PkgRadar

npm · registry.npmjs.org

tencentcloud-webar

Obfuscation Density: high encoded/escaped-token density

Why PkgRadar flagged 2.0.3-dev.10

SeveritySignalEvidence
mediumObfuscation Densityhigh encoded/escaped-token density · package/build-esm/28.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/build-esm/avatar.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/build-esm/avatar.worker.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/build-esm/hand3d.worker.js
mediumObfuscation Densityhigh encoded/escaped-token density · package/build-esm/sticker3d.worker.js
mediumLarge Javascript Payload2023261 bytes · package/build-umd/avatar.umd.js
mediumLarge Javascript Payload4005865 bytes · package/build-esm/index.js
mediumLarge Javascript Payload4263305 bytes · package/build-umd/webar-sdk.umd.js

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.30-0Low risk02026-06-08
2.0.3-12Low risk02026-06-08
2.0.3-dev.11Low risk02026-06-03
2.0.3-11Low risk02026-06-01
2.0.3-dev.10Review402026-05-28
2.0.3-10Review502026-05-27
2.0.3-dev.9Review402026-05-27

Block this in CI

PkgRadar gates tencentcloud-webar (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
tencentcloud-webar — npm security scan | PkgRadar