Package evidence
@memberjunction/[email protected]
Obfuscation Density: high encoded/escaped-token density
Trust signals
Why this verdict
PkgRadar discounts a release’s score when public reputation argues against novel malware. The verdict above already reflects these — the panel just explains what was applied.
- Publisher
- GitHub ActionsTrusted automation · −70% score
Effective trust discount applied: −70% (max across signals — discounts don’t stack). New install-lifecycle deltas vs the previous release would clear the discount.
Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@memberjunction/[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@memberjunction/[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 522 · status changed
Evidence
Static findings
105 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/dist/Integration/components/activity/activity.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/autotagging/autotagging-pipeline-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/create-wizard/database-create-wizard.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/database-designer-dashboard.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/modify/database-modify.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/database-preview-pane.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/duplicates/duplicate-detection-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/entity-fields-grid.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/entity-list.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/entity-pipeline-panel.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/entity-review-panel.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/analytics/executive-summary/executive-summary.component.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/DevTools/graphql-console.component.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/dist/KnowledgeHub/components/config/knowledge-config-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/QueryBrowser/query-browser-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/Scheduling/components/scheduling-activity.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/Scheduling/components/scheduling-jobs.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/Scheduling/components/scheduling-overview.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/KnowledgeHub/components/scheduling/scheduling-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/create-wizard/steps/step-basics.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/create-wizard/steps/step-relationships.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/tags/tags-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/wizard-step-indicator.component.js | high encoded/escaped-token density | 12 |
Show all 105 findings (low-signal and informational)
Showing 60 of 105 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/dist/Integration/components/activity/activity.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/autotagging/autotagging-pipeline-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/create-wizard/database-create-wizard.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/database-designer-dashboard.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/modify/database-modify.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/database-preview-pane.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/duplicates/duplicate-detection-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/entity-fields-grid.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/entity-list.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/entity-pipeline-panel.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/entity-review-panel.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/analytics/executive-summary/executive-summary.component.js | high encoded/escaped-token density | 12 |
| medium | Remote Payload | package/dist/DevTools/graphql-console.component.js | matched "curl " | 12 |
| medium | Obfuscation Density | package/dist/KnowledgeHub/components/config/knowledge-config-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/QueryBrowser/query-browser-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/Scheduling/components/scheduling-activity.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/Scheduling/components/scheduling-jobs.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/Scheduling/components/scheduling-overview.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/KnowledgeHub/components/scheduling/scheduling-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/create-wizard/steps/step-basics.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/create-wizard/steps/step-relationships.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/AI/components/tags/tags-resource.component.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/dist/DatabaseDesigner/components/shared/wizard-step-indicator.component.js | high encoded/escaped-token density | 12 |
| low | Obfuscation | package/dist/Actions/components/explorer/action-explorer.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Home/action-pin-config-dialog.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/Home/action-pin-runner-dialog.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Actions/components/actions-overview.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Integration/components/activity/activity.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/AI/components/agents/agent-configuration.component.js | matched "\\u00A7" | 3 |
| low | Obfuscation | package/dist/AI/components/agents/agent-editor.component.js | matched "\\u2022" | 3 |
| low | Obfuscation | package/dist/AI/components/analytics/agent-runs/agent-run-analysis.component.js | matched "\\u2500" | 3 |
| low | Obfuscation | package/dist/AI/components/analytics/ai-analytics-resource.component.js | matched "\\u2500" | 3 |
| low | Obfuscation | package/dist/ComponentStudio/components/ai-assistant/ai-assistant-panel.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/AI/components/analytics/analytics-filter-bar.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/KnowledgeHub/components/analytics/analytics-resource.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/APIKeys/api-keys-resource.component.js | matched "\\u2192" | 3 |
| low | Obfuscation | package/dist/DevTools/app-state-inspector.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/ApplicationRoles/application-roles-resource.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Permissions/audit-log-resource.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/AI/components/autotagging/autotagging-pipeline-resource.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/DevTools/class-registry.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/ComponentStudio/components/editors/code-editor-panel.component.js | matched "\\u2191" | 3 |
| low | Obfuscation | package/dist/Communication/communication-logs-resource.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Communication/communication-monitor-resource.component.js | matched "\\u2022" | 3 |
| low | Obfuscation | package/dist/Communication/communication-new-message-resource.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/ComponentStudio/component-studio-dashboard.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Integration/components/connections/connections.component.js | matched "\\u2192" | 3 |
| low | Obfuscation | package/dist/AI/components/analytics/cost-budget/cost-budget.component.js | matched "\\u2500" | 3 |
| low | Obfuscation | package/dist/Credentials/components/credentials-categories-resource.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/Credentials/components/credentials-types-resource.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/DataExplorer/data-explorer-dashboard.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/create-wizard/database-create-wizard.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/database-designer-dashboard.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/modify/database-modify.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/shared/database-preview-pane.component.js | matched "\\u2500" | 3 |
| low | Obfuscation | package/dist/AI/components/duplicates/duplicate-detection-resource.component.js | matched "\\u2026" | 3 |
| low | Obfuscation | package/dist/EntityAdmin/entity-admin-dashboard.component.js | matched "\\u00A7" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/shared/entity-fields-grid.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/entity-list.component.js | matched "\\u2014" | 3 |
| low | Obfuscation | package/dist/DatabaseDesigner/components/shared/entity-pipeline-panel.component.js | matched "\\u2026" | 3 |
Manifest
Package metadata
Scripts3
buildngctestvitest runtest:watchvitest
Dependencies65
@angular/animations21.1.3@angular/cdk21.1.3@angular/platform-browser21.1.3@angular/router21.1.3@codemirror/language-data^6.5.2@codemirror/merge^6.11.2@codemirror/state^6.5.4@codemirror/view^6.39.12@memberjunction/actions-base5.36.0@memberjunction/ai-core-plus5.36.0@memberjunction/ai-engine-base5.36.0@memberjunction/api-keys-base5.36.0@memberjunction/core5.36.0@memberjunction/core-entities5.36.0@memberjunction/credentials5.36.0@memberjunction/export-engine5.36.0@memberjunction/global5.36.0@memberjunction/graphql-dataprovider5.36.0@memberjunction/integration-engine-base5.36.0@memberjunction/interactive-component-types5.36.0@memberjunction/lists-base5.36.0@memberjunction/ng-action-gallery5.36.0@memberjunction/ng-actions5.36.0@memberjunction/ng-agent-requests5.36.0@memberjunction/ng-agents5.36.0@memberjunction/ng-ai-test-harness5.36.0@memberjunction/ng-archive-manager5.36.0@memberjunction/ng-base-application5.36.0@memberjunction/ng-base-types5.36.0@memberjunction/ng-clustering5.36.0- …and 35 more.