Package evidence
@ew53/[email protected]
Known Indicator Filename: package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Versions published
- 6
- First published
- May 2026
- Publisher
- ew53
Recommended action
Review before promotingMixed signals: the package has indicators worth reading before allowing the update in automated dependency flows.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@ew53/[email protected]"],"fail_on":"review"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@ew53/[email protected]"],"fail_on":"review"}'Why flagged
What the scanner saw
Known Indicator Filename: package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk review · score 306 · status changed
Evidence
Static findings
136 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Known Indicator Filename | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js | 45 |
| high | Known Indicator Filename | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/babel/bundle.js | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/babel/bundle.js | 45 |
| medium | Remote Payload | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/client/components/segment-cache-impl/cache.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dashboard-dist/packages/dashboard/_nm/next/dist/client/components/segment-cache-impl/cache.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/build/output/index.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/json5/index.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dashboard-dist/packages/dashboard/_nm/next/dist/build/output/index.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/json5/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/next-devtools/server/launch-editor.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dashboard-dist/packages/dashboard/_nm/next/dist/next-devtools/server/launch-editor.js | high encoded/escaped-token density | 12 |
| medium | Large Javascript Payload | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/amphtml-validator/validator_wasm.js | 4012235 bytes | 10 |
| medium | Large Javascript Payload | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/amphtml-validator/validator_wasm.js | 4012235 bytes | 10 |
Show all 136 findings (low-signal and informational)
Showing 60 of 136 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| high | Known Indicator Filename | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js | 45 |
| high | Known Indicator Filename | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/babel/bundle.js | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/babel/bundle.js | 45 |
| medium | Remote Payload | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/client/components/segment-cache-impl/cache.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dashboard-dist/packages/dashboard/_nm/next/dist/client/components/segment-cache-impl/cache.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/build/output/index.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/json5/index.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dashboard-dist/packages/dashboard/_nm/next/dist/build/output/index.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/json5/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/next-devtools/server/launch-editor.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dashboard-dist/packages/dashboard/_nm/next/dist/next-devtools/server/launch-editor.js | high encoded/escaped-token density | 12 |
| medium | Large Javascript Payload | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/amphtml-validator/validator_wasm.js | 4012235 bytes | 10 |
| medium | Large Javascript Payload | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/amphtml-validator/validator_wasm.js | 4012235 bytes | 10 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/zod/index.cjs | matched "atob(" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/zod/index.cjs | matched "atob(" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/server/pages/_error.js | matched "\\x3e" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/server/chunks/112.js | matched "\\xbb" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/server/chunks/155.js | matched "\\u0026" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/server/chunks/700.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/static/chunks/745-3b047fae751fefbc.js | matched "\\xb7" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/static/chunks/798-ed19014055a40706.js | matched "atob(" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/server/chunks/904.js | matched "\\xb7" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/next-server/app-page-experimental.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/next-server/app-page-experimental.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/next-server/app-page-turbo-experimental.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/next-server/app-page-turbo-experimental.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/next-server/app-page-turbo.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/next-server/app-page-turbo.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/next-server/app-page.runtime.prod.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/next-server/app-route.runtime.prod.js | matched "\\u0009" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/next-server/app-route.runtime.prod.js | matched "\\u0009" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/static/chunks/bb811a4c-1a6a58e3dcbf1b3b.js | matched "\\u00C0" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/babel/bundle.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/compiled/babel/bundle.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/shared/lib/router/utils/cache-busting-search-param.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/shared/lib/router/utils/cache-busting-search-param.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/server/resume-data-cache/cache-store.js | matched "atob(" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/server/resume-data-cache/cache-store.js | matched "atob(" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/server/node-environment-extensions/console-dev.js | matched "\\x1b" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/server/node-environment-extensions/console-dev.js | matched "\\x1b" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/server/app-render/encryption-utils.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/server/app-render/encryption-utils.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/experimental/testmode/fetch.js | matched "Buffer.from(body, 'base64" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/experimental/testmode/fetch.js | matched "Buffer.from(body, 'base64" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/.next/static/chunks/framework-1c02a2e60068b586.js | matched "\\u00C0" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/shared/lib/htmlescape.js | matched "\\u0026" | 3 |
| low | Obfuscation | package/dashboard-dist/packages/dashboard/_nm/next/dist/shared/lib/htmlescape.js | matched "\\u0026" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/@[email protected]/node_modules/@next/env/dist/index.js | matched "Buffer.from(e,\"base64" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/@next/env/dist/index.js | matched "Buffer.from(e,\"base64" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/@hapi/accept/index.js | matched "\\u2028" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/amphtml-validator/index.js | matched "\\x1B" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/browserslist/index.js | matched "\\uFEFF" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/busboy/index.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/commander/index.js | matched "\\ufeff" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/conf/index.js | matched "\\x00" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/content-disposition/index.js | matched "\\x00" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/cookie/index.js | matched "\\u0009" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/edge-runtime/index.js | matched "\\x20" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/json5/index.js | matched "\\ufeff" | 3 |
| low | Obfuscation | package/dashboard-dist/_nm/.pnpm/[email protected][email protected][email protected][email protected]/node_modules/next/dist/compiled/jsonwebtoken/index.js | matched "\\x00" | 3 |
Manifest
Package metadata
Scripts4
buildtsc -p tsconfig.jsondevtsx src/index.tsstarttsx src/index.tstypechecktsc --noEmit
Dependencies12
@clack/prompts^0.8.2@ew53/seo-adapter-generic0.3.5@ew53/seo-adapter-react0.3.5@ew53/seo-adapter-shopify0.3.5@ew53/seo-core0.3.5@ew53/seo-crawler0.3.5@ew53/seo-llm0.3.5@ew53/seo-patch0.3.5@ew53/seo-report0.3.5cac^6.7.14jiti^2.4.0picocolors^1.1.1