Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@stevenvo780/[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@stevenvo780/[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Obfuscation: matched "Eval("
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 48 · status changed
Related candidates
Linked campaigns and clusters
stevenvo780
3 members · evidence strength 63Evidence
Static findings
16 static · 0 from release diff · showing high-signal first.
No high-signal findings — see all findings below.
Show all 16 findings (low-signal and informational)
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| low | Obfuscation | package/dist/api.js | matched "Eval(" | 3 |
| low | Obfuscation | package/dist/logic/profiles/probabilistic/basic.js | matched "Eval(" | 3 |
| low | Obfuscation | package/dist/tests/coverage-fill-api.test.js | matched "Eval(" | 3 |
| low | Obfuscation | package/dist/runtime/format.js | matched "\\u2265" | 3 |
| low | Obfuscation | package/dist/reasoning/peano-arithmetic/index.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dist/reasoning/real-analysis/index.js | matched "Eval(" | 3 |
| low | Obfuscation | package/dist/reasoning/automata/languages.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dist/lexer/lexer.js | matched "\\u2295" | 3 |
| low | Obfuscation | package/dist/tests/limits.test.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dist/reasoning/group-presentation/standard-groups.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/dist/runtime/streaming/stream-eval.js | matched "Eval(" | 3 |
| low | Obfuscation | package/dist/tests/streaming/stream-eval.test.js | matched "Eval(" | 3 |
| low | Obfuscation | package/dist/tests/stress-cdcl.test.js | matched "\\u0300" | 3 |
| low | Obfuscation | package/dist/tests/stress-extreme.test.js | matched "\\u0300" | 3 |
| low | Obfuscation | package/dist/tests/stress-hardware.test.js | matched "\\u0300" | 3 |
| low | Obfuscation | package/dist/reasoning/group-presentation/words.js | matched "fromCharCode" | 3 |
Manifest
Package metadata
Scripts22
benchvitest bench --run --config vitest.bench.config.tsbench:comparenode scripts/bench/compare.mjsbench:savevitest bench --run --config vitest.bench.config.ts && cp benchmarks/results.json benchmarks/baselines.jsonbench:v5vitest bench --run --config vitest.bench.v5.config.tsbench:v5:regressionnode scripts/bench/v5-regression.mjsbench:v5:updatenode scripts/bench/v5-regression.mjs --updatebuildtsc && chmod +x dist/cli/index.jscleanrm -rf distdevtsc --watchexamples:runbash ./scripts/run-all-examples.shformatprettier --write "src/**/*.ts"linteslint src --ext .tspackage./scripts/package.shprepacknpm run buildprepublishOnlynpm run clean && npm run build && npm run teststartnode dist/cli/index.jstestvitest runtest:allbash ./scripts/run-exhaustive-validation.shtest:coveragevitest run --coveragetest:stressvitest run src/tests/stress-hardware.test.tstest:watchvitesttypechecktsc --noEmit
Dependencies4
@stevenvo780/st-lang^4.6.0chalk^5.6.2commander^14.0.3z3-solver^4.16.0