@ckeditor/ckeditor5-case-change
Case change feature for CKEditor 5.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:src/casechangecommand.js | AI (source-diff): Proprietary-licensed CKEditor source; obfuscation is deliberate IP protection. | ai | |
| source-diff | obfuscated-file:src/casechangeediting.js | AI (source-diff): Proprietary-licensed CKEditor source; obfuscation is deliberate IP protection. | ai | |
| source-diff | obfuscated-file:src/casechangeui.js | AI (source-diff): Proprietary-licensed CKEditor source; obfuscation is deliberate IP protection. | ai | |
| semgrep | semgrep:obfuscation-hex-functions | AI (semgrep): CKSource intentionally obfuscates its premium commercial features; no malicious behavior present. | ai | |
| semgrep | semgrep:obfuscation-while-true | AI (semgrep): javascript-obfuscator artifact of legit CKSource proprietary packaging; stable across versions. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-icons | AI (phantom-deps): CKEditor 5 packages compile to dist/; imports may not be directly traceable. Same-org phantom deps are a known false positive for this ecosystem. | ai | |
| dependencies | unvetted-dep:@ckeditor/ckeditor5-ui | AI (dependencies): First-party CKEditor 5 dependency from the same org scope; expected internal dependency for all CKEditor 5 plugins. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-engine | AI (phantom-deps): CKEditor 5 packages compile to dist/; imports may not be directly traceable. Same-org phantom deps are a known false positive for this ecosystem. | ai | |
| dependencies | unvetted-dep:@ckeditor/ckeditor5-core | AI (dependencies): First-party CKEditor 5 dependency from the same org scope; expected internal dependency for all CKEditor 5 plugins. | ai | |
| dependencies | unvetted-dep:@ckeditor/ckeditor5-utils | AI (dependencies): First-party CKEditor 5 dependency from the same org scope; expected internal dependency for all CKEditor 5 plugins. | ai | |
| dependencies | unvetted-dep:@ckeditor/ckeditor5-engine | AI (dependencies): First-party CKEditor 5 dependency from the same org scope; expected internal dependency for all CKEditor 5 plugins. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-ui | AI (phantom-deps): CKEditor 5 packages compile to dist/; imports may not be directly traceable. Same-org phantom deps are a known false positive for this ecosystem. | ai |
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 48.3.1 | 5 / 0 | |
| 48.3.0 | 5 / 0 | |
| 48.2.0 | 5 / 0 | |
| 48.1.1 | 5 / 0 | |
| 48.1.0 | 5 / 0 | |
| 48.0.1 | 5 / 0 | |
| 48.0.0 | 5 / 0 | |
| 47.7.3 | 5 / 0 | |
| 47.6.2 | 5 / 0 |
v48.3.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v48.3.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v47.7.3
55 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3d10(_0x1b6931,_0x450e54){var _0x1588f7=_0x1588();return _0x3d10=function(_0x3d1043,_0x4bc22e){_0x3d1043=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3d10(_0x1b6931,_0x450e54){var _0x1588f7=_0x1588();return _0x3d10=function(_0x3d1043,_0x4bc22e){_0x3d1043=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source with while(!![]) loops is not legitimate for any CKEditor package; generalizes across all versions of this suspicious package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3d10(_0x1b6931,_0x450e54){var _0x1588f7=_0x1588();return _0x3d10=function(_0x3d1043,_0x4bc22e){_0x3d1043=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source with while(!![]) loops is not legitimate for any CKEditor package; generalizes across all versions of this suspicious package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x1880be=_0x1f9b;(function(_0x1f549a,_0x3672a7){const _0x3522f3=_0x1f9b,_0x12bb01=_0x1f549a();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1880be=_0x1f9b;(function(_0x1f549a,_0x3672a7){const _0x3522f3=_0x1f9b,_0x12bb01=_0x1f549a();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1880be=_0x1f9b;(function(_0x1f549a,_0x3672a7){const _0x3522f3=_0x1f9b,_0x12bb01=_0x1f549a();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source with while(!![]) loops is not legitimate for any CKEditor package; generalizes across all versions of this suspicious package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xf73539=_0x5dfa;(function(_0x57cfa2,_0x74845c){const _0x5a2e44=_0x5dfa,_0x16a960=_0x57cfa2();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source with while(!![]) loops is not legitimate for any CKEditor package; generalizes across all versions of this suspicious package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x5e227a=_0xe228;(function(_0x6e81c9,_0x353f58){const _0xc4d5e6=_0xe228,_0x215676=_0x6e81c9();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5e227a=_0xe228;(function(_0x6e81c9,_0x353f58){const _0xc4d5e6=_0xe228,_0x215676=_0x6e81c9();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5e227a=_0xe228;(function(_0x6e81c9,_0x353f58){const _0xc4d5e6=_0xe228,_0x215676=_0x6e81c9();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x592f(_0x2ec2bf,_0x3cd86e){var _0x35f7af=_0x35f7();return _0x592f=function(_0x592fd1,_0x35de89){_0x592fd1=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source with while(!![]) loops is not legitimate for any CKEditor package; generalizes across all versions of this suspicious package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x592f(_0x2ec2bf,_0x3cd86e){var _0x35f7af=_0x35f7();return _0x592f=function(_0x592fd1,_0x35de89){_0x592fd1=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x592f(_0x2ec2bf,_0x3cd86e){var _0x35f7af=_0x35f7();return _0x592f=function(_0x592fd1,_0x35de89){_0x592fd1=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Obfuscated source with while(!![]) loops is not legitimate for any CKEditor package; generalizes across all versions of this suspicious package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x1131fc,_0x18a68b){var _0x44d605=_0x3c4d,_0x3a45fc=_0x1131fc();while(!![]){try{var _0x3fab22=parseInt(_0x44d
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1131fc,_0x18a68b){var _0x44d605=_0x3c4d,_0x3a45fc=_0x1131fc();while(!![]){try{var _0x3fab22=parseInt(_0x44d
[Reject — re-review on republish] (prior reject: AI (semgrep): Hex-prefixed function names (_0x...) confirm javascript-obfuscator output; CKEditor packages are open-source and should never ship obfuscated code.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1131fc,_0x18a68b){var _0x44d605=_0x3c4d,_0x3a45fc=_0x1131fc();while(!![]){try{var _0x3fab22=parseInt(_0x44d
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.