PkgRadar

Package evidence

[email protected]

Js Obfuscator Packer

Trust signals

Why this verdict

PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.

Weekly downloads
4,579Niche · −30% score
Versions published
121Mature · −50% score
First published
Jul 2025
Publisher
GitHub ActionsTrusted automation · −70% score

Effective trust discount applied: −70% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.

Recommended action

Review before promoting

Mixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.

See the evidence — freeAdd to CI gate
Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"review"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"review"}'
PublisherGitHub Actions
Artifact bytes493,421
Previous version2.9.0
Published2026-07-06T00:39:07.152Z
SHA-2560b7ebb06f1dcbb15bb64639eb36d1118836beb743f0bccfd193f095ebdae0766

Why flagged

What the scanner saw

Js Obfuscator Packer

20 candidate cluster(s) currently reference this release.

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

review
Last checked
reviewRisk
15Score
2.9.1Version
Status history (2 events)
  1. available → available · risk review · score 15 · status available -> available, risk review -> review, score 30 -> 15
  2. new → available · risk review · score 30 · status changed

Related candidates

Linked campaigns and clusters

Repeated static TTPactive

Js Obfuscator Packer

12 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

13 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

19 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

25 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

20 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

26 members · evidence strength 82
Repeated static TTPactive

Js Obfuscator Packer

18 members · evidence strength 77
Repeated static TTPactive

Js Obfuscator Packer

14 members · evidence strength 77
Repeated static TTPcandidate

Js Obfuscator Packer

26 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

25 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

24 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

20 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

19 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

18 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

18 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

18 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

16 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

16 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

14 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

14 members · max score 38
Repeated static TTPcandidate

Js Obfuscator Packer

14 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

13 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

12 members · max score 62
Repeated static TTPcandidate

Js Obfuscator Packer

12 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

12 members · max score 32
Repeated static TTPcandidate

Js Obfuscator Packer

11 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

10 members · max score 37
Repeated static TTPcandidate

Js Obfuscator Packer

10 members · max score 21

Evidence

Static findings

79 static · 0 from release diff · showing high-signal first.

Showing 30 of 79 findings.

SeverityKindPathDetailPoints
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45
highJs Obfuscator Packermanifest—45

Manifest

Package metadata

Dependencies30
  • @opensearch-project/opensearch^2.13.0
  • async^3.2.5
  • axios^1.8.2
  • body-parser^1.20.2
  • compression^1.7.4
  • cookie-parser^1.4.6
  • cors^2.8.5
  • dotenv^17.2.0
  • express^5.2.1
  • express-basic-auth^1.2.1
  • express-throttle^2.0.0
  • form-data^4.0.2
  • helmet^8.1.0
  • http-errors^2.0.0
  • jsonwebtoken^9.0.1
  • morgan^1.10.0
  • multer^2.0.2
  • node-cache^5.1.2
  • object-hash^1.1.8
  • prom-client^15.1.3
  • pseudomap^1.0.2
  • r7insight_node^3.3.1
  • redis^5.10.0
  • redis-rate-limiter^1.2.0
  • step^1.0.0
  • underscore^1.9.1
  • winston^3.2.1
  • winston-transport4.3.0
  • yallist^3.0.2
  • yaml^2.8.0