Package evidence
@kmkf-fe-packages/[email protected]
Obfuscation Density: high encoded/escaped-token density
Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@kmkf-fe-packages/[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@kmkf-fe-packages/[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 489 · status changed
Related candidates
Linked campaigns and clusters
shenjianfei
4 members · evidence strength 84Evidence
Static findings
142 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/dist/esm/components/LogisticsInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/esm/components/LogisticsMoreInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/esm/components/Common/index.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dist/esm/components/Common/index.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/esm/components/ErpTradeId/components/OrderNum/index.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dist/esm/components/PicturePro/PictureName.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dist/esm/components/Common/constants/wdt.js | high encoded/escaped-token density | 12 |
Show all 142 findings (low-signal and informational)
Showing 60 of 142 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/dist/esm/components/LogisticsInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/esm/components/LogisticsMoreInterception/columnHeader.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/esm/components/Common/index.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dist/esm/components/Common/index.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/esm/components/ErpTradeId/components/OrderNum/index.js | matched "cUrl " | 12 |
| medium | Remote Payload | package/dist/esm/components/PicturePro/PictureName.js | matched "cUrl " | 12 |
| medium | Obfuscation Density | package/dist/esm/components/Common/constants/wdt.js | high encoded/escaped-token density | 12 |
| low | Obfuscation | package/dist/esm/components/Payment/AlipayNick.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/Payment/AlipayNo.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/Payment/AlipayTime.js | matched "\\u6253" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/constants/bs_e3.js | matched "\\u5546" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/constants/bs.js | matched "\\u5546" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/common/BsType.js | matched "\\u7C7B" | 3 |
| low | Obfuscation | package/dist/esm/components/Payment/BuyerNick.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/LogisticsInterception/columnHeader.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/LogisticsMoreInterception/columnHeader.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/StatusSelect/constants.js | matched "\\u6210" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/constants/defaultColumns.js | matched "\\u5546" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/common/expressCode.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/common/expressCompany.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/GlobalContext/index.js | matched "\\u6570" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/QueryLogisticsTrack/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/ShopList/index.js | matched "\\u3010" | 3 |
| low | Obfuscation | package/dist/esm/commonComponents/Wangwang/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/ActualPayment/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/AfterSalesOrderId/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/AlipayAccount/index.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/AlipayName/index.js | matched "\\u652F" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsExchange/index.js | matched "\\u9000" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsLogistics/index.js | matched "\\uD83D" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsReissue/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsReturn/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/BsSystemOrder/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/BS/DeliveryNo/index.js | matched "\\u81F3" | 3 |
| low | Obfuscation | package/dist/esm/components/BsE3/BsReissueE3/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/BuyerNick/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/Cascader/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/Checkbox/index.js | matched "\\u5176" | 3 |
| low | Obfuscation | package/dist/esm/components/Common/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonInput/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonMultiStatus/index.js | matched "\\u81F3" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonSystemOrder/index.js | matched "\\u81F3" | 3 |
| low | Obfuscation | package/dist/esm/components/CommonTradeId/index.js | matched "\\u65E0" | 3 |
| low | Obfuscation | package/dist/esm/components/ErpTradeId/components/OrderNum/index.js | matched "\\u7CFB" | 3 |
| low | Obfuscation | package/dist/esm/components/ErpTradeId/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/Express/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/ExpressCode/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/ExpressCompany/index.js | matched "\\u7269" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowMarkSelect/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowOverallStatusSelect/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowStatusSelect/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowTag/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowWorkOrderId/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/FlowWorkOrderStatus/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/GetFormItem/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/GY/GyReissue/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/GY/GyReturn/index.js | matched "\\u5907" | 3 |
| low | Obfuscation | package/dist/esm/components/Input/index.js | matched "\\u8BF7" | 3 |
| low | Obfuscation | package/dist/esm/components/JST/JstItemSelect/index.js | matched "\\u4F9B" | 3 |
| low | Obfuscation | package/dist/esm/components/JST/JstSendGood/index.js | matched "\\u540D" | 3 |
Manifest
Package metadata
Scripts4
buildyarn run lint && father buildlinteslint '**/*.{ts,tsx}'lint:fixeslint --fix '**/*.{ts,tsx}'syncyarn build && yalc push
Dependencies5
@kmkf-fe-packages/basic-components2.7.4@kmkf-fe-packages/kmkf-utils2.7.4b64-to-blob^1.2.19html2canvas^1.4.1react-pdf-js^5.1.0