PkgRadar

Package evidence

@univerjs-pro/[email protected]

Js Obfuscator Packer, Obfuscation Density

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Versions published
33
First published
May 2026
Publisher
jikkai

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["@univerjs-pro/[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["@univerjs-pro/[email protected]"],"fail_on":"review"}'
Publisherjikkai
Artifact bytes350,671
Previous version1.0.0-insiders.20260710-062044e
Published2026-07-10T11:51:37.158Z
SHA-256d4a289325cc8d7819754f89178d4b8d55e3c7e54600ea48ecf4add6ce45886ae

Why flagged

What the scanner saw

Js Obfuscator Packer

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review
Last checked
reviewRisk
50Score
1.0.0-insiders.20260710-c16bf68Version
Status history (1 event)
  1. newavailable · risk review · score 50 · status changed

Evidence

Static findings

81 static · 0 from release diff · showing high-signal first.

Showing 30 of 80 findings.

SeverityKindPathDetailPoints
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
Show all 81 findings (low-signal and informational)

Showing 60 of 81 findings.

SeverityKindPathDetailPoints
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45
highJs Obfuscator Packermanifest45

Manifest

Package metadata

Dependencies10
  • @univerjs-pro/docs-column1.0.0-insiders.20260710-c16bf68
  • @univerjs-pro/docs-table1.0.0-insiders.20260710-c16bf68
  • @univerjs-pro/license1.0.0-insiders.20260710-c16bf68
  • @univerjs/core1.0.0-insiders.20260710-c16bf68
  • @univerjs/design1.0.0-insiders.20260710-c16bf68
  • @univerjs/docs1.0.0-insiders.20260710-c16bf68
  • @univerjs/docs-ui1.0.0-insiders.20260710-c16bf68
  • @univerjs/engine-render1.0.0-insiders.20260710-c16bf68
  • @univerjs/icons1.20.0
  • @univerjs/ui1.0.0-insiders.20260710-c16bf68