Package evidence

[email protected]

Obfuscation Density: high encoded/escaped-token density

Recommended action

Block this update

Static evidence trips multiple high-signal indicators. Quarantine the release until the publisher validates the change or you can rule out the indicators below.

Inspect tarball Add to CI gate

Block this release in CIcurl · GitHub Actions

Fail the build when this package version is added or upgraded. Replace $PKGRADAR_TOKEN with a Pro / Team API key from your dashboard.

curl -fsS https://pkgradar.com/gate/npm \
  -H "Authorization: Bearer $PKGRADAR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"specs":["[email protected]"],"fail_on":"high"}'

GitHub Actions step:

- name: PkgRadar gate
  run: |
    curl -fsS https://pkgradar.com/gate/npm \
      -H "Authorization: Bearer ${{ secrets.PKGRADAR_TOKEN }}" \
      -H "Content-Type: application/json" \
      -d '{"specs":["[email protected]"],"fail_on":"high"}'

Publisherducnq2398

Artifact bytes39,397,080

Previous version3.3.28

Published2026-05-25T05:15:03.950Z

SHA-256cc6451aca7943ec4f38df918d2b2b0b548df3c45bdbd18fc0649ac4b4e013a5a

Why flagged

What the scanner saw

Obfuscation Density: high encoded/escaped-token density

Not observed: package install, lifecycle script execution, or sandbox execution. PkgRadar only inspects on-disk artifacts.

Availability ledger

available

high

23d agoLast checked

highRisk

1020Score

3.3.29Version

Status history (1 event)

new → available23d ago · risk high · score 1020 · status changed

Related candidates

Linked campaigns and clusters

Publisher / release actor burststale

ducnq2398

2 members · evidence strength 64

Evidence

Static findings

220 static · 0 from release diff · showing high-signal first.

Showing 30 of 40 findings.

Severity	Kind	Path	Detail	Points
medium	Obfuscation Density	package/lib/commonjs/screens/full-submit/accept_policy.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/full-submit/accept_policy.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/home/DigitalTopupItem.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/home/DigitalTopupItem.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/camera/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/guide-transfer-bank/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/home/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/mySignViettel/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/camera/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/guide-transfer-bank/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/home/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/mySignViettel/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/home/ItemMotoBikeLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/home/ItemMotoBikeLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ItemTimaOneV2.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ItemTimaOneV2.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ItemTimaOneV3.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ItemTimaOneV3.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/LoanInterestRate.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/LoanInterestRate.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ModalOptionLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ModalOptionLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ModalOptionLoanDigital.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ModalOptionLoanDigital.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/OCR.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/OCR.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/detail-loan/PaymentInfo.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/detail-loan/PaymentInfo.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/RegisterCamera.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/RegisterCamera.js	high encoded/escaped-token density	12

Show all 220 findings (low-signal and informational)

Showing 60 of 220 findings.

Severity	Kind	Path	Detail	Points
medium	Obfuscation Density	package/lib/commonjs/screens/full-submit/accept_policy.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/full-submit/accept_policy.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/home/DigitalTopupItem.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/home/DigitalTopupItem.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/camera/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/guide-transfer-bank/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/home/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/mySignViettel/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/camera/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/guide-transfer-bank/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/home/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/mySignViettel/index.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/home/ItemMotoBikeLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/home/ItemMotoBikeLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ItemTimaOneV2.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ItemTimaOneV2.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ItemTimaOneV3.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ItemTimaOneV3.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/LoanInterestRate.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/LoanInterestRate.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ModalOptionLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ModalOptionLoan.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/components/ModalOptionLoanDigital.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/components/ModalOptionLoanDigital.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/OCR.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/OCR.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/detail-loan/PaymentInfo.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/detail-loan/PaymentInfo.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/RegisterCamera.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/RegisterCamera.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/toan-trinh-so/ReviewInformation.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/toan-trinh-so/ReviewInformation.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/detail-loan/ShowQrCode.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/detail-loan/ShowQrCode.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/digital-lending/Step2.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/digital-lending/Step2.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/digital-lending/Step6.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/digital-lending/Step6.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/commonjs/screens/full-submit/update-info.js	high encoded/escaped-token density	12
medium	Obfuscation Density	package/lib/module/screens/full-submit/update-info.js	high encoded/escaped-token density	12
low	Obfuscation	package/lib/commonjs/screens/full-submit/accept_policy.js	matched "\\u1ED1"	3
low	Obfuscation	package/lib/module/screens/full-submit/accept_policy.js	matched "\\u1ED1"	3
low	Obfuscation	package/lib/commonjs/components/AlertLoan.js	matched "\\u0110"	3
low	Obfuscation	package/lib/module/components/AlertLoan.js	matched "\\u0110"	3
low	Obfuscation	package/lib/commonjs/screens/v3/AssetInformation.js	matched "\\u1EF1"	3
low	Obfuscation	package/lib/module/screens/v3/AssetInformation.js	matched "\\u1EF1"	3
low	Obfuscation	package/lib/commonjs/screens/camera/CCCDCameraScreen.js	matched "\\xF2"	3
low	Obfuscation	package/lib/module/screens/camera/CCCDCameraScreen.js	matched "\\xF2"	3
low	Obfuscation	package/lib/commonjs/components/CIMBLoading.js	matched "\\u0110"	3
low	Obfuscation	package/lib/module/components/CIMBLoading.js	matched "\\u0110"	3
low	Obfuscation	package/lib/commonjs/screens/home/CIMBxTima.js	matched "\\xF4"	3
low	Obfuscation	package/lib/module/screens/home/CIMBxTima.js	matched "\\xF4"	3
low	Obfuscation	package/lib/commonjs/screens/sign-tima/ConfirmContract.js	matched "\\xFD"	3
low	Obfuscation	package/lib/module/screens/sign-tima/ConfirmContract.js	matched "\\xFD"	3
low	Obfuscation	package/lib/commonjs/screens/detail-loan/DetailLoanTima.js	matched "\\u1EF1"	3
low	Obfuscation	package/lib/module/screens/detail-loan/DetailLoanTima.js	matched "\\u1EF1"	3
low	Obfuscation	package/lib/commonjs/screens/schedule-payment/DigitalSchedulePayment.js	matched "\\u1ECB"	3
low	Obfuscation	package/lib/module/screens/schedule-payment/DigitalSchedulePayment.js	matched "\\u1ECB"	3
low	Obfuscation	package/lib/commonjs/screens/home/DigitalTopupItem.js	matched "\\u0111"	3
low	Obfuscation	package/lib/module/screens/home/DigitalTopupItem.js	matched "\\u0111"	3

Manifest

Package metadata

Scripts10

androidyarn example android
bootstrapyarn example && yarn install && yarn example pods
cleandel-cli android/build example/android/build example/android/app/build example/ios/build
exampleyarn --cwd example
linteslint "**/*.{js,ts,tsx}"
prepackbob build
pushgit add . && git commit -m 'update' && git push origin sdk
releaserelease-it
testjest
typechecktsc --noEmit