PkgRadar

Package evidence

@lingcheng-tw/[email protected]

Js Obfuscator Packer

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
339
Versions published
13
First published
Apr 2026
Publisher
lawrence8358

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

See the evidence — freeAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@lingcheng-tw/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@lingcheng-tw/[email protected]"],"fail_on":"review"}'
Publisherlawrence8358
Artifact bytes65,477
Previous version0.0.165176
Published2026-07-04T10:40:39.912Z
SHA-256d9b4cdb19a920bb2f738c7011ed954fb44c85bdad9a665784249f5ebe8ebf0b3

Why flagged

What the scanner saw

Js Obfuscator Packer

18 candidate cluster(s) currently reference this release.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review
Last checked
reviewRisk
100Score
0.0.165246Version
Status history (1 event)
  1. new → available · risk review · score 100 · status changed

Related candidates

Linked campaigns and clusters

Repeated static TTPactive

Js Obfuscator Packer

28 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

24 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

44 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

35 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

35 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

35 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

36 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

21 members · evidence strength 82
Repeated static TTPcandidate

Js Obfuscator Packer

59 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

44 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

38 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

38 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

36 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

35 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

35 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

35 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

31 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

29 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

28 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

26 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

26 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

24 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

21 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

20 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

18 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

17 members · max score 62

Evidence

Static findings

21 static · 0 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45

Manifest

Package metadata

Dependencies5
  • @inquirer/prompts^7.8.0
  • adm-zip^0.5.16
  • chalk^5.5.0
  • commander^14.0.0
  • ora^8.2.0