PkgRadar

npm · registry.npmjs.org

ll-plus

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 2.20.19

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/lib/node_modules/.pnpm/[email protected]_@[email protected]/node_modules/codemirror-ssr/mode/markdown/markdown.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/es/node_modules/.pnpm/[email protected]_@[email protected]/node_modules/codemirror-ssr/mode/markdown/markdown.mjs
mediumLarge Javascript Payload7826140 bytes · package/index.full.js
mediumLarge Javascript Payload3791240 bytes · package/index.full.min.js
mediumLarge Javascript Payload3662735 bytes · package/index.full.min.mjs
mediumLarge Javascript Payload7226919 bytes · package/index.full.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
2.21.6Low risk02026-06-17
2.21.7Low risk02026-06-17
2.21.5Low risk02026-06-16
2.21.4Low risk02026-06-15
2.21.3Low risk02026-06-12
2.21.2Low risk02026-06-11
2.21.1Low risk02026-06-11
2.20.30Low risk02026-06-09
2.20.29Low risk02026-06-08
2.20.27Low risk02026-06-08
2.20.28Low risk02026-06-08
2.20.26Low risk02026-06-04
2.20.25Low risk02026-06-04
2.20.24Low risk02026-06-03
2.20.23Low risk02026-06-02
2.20.22Low risk02026-06-01
2.20.21Low risk02026-05-29
2.20.19Review322026-05-28
2.20.20Review322026-05-28
2.20.18Review322026-05-27
2.20.16Review322026-05-26
2.20.17Review322026-05-26

Block this in CI

PkgRadar gates ll-plus (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]