Package evidence

[email protected]

Known Indicator Filename: package/.next/standalone/node_modules/next/dist/compiled/babel/bundle.js

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'

Publisherdadenjo

Artifact bytes21,081,435

Previous version0.25.1

Published2026-05-24T06:19:09.142Z

SHA-256b0731d3c740cb798218ec88eeb013ac30b86b8bbd137c21320cd24d6ab6cc6a9

Why flagged

What the scanner saw

Known Indicator Filename: package/.next/standalone/node_modules/next/dist/compiled/babel/bundle.js

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high

20d agoLast checked

highRisk

2267Score

0.26.0Version

Status history (1 event)

new → available20d ago · risk high · score 2267 · status changed

Related candidates

Linked campaigns and clusters

Publisher / release actor burststale

dadenjo

4 members · evidence strength 84

Evidence

Static findings

542 static · 0 from release diff · showing high-signal first.

Showing 30 of 56 findings.

Severity	Kind	Path	Detail	Points
high	Known Indicator Filename	package/.next/standalone/node_modules/next/dist/compiled/babel/bundle.js	package/.next/standalone/node_modules/next/dist/compiled/babel/bundle.js	45
high	Credential file access	package/.next/standalone/.next/static/chunks/app/green/github-app/page-7d1721dba45c9660.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/static/static/chunks/app/green/github-app/page-7d1721dba45c9660.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/static/chunks/app/green/github-app/page-7d1721dba45c9660.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/server/app/green/github-app/page.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/server/app/api/github/config/route.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/server/app/api/github/webhook/route.js	matched "GITHUB_TOKEN"	30
medium	Obfuscation Density	package/.next/standalone/.next/static/chunks/5516-d97f554f4e6843a9.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/static/static/chunks/5516-d97f554f4e6843a9.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/static/chunks/5516-d97f554f4e6843a9.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/server/chunks/7733.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/server/chunks/7934.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page-experimental.runtime.prod.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page-turbo-experimental.runtime.prod.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page-turbo.runtime.prod.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/client/components/segment-cache/cache.js	matched "cUrl "	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/@vercel/nft/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/comment-json/index.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/conf/index.js	matched "raw.githubusercontent.com"	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/conf/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/json5/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/jsonwebtoken/index.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/schema-utils3/index.js	matched "raw.githubusercontent.com"	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/schema-utils3/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/@vercel/og/index.node.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/next-devtools/server/launch-editor.js	matched "curl "	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/next-devtools/server/launch-editor.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/@edge-runtime/primitives/load.js	matched "cURL "	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/@modelcontextprotocol/sdk/server/mcp.js	matched "raw.githubusercontent.com"	12

Show all 542 findings (low-signal and informational)

Showing 60 of 542 findings.

Severity	Kind	Path	Detail	Points
high	Known Indicator Filename	package/.next/standalone/node_modules/next/dist/compiled/babel/bundle.js	package/.next/standalone/node_modules/next/dist/compiled/babel/bundle.js	45
high	Credential file access	package/.next/standalone/.next/static/chunks/app/green/github-app/page-7d1721dba45c9660.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/static/static/chunks/app/green/github-app/page-7d1721dba45c9660.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/static/chunks/app/green/github-app/page-7d1721dba45c9660.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/server/app/green/github-app/page.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/server/app/api/github/config/route.js	matched "GITHUB_TOKEN"	30
high	Credential file access	package/.next/standalone/.next/server/app/api/github/webhook/route.js	matched "GITHUB_TOKEN"	30
medium	Obfuscation Density	package/.next/standalone/.next/static/chunks/5516-d97f554f4e6843a9.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/static/static/chunks/5516-d97f554f4e6843a9.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/static/chunks/5516-d97f554f4e6843a9.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/server/chunks/7733.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/server/chunks/7934.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page-experimental.runtime.prod.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page-turbo-experimental.runtime.prod.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page-turbo.runtime.prod.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/next-server/app-page.runtime.prod.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/client/components/segment-cache/cache.js	matched "cUrl "	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/@vercel/nft/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/comment-json/index.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/conf/index.js	matched "raw.githubusercontent.com"	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/conf/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/json5/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/jsonwebtoken/index.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/schema-utils3/index.js	matched "raw.githubusercontent.com"	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/schema-utils3/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/@vercel/og/index.node.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/next-devtools/server/launch-editor.js	matched "curl "	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/next-devtools/server/launch-editor.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/@edge-runtime/primitives/load.js	matched "cURL "	12
medium	Remote Payload	package/.next/standalone/node_modules/next/dist/compiled/@modelcontextprotocol/sdk/server/mcp.js	matched "raw.githubusercontent.com"	12
medium	Obfuscation Density	package/.next/standalone/node_modules/next/dist/compiled/@modelcontextprotocol/sdk/server/mcp.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/.next/static/chunks/app/green/knowledge-graph/page-030fe608456687ab.js	matched "curl "	12
medium	Remote Payload	package/.next/standalone/.next/static/static/chunks/app/green/knowledge-graph/page-030fe608456687ab.js	matched "curl "	12
medium	Remote Payload	package/.next/static/chunks/app/green/knowledge-graph/page-030fe608456687ab.js	matched "curl "	12
medium	Remote Payload	package/.next/standalone/.next/static/chunks/app/green/vercel-gate/page-32417071e7a3a8fa.js	matched "curl "	12
medium	Remote Payload	package/.next/standalone/.next/static/static/chunks/app/green/vercel-gate/page-32417071e7a3a8fa.js	matched "curl "	12
medium	Remote Payload	package/.next/static/chunks/app/green/vercel-gate/page-32417071e7a3a8fa.js	matched "curl "	12
medium	Obfuscation Density	package/.next/standalone/.next/static/chunks/app/blue/explorer/page-d078b33690e1721c.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/.next/static/static/chunks/app/blue/explorer/page-d078b33690e1721c.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/static/chunks/app/blue/explorer/page-d078b33690e1721c.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/.next/static/chunks/app/settings/api-keys/page-fe8912a486656fb6.js	matched "curl "	12
medium	Remote Payload	package/.next/standalone/.next/static/static/chunks/app/settings/api-keys/page-fe8912a486656fb6.js	matched "curl "	12
medium	Remote Payload	package/.next/static/chunks/app/settings/api-keys/page-fe8912a486656fb6.js	matched "curl "	12
medium	Obfuscation Density	package/.next/standalone/.next/server/app/blue/explorer/page.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/.next/server/app/green/knowledge-graph/page.js	matched "curl "	12
medium	Remote Payload	package/.next/standalone/.next/server/app/green/vercel-gate/page.js	matched "curl "	12
medium	Remote Payload	package/.next/standalone/.next/server/app/settings/api-keys/page.js	matched "curl "	12
medium	Obfuscation Density	package/.next/standalone/node_modules/react-dom/cjs/react-dom-server-legacy.browser.production.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/react-dom/cjs/react-dom-server-legacy.node.production.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/react-dom/cjs/react-dom-server.browser.production.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/react-dom/cjs/react-dom-server.edge.production.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/.next/standalone/node_modules/react-dom/cjs/react-dom-server.node.production.js	high encoded/escaped-token density	12
medium	Remote Payload	package/.next/standalone/.next/server/app/api/green/alerts/webhook/route.js	matched "curl "	12
medium	Obfuscation Density	package/.next/standalone/node_modules/ts-morph/dist/ts-morph.js	high encoded/escaped-token density	12
medium	Large Javascript Payload	package/.next/standalone/node_modules/@ts-morph/common/dist/ts-morph-common.js	3016503 bytes	10
medium	Large Javascript Payload	package/.next/standalone/node_modules/@ts-morph/common/dist/typescript.js	9143384 bytes	10
low	Obfuscation	package/.next/standalone/node_modules/next/dist/compiled/postcss-preset-env/index.cjs	matched "\\x20"	3
low	Obfuscation	package/.next/standalone/node_modules/next/dist/compiled/zod/index.cjs	matched "atob("	3
low	Obfuscation	package/.next/standalone/.next/server/chunks/1369.js	matched "\\xb7"	3
low	Obfuscation	package/.next/standalone/.next/server/chunks/1855.js	matched "\\xfc"	3

Manifest

Package metadata

Scripts10

buildnext build --webpack && npm run postbuild
devnext dev -p 3001
linteslint
postbuildcp -r .next/static .next/standalone/.next/static && cp -r public .next/standalone/public && node scripts/patch-standalone.js
prebuildnode scripts/scrub-build-secrets.js
prepacknode scripts/scan-tarball-for-secrets.js
prepublishOnlynpm run build && npm test
release-gatebash scripts/ci-release-gate.sh
startnext start -p 3001
testtsx --test lib/prism/monorepo/__tests__/detect.test.ts lib/prism/license/__tests__/license.test.ts lib/prism/license/__tests__/lemonsqueezy.test.ts lib/prism/lemonsqueezy/__tests__/tierMapping.test.ts lib/prism/lemonsqueezy/__tests__/client.test.ts lib/prism/blue/__tests__/detectSourceRoot.test.ts lib/prism/blue/__tests__/resolveScanGlobs.test.ts lib/prism/blue/__tests__/classifyBlueprint.test.ts lib/prism/blue/explorer/__tests__/kpiConfig.test.ts lib/prism/blue/explorer/__tests__/filterUtils.test.ts lib/prism/blue/explorer/__tests__/formGroupUtils.test.ts lib/prism/blue/explorer/__tests__/cockpitDeepLink.test.ts lib/prism/blue/__tests__/historyStore.test.ts lib/prism/blue/__tests__/standardsStore.test.ts lib/prism/blue/__tests__/forgeSnapshot.test.ts lib/prism/blue/fitness/__tests__/evaluator.test.ts lib/prism/amber/__tests__/engine.test.ts lib/prism/amber/__tests__/llmProvider.test.ts lib/prism/green/__tests__/engine.test.ts lib/prism/green/__tests__/queriesRoute.test.ts lib/prism/green/__tests__/insightsRoute.test.ts lib/prism/amber/__tests__/starterTemplates.test.ts lib/prism/__tests__/apiKeys.test.ts lib/prism/green/__tests__/coherenceScore.test.ts lib/prism/green/__tests__/paths.test.ts lib/prism/green/__tests__/remediationPrompt.test.ts lib/prism/__tests__/features.test.ts lib/prism/monorepo/__tests__/statePaths.test.ts lib/prism/blue/explorer/__tests__/heatHelpers.test.ts lib/prism/blue/explorer/__tests__/qualityUtils.test.ts lib/prism/blue/explorer/__tests__/srcLayoutNormalize.test.ts lib/prism/__tests__/configSchema.test.ts lib/prism/monorepo/__tests__/loc.test.ts lib/prism/blue/todos/__tests__/ccPromptBuilder.test.ts lib/prism/__tests__/solidPrinciples.test.ts lib/prism/__tests__/cleanArchitecture.test.ts lib/prism/__tests__/hexagonalArchitecture.test.ts lib/prism/__tests__/c4Model.test.ts lib/prism/__tests__/twelveFactorApp.test.ts lib/prism/__tests__/frameworkDetector.test.ts lib/prism/__tests__/teamPatterns.test.ts lib/prism/__tests__/doraMetrics.test.ts lib/prism/__tests__/conwaysLaw.test.ts lib/prism/__tests__/wardleyMap.test.ts lib/prism/__tests__/iso25010.test.ts lib/prism/__tests__/enterpriseIntegrationPatterns.test.ts lib/prism/__tests__/dddMapper.test.ts lib/prism/__tests__/okrs.test.ts lib/prism/__tests__/alertEngine.test.ts lib/prism/__tests__/alertDelivery.test.ts lib/prism/__tests__/cognitiveLoad.test.ts lib/prism/__tests__/configStore.test.ts lib/prism/__tests__/selfHeal.test.ts lib/prism/__tests__/achievements.test.ts lib/prism/__tests__/snapshots.test.ts lib/prism/__tests__/knowledgeGraph.test.ts

Dependencies12

@anthropic-ai/sdk^0.97.1
@tailwindcss/typography^0.5.19
@types/dagre^0.7.54
@xyflow/react^12.10.2
dagre^0.8.5
next16.2.6
prismlens^0.25.0
react19.2.4
react-dom19.2.4
react-markdown^10.1.0
remark-gfm^4.0.1
ts-morph^28.0.0

Optional dependencies1

keytar^7.9.0