Recommended action
Block this updateStatic evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.
Block this release in CIcurl · GitHub Actions
Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer $PKGRADAR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"specs":["@wix/[email protected]"],"fail_on":"high"}'GitHub Actions step:
- name: PkgRadar gate
run: |
curl -fsS https://pkgradar.com/gate/npm \
-H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
-H "Content-Type: application/json" \
-d '{"specs":["@wix/[email protected]"],"fail_on":"high"}'Why flagged
What the scanner saw
Obfuscation Density: high encoded/escaped-token density
Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.
Availability ledger
available
Status history (1 event)
- new → available · risk high · score 486 · status changed
Evidence
Static findings
102 static · 0 from release diff · showing high-signal first.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/cjs/bex-bundled-mini-essentials.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/cjs/exports/http-client/testkit/client.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/cjs/exports/testkit/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/http-client/testkit/client.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_ja-73RRUZ7T.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_ja-OOUHZN3G.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_ru-KCJT5YFQ.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_ru-VT2RYIUG.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_th-MVNHAQBD.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_th-SEQCZ6SU.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_uk-5VEGIENP.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_uk-TGSY773Q.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/index.mjs | high encoded/escaped-token density | 12 |
| medium | Large Javascript Payload | package/@wix/bi-logger-os-data/dist/cjs/testkit/common.js | 2102335 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/bi-logger-os-data/dist/esm/testkit/common.js | 2102110 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-data-extensions-v1-data-extension-schema/build/cjs/proto/proto-generated.js | 12181527 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-dealer-v1-serving-offer/build/cjs/proto/proto-generated.js | 3064443 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-devcenter-app-market-listing-v1-market-listing/build/cjs/proto/proto-generated.js | 19910793 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-fedinfra-exportservice-v1-export-async-job/build/cjs/proto/proto-generated.js | 9449653 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-infra-asyncjobs-v1-async-job/build/cjs/proto/proto-generated.js | 2410889 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-items-selection-spi-host-v1-provider/build/cjs/proto/proto-generated.js | 2552873 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-media-site-media-v1-file-descriptor/build/cjs/proto/proto-generated.js | 3543699 bytes | 10 |
Show all 102 findings (low-signal and informational)
Showing 60 of 102 findings.
| Severity | Kind | Path | Detail | Points |
|---|---|---|---|---|
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/cjs/bex-bundled-mini-essentials.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/cjs/exports/http-client/testkit/client.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/cjs/exports/testkit/index.js | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/http-client/testkit/client.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_ja-73RRUZ7T.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_ja-OOUHZN3G.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_ru-KCJT5YFQ.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_ru-VT2RYIUG.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_th-MVNHAQBD.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_th-SEQCZ6SU.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_uk-5VEGIENP.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_uk-TGSY773Q.mjs | high encoded/escaped-token density | 12 |
| medium | Obfuscation Density | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/index.mjs | high encoded/escaped-token density | 12 |
| medium | Large Javascript Payload | package/@wix/bi-logger-os-data/dist/cjs/testkit/common.js | 2102335 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/bi-logger-os-data/dist/esm/testkit/common.js | 2102110 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-data-extensions-v1-data-extension-schema/build/cjs/proto/proto-generated.js | 12181527 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-dealer-v1-serving-offer/build/cjs/proto/proto-generated.js | 3064443 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-devcenter-app-market-listing-v1-market-listing/build/cjs/proto/proto-generated.js | 19910793 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-fedinfra-exportservice-v1-export-async-job/build/cjs/proto/proto-generated.js | 9449653 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-infra-asyncjobs-v1-async-job/build/cjs/proto/proto-generated.js | 2410889 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-items-selection-spi-host-v1-provider/build/cjs/proto/proto-generated.js | 2552873 bytes | 10 |
| medium | Large Javascript Payload | package/@wix/ambassador-media-site-media-v1-file-descriptor/build/cjs/proto/proto-generated.js | 3543699 bytes | 10 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/cjs/bex-bundled-mini-essentials.js | matched "fromCharCode" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/cjs/exports/http-client/testkit/client.js | matched "\\x00" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/cjs/exports/testkit/index.js | matched "\\x00" | 3 |
| low | Obfuscation | package/@wix/ambassador-app-settings-v1-settings/build/cjs/proto/proto-generated.js | matched "Buffer.from(val, 'base64" | 3 |
| low | Obfuscation | package/@wix/ambassador-dealer-v1-offer-event/build/cjs/proto/proto-generated.js | matched "Buffer.from(e,\"base64" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/bex-bundled-mini-essentials.mjs | matched "fromCharCode" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/http-client/testkit/client.mjs | matched "\\x00" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_ar-R2AEOS5E.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_ar-URWZMJ6Y.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_bg-FGBW66TV.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_bg-XJS3YH6J.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_ca-GZSSMEPR.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_ca-TAFZX4WF.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_cs-HVC7KRC4.mjs | matched "\\xE1" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_cs-TJOZPF4N.mjs | matched "\\xE1" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_da-776BCO2R.mjs | matched "\\xF8" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_da-IKAQPOUE.mjs | matched "\\xF8" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_de-6RWKDEKG.mjs | matched "\\xFC" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_de-OZ3VHFFC.mjs | matched "\\xFC" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_el-MKIKGYNK.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_el-ODGYZ35D.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_en-BNIZXNRW.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_en-TI76SUZV.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_es-EXO6IANE.mjs | matched "\\xF3" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_es-XAN2446C.mjs | matched "\\xF3" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_fi-DQUZXMVI.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_fi-KT6KYMQC.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_fr-6JESATXL.mjs | matched "\\xE9" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_fr-JRDBASBM.mjs | matched "\\xE9" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_he-DHV44ZG3.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_he-JD3OUMRD.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_hi-UKK4LODD.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_hi-X2D2EJ6Z.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_hr-GAI52OD4.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_hr-WH7DJUNY.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_hu-4EKKW6RX.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/common-errors_hu-USY2GCN2.mjs | matched "\\u2019" | 3 |
| low | Obfuscation | package/@wix/bex-bundled-mini-essentials/dist/esm/exports/testkit/common-errors_it-DAUSIAN7.mjs | matched "\\xE8" | 3 |