PkgRadar

npm · registry.npmjs.org

ss-component-new

Js Split Join Obfuscation: Array-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis.

Why PkgRadar flagged 1.3.542

SeveritySignalEvidence
highJs Split Join ObfuscationArray-of-single-tokens joined to form a string — used to obscure module names like require(["n","o","de",":","cr","yp","to"].join("")), defeating static require() analysis. · package/dist/index-DqXvOyIs.js
highNew Lifecycle Script Vs Previouspostinstall added in 1.3.542 vs 1.3.541: "node -e \"require('fs').cpSync('node_modules/three/examples/jsm/libs/draco', 'public/draco', {recursive:true, force:true})\"" · package.json
highInstall Lifecycle Remote Or Execpostinstall="node -e \"require('fs').cpSync('node_modules/three/examples/jsm/libs/draco', 'public/draco', {recursive:true, force:true})\"" · package.json

Scanned versions

VersionVerdictScoreScanned (UTC)
1.3.653Review202026-06-13
1.3.652Review122026-06-13
1.3.651Review122026-06-11
1.3.650Review202026-06-10
1.3.649Review202026-06-10
1.3.648Review122026-06-10
1.3.647Review202026-06-10
1.3.646Review202026-06-10
1.3.645Review202026-06-10
1.3.644Review202026-06-10
1.3.643Review202026-06-10
1.3.641Review122026-06-10
1.3.642Review122026-06-10
1.3.542High risk1152026-06-10
1.3.640Review122026-06-10
1.3.639Review122026-06-10
1.3.638Review202026-06-10
1.3.637Review122026-06-10
1.3.636Review122026-06-09
1.3.635Review202026-06-09
1.3.632Review122026-06-08
1.3.634Review122026-06-08
1.3.631Review122026-06-08
1.3.630Review202026-06-08
1.3.629Review122026-06-08
1.3.628Review122026-06-08
1.3.627Review122026-06-08
1.3.626Review122026-06-06
1.3.625Review122026-06-06
1.3.624Review122026-06-06
1.3.623Review122026-06-05
1.3.622Review122026-06-05
1.3.621Review122026-06-05
1.3.620Review202026-06-04
1.3.618Review122026-06-04
1.3.619Review122026-06-04
1.3.617Review122026-06-04
1.3.616Review122026-06-04
1.3.615Review122026-06-04
1.3.614Review122026-06-04
1.3.613Review122026-06-04
1.3.612Review122026-06-04
1.3.611Review202026-06-04
1.3.610Review202026-06-04
1.3.609Review122026-06-04
1.3.608Review122026-06-04
1.3.607Review122026-06-04
1.3.606Review122026-06-03
1.3.605Review122026-06-03
1.3.604Review122026-06-03
1.3.603Review122026-06-03
1.3.602Review122026-06-03
1.3.601Review122026-06-03
1.3.600Review122026-06-03
1.3.599Review122026-06-03
1.3.598Review122026-06-03
1.3.597Review122026-06-03
1.3.596Review122026-06-03
1.3.595Review122026-06-03
1.3.594Review122026-06-03
1.3.593Review122026-06-03
1.3.592Review122026-06-03
1.3.591Review122026-06-03
1.3.589Review122026-06-03
1.3.590Review122026-06-03
1.3.588Review122026-06-03
1.3.587Review122026-06-03
1.3.585Review202026-06-02
1.3.586Review202026-06-02
1.3.584Review122026-06-02
1.3.583Review122026-06-02
1.3.582Review202026-06-01
1.3.581Review122026-06-01
1.3.580Review122026-06-01
1.3.579Review122026-06-01
1.3.578Review122026-06-01
1.3.577Review122026-06-01
1.3.576Review122026-06-01
1.3.575Review122026-06-01
1.3.574Review122026-06-01
1.3.573Review122026-06-01
1.3.572Review122026-06-01
1.3.571Review122026-06-01
1.3.570Review122026-06-01
1.3.569Review122026-06-01
1.3.568Review122026-05-30
1.3.567Review122026-05-30
1.3.566Review122026-05-30
1.3.565Review122026-05-30
1.3.564Review122026-05-30
1.3.562Review122026-05-29
1.3.563Review122026-05-29
1.3.560Review182026-05-28
1.3.561Review182026-05-28
1.3.558Review182026-05-28
1.3.559Review182026-05-28
1.3.557Review62026-05-27
1.3.555Review62026-05-26
1.3.556Review62026-05-26
1.3.553Review62026-05-26
1.3.554Review62026-05-26
1.3.552Review102026-05-26
1.3.543Review252026-05-25
1.3.550Review202026-05-25
1.3.551Review202026-05-25
1.3.548Review202026-05-25
1.3.547Review202026-05-25
1.3.546Review202026-05-25
1.3.545Review202026-05-25
1.3.544Review202026-05-25
1.3.541Review202026-05-25
1.3.540Review202026-05-25
1.3.539Review202026-05-25

Block this in CI

PkgRadar gates ss-component-new (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence