genesys-cloud-webrtc-sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]