Package evidence
@archbee/[email protected]
Known Indicator Filename: package/preview/node_modules/next/dist/compiled/babel/bundle.js
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@archbee/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@archbee/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Known Indicator Filename: package/preview/node_modules/next/dist/compiled/babel/bundle.js
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 578 · status changed
Evidence
Static findings
161 static · 0 from release diff · showing high-signal first.
Showing 30 of 32 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Known Indicator Filename | package/preview/node_modules/next/dist/compiled/babel/bundle.js | package/preview/node_modules/next/dist/compiled/babel/bundle.js | 45 |
| medium | Remote Payload | package/preview/.next/static/chunks/2141.43dbbd0b7f9c6b79.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/2141.43dbbd0b7f9c6b79.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/server/chunks/2887.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/server/chunks/5200.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/628b2004-fd4a369d86bb0d1e.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/server/chunks/6378.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/782.eabb09377ff3e52e.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/7bbfdf2e-e232a3cce0cc8a20.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/8831.140959f5d0b70fdf.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page-experimental.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page-turbo-experimental.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page-turbo.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/bd6f7ee8.67a66d50fb0b7501.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/preview/node_modules/next/dist/client/components/segment-cache/cache.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/preview/.next/static/chunks/e02586cf.2d95d2144e870cd9.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/e06b5b90.b7fb8cffe8a0bb83.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/ec728a3c-269402077eb4e8da.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/comment-json/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/conf/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/json5/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/jsonwebtoken/index.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/src/index.js | matched "curl " | 12 |
| medium | Remote Payload | package/preview/node_modules/next/dist/next-devtools/server/launch-editor.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/next-devtools/server/launch-editor.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/preview/node_modules/next/dist/compiled/@edge-runtime/primitives/load.js | matched "cURL " | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/@modelcontextprotocol/sdk/server/mcp.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/preview/.next/static/chunks/app/[[...slug]]/page-8a0b382432eaa8cb.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/app/[[...slug]]/page-8a0b382432eaa8cb.js | high encoded/escaped-token density | 12 |
Show all 161 findings (low-signal and informational)
Showing 60 of 161 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Known Indicator Filename | package/preview/node_modules/next/dist/compiled/babel/bundle.js | package/preview/node_modules/next/dist/compiled/babel/bundle.js | 45 |
| medium | Remote Payload | package/preview/.next/static/chunks/2141.43dbbd0b7f9c6b79.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/2141.43dbbd0b7f9c6b79.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/server/chunks/2887.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/server/chunks/5200.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/628b2004-fd4a369d86bb0d1e.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/server/chunks/6378.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/782.eabb09377ff3e52e.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/7bbfdf2e-e232a3cce0cc8a20.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/8831.140959f5d0b70fdf.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page-experimental.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page-turbo-experimental.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page-turbo.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/bd6f7ee8.67a66d50fb0b7501.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/preview/node_modules/next/dist/client/components/segment-cache/cache.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/preview/.next/static/chunks/e02586cf.2d95d2144e870cd9.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/e06b5b90.b7fb8cffe8a0bb83.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/ec728a3c-269402077eb4e8da.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/comment-json/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/conf/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/json5/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/jsonwebtoken/index.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/src/index.js | matched "curl " | 12 |
| medium | Remote Payload | package/preview/node_modules/next/dist/next-devtools/server/launch-editor.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/next-devtools/server/launch-editor.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/preview/node_modules/next/dist/compiled/@edge-runtime/primitives/load.js | matched "cURL " | 12 |
| medium | Obfuscation Density | package/preview/node_modules/next/dist/compiled/@modelcontextprotocol/sdk/server/mcp.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/preview/.next/static/chunks/app/[[...slug]]/page-8a0b382432eaa8cb.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/preview/.next/static/chunks/app/[[...slug]]/page-8a0b382432eaa8cb.js | high encoded/escaped-token density | 12 |
| medium | Large Javascript Payload | package/preview/.next/static/chunks/3442-836fef4711cf96ee.js | 4033418 bytes | 10 |
| medium | Large Javascript Payload | package/preview/.next/server/app/[[...slug]]/page.js | 7186789 bytes | 10 |
| low | Credential file access | package/preview/.next/static/chunks/app/[[...slug]]/page-8a0b382432eaa8cb.js | matched ".azure" | 5 |
| low | Obfuscation | package/preview/node_modules/next/dist/compiled/zod/index.cjs | matched "atob(" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/1090.js | matched "\\xa0" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/1153.js | matched "\\x3e" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/1776.8b3b3cf0cdef271b.js | matched "eVal(" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/2141.43dbbd0b7f9c6b79.js | matched "\\x00" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/2483.js | matched "\\x1b" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/2703.b5108c3b76126aca.js | matched "\\u200d" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/2887.js | matched "\\u00AA" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/2919.70253373b96c4894.js | matched "\\x3e" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/307.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/3109.46c91f7a9d758937.js | matched "eVal(" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/3304.7fc7a18c6dc694ce.js | matched "\\xa0" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/3411.js | matched "eVal(" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/3537.js | matched "\\u00C0" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/3589.b7b420e6163eb45f.js | matched "\\x3e" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/3812.js | matched "\\x00" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/3898-1506bcedff4d2a67.js | matched "\\u0000" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/4299befe-f06a16817488b5a2.js | matched "\\uFEFF" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/456.c54b40e963711a2e.js | matched "\\x01" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/4619.js | matched "\\u200b" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/4715.js | matched "\\u000D" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/4813.js | matched "\\x01" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/49888b39-c7aa65213a03be2f.js | matched "\\xaa" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/5034.js | matched "\\uD83D" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/5056.js | matched "\\u200d" | 3 |
| low | Obfuscation | package/preview/.next/server/chunks/5200.js | matched "\\u00C0" | 3 |
| low | Obfuscation | package/preview/.next/static/chunks/54b938ff.d7879edcf72e1ea2.js | matched "\\uD83E" | 3 |
Manifest
Package metadata
Scripts7
buildnext buildcleanrm -rf .next distdevnext devlintpnpm exec eslint .startnext startts-checkpnpm exec tsc --noEmit -p tsconfig.jsontsgo-checkpnpm exec tsgo --noEmit -p tsconfig.json
Dependencies17
@archbee/app-modulesworkspace:*@archbee/app-ui-kitworkspace:*@archbee/cli-configworkspace:*@archbee/data-accessworkspace:*@archbee/editorworkspace:*@archbee/editor-coreworkspace:*@archbee/editor-typesworkspace:*@archbee/markdownworkspace:*@archbee/mdxworkspace:*@archbee/utilitiesworkspace:*chokidar^3.6.0gray-matter^4.0.3next16.2.1overlayscrollbars-react^0.5.6react18.3.1react-dom18.3.1ws^8.18.0