PkgRadar

Package evidence

[email protected]

Obfuscation Density: high encoded/escaped-token density

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'
Publisherkwintspiracy
Artifact bytes1,453,306
Previous version0.1.2
Published2026-05-13T16:48:49.988Z
SHA-25688694f5bf4778b841fdf3fb020ced6ff1c45eef11f561c1cc2d8a66916d334e9

Why flagged

What the scanner saw

Obfuscation Density: high encoded/escaped-token density

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high
Last checked
highRisk
87Score
0.1.3Version
Status history (1 event)
  1. newavailable · risk high · score 87 · status changed

Related candidates

Linked campaigns and clusters

Publisher / release actor burststale

kwintspiracy

2 members · evidence strength 64

Evidence

Static findings

26 static · 0 from release diff · showing high-signal first.

SeverityKindPathDetailPoints
mediumObfuscation Densitypackage/runner.jshigh encoded/escaped-token density12
Show all 26 findings (low-signal and informational)
SeverityKindPathDetailPoints
mediumObfuscation Densitypackage/runner.jshigh encoded/escaped-token density12
lowObfuscationpackage/web/.next/server/chunks/159.jsmatched "\\u0000"3
lowObfuscationpackage/web/.next/server/chunks/574.jsmatched "\\uD83C"3
lowObfuscationpackage/web/.next/server/chunks/605.jsmatched "Buffer.from(e,\"base64"3
lowObfuscationpackage/web/.next/server/chunks/606.jsmatched "atob("3
lowObfuscationpackage/web/.next/server/chunks/674.jsmatched "\\xbb"3
lowObfuscationpackage/web/.next/static/chunks/678-46261e73dea11bc7.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/static/chunks/724-1d09b7ea367babbe.jsmatched "fromCharCode"3
lowObfuscationpackage/web/.next/server/chunks/754.jsmatched "atob("3
lowObfuscationpackage/web/.next/server/chunks/807.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/server/chunks/856.jsmatched "\\u200E"3
lowObfuscationpackage/web/.next/static/chunks/a7a8b010-64b9ea0922a3e9c1.jsmatched "\\u00C0"3
lowObfuscationpackage/cli.jsmatched "\\u2014"3
lowObfuscationpackage/web/.next/static/chunks/e5009a55-3b270d90dfdebefa.jsmatched "\\u200E"3
lowObfuscationpackage/web/.next/static/chunks/framework-a208e71e7c780968.jsmatched "\\u00C0"3
lowObfuscationpackage/web/.next/static/chunks/main-949172f5a58d52c4.jsmatched "\\u0000"3
lowObfuscationpackage/web/.next/server/middleware.jsmatched "fromCharCode"3
lowObfuscationpackage/web/.next/static/chunks/app/(dashboard)/connectors/page-9189af92fc7cddd4.jsmatched "\\xd7"3
lowObfuscationpackage/web/.next/static/chunks/app/(dashboard)/automations/page-d06b5eb3ec1ada30.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/server/app/(dashboard)/approvals/page.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/server/app/(dashboard)/automations/page.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/server/app/(dashboard)/connectors/page.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/server/app/(dashboard)/memories/page.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/server/app/(dashboard)/skills/page.jsmatched "\\xb7"3
lowObfuscationpackage/web/.next/static/chunks/polyfills-42372ed130431b0a.jsmatched "\\u2028"3
lowObfuscationpackage/runner.jsmatched "Buffer.from(raw, \"base64"3