@ckeditor/ckeditor5-export-word
Export to Word feature for CKEditor 5.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/export-word.js | AI (source-diff): CKSource intentionally obfuscates commercial plugin code; package.json declares 'obfuscated: true'. Legal notice in source confirms this is deliberate IP protection. | ai | |
| source-diff | obfuscated-file:src/exportwordui.js | AI (source-diff): CKSource intentionally obfuscates commercial plugin code; package.json declares 'obfuscated: true'. Legal notice in source confirms this is deliberate IP protection. | ai | |
| source-diff | obfuscated-file:src/exportwordcommand.js | AI (source-diff): CKSource intentionally obfuscates commercial plugin code; package.json declares 'obfuscated: true'. Legal notice in source confirms this is deliberate IP protection. | ai | |
| semgrep | semgrep:obfuscation-hex-functions | AI (semgrep): CKSource intentionally obfuscates commercial plugins; package.json declares 'obfuscated: true'. This is stable across all versions of this commercial plugin. | ai | |
| semgrep | semgrep:obfuscation-while-true | AI (semgrep): Same as above — while(!![]) loops are a direct artifact of CKSource's intentional obfuscation of their commercial Export to Word plugin. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-ui | AI (phantom-deps): Same-org CKEditor dependency declared for peer/optional use; consistent with the accepted pattern for other CKEditor phantom deps in this package. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-core | AI (phantom-deps): Same-org CKEditor dependency declared for peer/optional use; consistent with the accepted pattern for other CKEditor phantom deps in this package. | ai | |
| dependencies | unvetted-dep:@ckeditor/ckeditor5-track-changes | AI (dependencies): Same-org CKEditor 5 dependency pinned to matching version; part of CKEditor's coordinated monorepo release pattern. | ai | |
| license | uncommon-license:SEE LICENSE IN LICENSE.md | AI (license): CKEditor commercial plugins use a custom license; this is expected and consistent across all CKEditor premium feature packages. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-merge-fields | AI (phantom-deps): Same-org @ckeditor package; phantom dep pattern is expected in CKEditor's monorepo architecture. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-icons | AI (phantom-deps): Same-org @ckeditor package; phantom dep pattern is expected in CKEditor's monorepo architecture where deps may be declared for type resolution without direct imports. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-collaboration-core | AI (phantom-deps): Same-org @ckeditor package; phantom dep pattern is expected in CKEditor's monorepo architecture. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-comments | AI (phantom-deps): Same-org @ckeditor package; phantom dep pattern is expected in CKEditor's monorepo architecture. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-track-changes | AI (phantom-deps): Same-org @ckeditor package; phantom dep pattern is expected in CKEditor's monorepo architecture. | ai |
Versions (showing 15 of 15)
| Version | Deps | Published |
|---|---|---|
| 48.2.0 | 9 / 0 | |
| 48.1.1 | 9 / 0 | |
| 48.1.0 | 9 / 0 | |
| 48.0.1 | 9 / 0 | |
| 48.0.0 | 9 / 0 | |
| 47.7.2 | 10 / 0 | |
| 47.7.1 | 10 / 0 | |
| 47.7.0 | 10 / 0 | |
| 47.6.2 | 10 / 0 | |
| 47.6.1 | 10 / 0 | |
| 47.6.0 | 10 / 0 | |
| 47.5.0 | 10 / 0 | |
| 47.4.0 | 10 / 0 | |
| 47.3.0 | 10 / 0 | |
| 47.2.0 | 10 / 0 |
v48.2.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v48.1.1
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v48.1.0
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v48.0.1
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v48.0.0
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.7.2
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v47.7.1
19 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3c59(){const _0x38cb9e=['registerTokenUrl','exportWord','108914faGHAK','11037024NBEOFX','plugins','222605Rtq
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3c59(){const _0x38cb9e=['registerTokenUrl','exportWord','108914faGHAK','11037024NBEOFX','plugins','222605Rtq
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3c59(){const _0x38cb9e=['registerTokenUrl','exportWord','108914faGHAK','11037024NBEOFX','plugins','222605Rtq
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x483a(){const _0x536c7f=['set','1406242bjeLhh','stylesheets','status','margin_top','100yOPmaX','stringify','c
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x483a(){const _0x536c7f=['set','1406242bjeLhh','stylesheets','status','margin_top','100yOPmaX','stringify','c
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x483a(){const _0x536c7f=['set','1406242bjeLhh','stylesheets','status','margin_top','100yOPmaX','stringify','c
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x3f3882=_0x5124;(function(_0x266aa1,_0x9df879){const _0x35169d=_0x5124,_0x71db51=_0x266aa1();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3f3882=_0x5124;(function(_0x266aa1,_0x9df879){const _0x35169d=_0x5124,_0x71db51=_0x266aa1();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3f3882=_0x5124;(function(_0x266aa1,_0x9df879){const _0x35169d=_0x5124,_0x71db51=_0x266aa1();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4105(){var _0x3ed6ad=['6709590tZUtFP','3014712INxEQv','4183158UQYcBS','4780jibCZO','21175ZGMwLU','21xEfiGf',
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4105(){var _0x3ed6ad=['6709590tZUtFP','3014712INxEQv','4183158UQYcBS','4780jibCZO','21175ZGMwLU','21xEfiGf',
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x4105(){var _0x3ed6ad=['6709590tZUtFP','3014712INxEQv','4183158UQYcBS','4780jibCZO','21175ZGMwLU','21xEfiGf',
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x2561d5,_0x57ff6f){const _0x3208b4=_0x4cfe,_0x562eb1=_0x2561d5();while(!![]){try{const _0x3df365=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x2561d5,_0x57ff6f){const _0x3208b4=_0x4cfe,_0x562eb1=_0x2561d5();while(!![]){try{const _0x3df365=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x2561d5,_0x57ff6f){const _0x3208b4=_0x4cfe,_0x562eb1=_0x2561d5();while(!![]){try{const _0x3df365=parseInt(_0
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v47.7.0
16 findingsHex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0xe165(_0x2cd97b,_0x48c3d0){const _0x20585b=_0x2058();return _0xe165=function(_0xe1653f,_0x420cf9){_0xe1653f=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0xe165(_0x2cd97b,_0x48c3d0){const _0x20585b=_0x2058();return _0xe165=function(_0xe1653f,_0x420cf9){_0xe1653f=_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0xe165(_0x2cd97b,_0x48c3d0){const _0x20585b=_0x2058();return _0xe165=function(_0xe1653f,_0x420cf9){_0xe1653f=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4e4d55=_0x4ec3;(function(_0x34e053,_0x69bdee){const _0x33e150=_0x4ec3,_0x30f3b0=_0x34e053();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4e4d55=_0x4ec3;(function(_0x34e053,_0x69bdee){const _0x33e150=_0x4ec3,_0x30f3b0=_0x34e053();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4e4d55=_0x4ec3;(function(_0x34e053,_0x69bdee){const _0x33e150=_0x4ec3,_0x30f3b0=_0x34e053();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x1707(_0x2ca781,_0x493328){const _0x395fce=_0x395f();return _0x1707=function(_0x170755,_0x5d8819){_0x170755=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x1707(_0x2ca781,_0x493328){const _0x395fce=_0x395f();return _0x1707=function(_0x170755,_0x5d8819){_0x170755=_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x1707(_0x2ca781,_0x493328){const _0x395fce=_0x395f();return _0x1707=function(_0x170755,_0x5d8819){_0x170755=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x19ed91,_0x1ad58f){var _0x4cff92=_0x401b,_0xccfb13=_0x19ed91();while(!![]){try{var _0x1e0e6a=-parseInt(_0x4c
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x19ed91,_0x1ad58f){var _0x4cff92=_0x401b,_0xccfb13=_0x19ed91();while(!![]){try{var _0x1e0e6a=-parseInt(_0x4c
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x19ed91,_0x1ad58f){var _0x4cff92=_0x401b,_0xccfb13=_0x19ed91();while(!![]){try{var _0x1e0e6a=-parseInt(_0x4c
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x550cc4,_0xa7e998){const _0x30f770=_0x2da3,_0x40ec51=_0x550cc4();while(!![]){try{const _0x4f1c9e=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x550cc4,_0xa7e998){const _0x30f770=_0x2da3,_0x40ec51=_0x550cc4();while(!![]){try{const _0x4f1c9e=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x550cc4,_0xa7e998){const _0x30f770=_0x2da3,_0x40ec51=_0x550cc4();while(!![]){try{const _0x4f1c9e=parseInt(_0
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.6.2
16 findingsHex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1097d8=_0x5778;function _0x5778(_0x96f85e,_0x572322){const _0x4cd728=_0x4cd7();return _0x5778=function(_0x5778c
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x1097d8=_0x5778;function _0x5778(_0x96f85e,_0x572322){const _0x4cd728=_0x4cd7();return _0x5778=function(_0x5778c
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1097d8=_0x5778;function _0x5778(_0x96f85e,_0x572322){const _0x4cd728=_0x4cd7();return _0x5778=function(_0x5778c
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x34ea60=_0x34bc;(function(_0x4c2781,_0x1745f7){const _0x4e35d2=_0x34bc,_0x4aa175=_0x4c2781();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x34ea60=_0x34bc;(function(_0x4c2781,_0x1745f7){const _0x4e35d2=_0x34bc,_0x4aa175=_0x4c2781();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x34ea60=_0x34bc;(function(_0x4c2781,_0x1745f7){const _0x4e35d2=_0x34bc,_0x4aa175=_0x4c2781();while(!![]){try{con
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x32cddb=_0x160e;(function(_0x471e40,_0x2617da){const _0x7b1842=_0x160e,_0x408a54=_0x471e40();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x32cddb=_0x160e;(function(_0x471e40,_0x2617da){const _0x7b1842=_0x160e,_0x408a54=_0x471e40();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x32cddb=_0x160e;(function(_0x471e40,_0x2617da){const _0x7b1842=_0x160e,_0x408a54=_0x471e40();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3a37(_0x66f367,_0x7e8e92){var _0x173e9c=_0x173e();return _0x3a37=function(_0x3a373e,_0x64294b){_0x3a373e=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3a37(_0x66f367,_0x7e8e92){var _0x173e9c=_0x173e();return _0x3a37=function(_0x3a373e,_0x64294b){_0x3a373e=_0x
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3a37(_0x66f367,_0x7e8e92){var _0x173e9c=_0x173e();return _0x3a37=function(_0x3a373e,_0x64294b){_0x3a373e=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x34beb9,_0x209e12){const _0x4298c1=_0x2dff,_0x4bf048=_0x34beb9();while(!![]){try{const _0x187983=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x34beb9,_0x209e12){const _0x4298c1=_0x2dff,_0x4bf048=_0x34beb9();while(!![]){try{const _0x187983=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x34beb9,_0x209e12){const _0x4298c1=_0x2dff,_0x4bf048=_0x34beb9();while(!![]){try{const _0x187983=parseInt(_0
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.6.1
16 findingswhile(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x19172a=_0x178e;(function(_0xd9158c,_0x21c569){const _0x4aeb11=_0x178e,_0x3645e2=_0xd9158c();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x19172a=_0x178e;(function(_0xd9158c,_0x21c569){const _0x4aeb11=_0x178e,_0x3645e2=_0xd9158c();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x19172a=_0x178e;(function(_0xd9158c,_0x21c569){const _0x4aeb11=_0x178e,_0x3645e2=_0xd9158c();while(!![]){try{con
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x212c3c=_0x5a63;(function(_0x20a75f,_0x38169f){const _0x24d8db=_0x5a63,_0x3b86e0=_0x20a75f();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x212c3c=_0x5a63;(function(_0x20a75f,_0x38169f){const _0x24d8db=_0x5a63,_0x3b86e0=_0x20a75f();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x212c3c=_0x5a63;(function(_0x20a75f,_0x38169f){const _0x24d8db=_0x5a63,_0x3b86e0=_0x20a75f();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x12ee(){const _0x2f6010=['Export\x20to\x20Word','401547ARvLBj','commands','6647700hCjjAw','8QyiiEv','772780LV
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x12ee(){const _0x2f6010=['Export\x20to\x20Word','401547ARvLBj','commands','6647700hCjjAw','8QyiiEv','772780LV
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x12ee(){const _0x2f6010=['Export\x20to\x20Word','401547ARvLBj','commands','6647700hCjjAw','8QyiiEv','772780LV
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x59bd(_0x1b445e,_0x1c4c50){var _0x15efe1=_0x15ef();return _0x59bd=function(_0x59bdf9,_0x4bacab){_0x59bdf9=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x59bd(_0x1b445e,_0x1c4c50){var _0x15efe1=_0x15ef();return _0x59bd=function(_0x59bdf9,_0x4bacab){_0x59bdf9=_0x
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x59bd(_0x1b445e,_0x1c4c50){var _0x15efe1=_0x15ef();return _0x59bd=function(_0x59bdf9,_0x4bacab){_0x59bdf9=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x878bc1,_0x34b4d5){const _0xd64c3=_0x571c,_0x422b8c=_0x878bc1();while(!![]){try{const _0x1d500a=-parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x878bc1,_0x34b4d5){const _0xd64c3=_0x571c,_0x422b8c=_0x878bc1();while(!![]){try{const _0x1d500a=-parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x878bc1,_0x34b4d5){const _0xd64c3=_0x571c,_0x422b8c=_0x878bc1();while(!![]){try{const _0x1d500a=-parseInt(_0
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.6.0
16 findingsHex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x436007=_0x5bfe;function _0x32c3(){const _0x25e3e7=['CloudServices','exportWord','isPremiumPlugin','then','21100
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x436007=_0x5bfe;function _0x32c3(){const _0x25e3e7=['CloudServices','exportWord','isPremiumPlugin','then','21100
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x436007=_0x5bfe;function _0x32c3(){const _0x25e3e7=['CloudServices','exportWord','isPremiumPlugin','then','21100
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x22d0(_0x22fef0,_0x407818){const _0x24b6db=_0x24b6();return _0x22d0=function(_0x22d03d,_0x23f614){_0x22d03d=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x22d0(_0x22fef0,_0x407818){const _0x24b6db=_0x24b6();return _0x22d0=function(_0x22d03d,_0x23f614){_0x22d03d=_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x22d0(_0x22fef0,_0x407818){const _0x24b6db=_0x24b6();return _0x22d0=function(_0x22d03d,_0x23f614){_0x22d03d=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x51cd3d=_0x4496;(function(_0x3b07d3,_0x3a8414){const _0x4bd247=_0x4496,_0x51faa0=_0x3b07d3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x51cd3d=_0x4496;(function(_0x3b07d3,_0x3a8414){const _0x4bd247=_0x4496,_0x51faa0=_0x3b07d3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x51cd3d=_0x4496;(function(_0x3b07d3,_0x3a8414){const _0x4bd247=_0x4496,_0x51faa0=_0x3b07d3();while(!![]){try{con
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x5cd577,_0x53d8fa){var _0x35e840=_0x2fac,_0x3e91c5=_0x5cd577();while(!![]){try{var _0x1b4a0f=-parseInt(_0x35
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x5cd577,_0x53d8fa){var _0x35e840=_0x2fac,_0x3e91c5=_0x5cd577();while(!![]){try{var _0x1b4a0f=-parseInt(_0x35
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x5cd577,_0x53d8fa){var _0x35e840=_0x2fac,_0x3e91c5=_0x5cd577();while(!![]){try{var _0x1b4a0f=-parseInt(_0x35
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x1eb102,_0x26814f){const _0x1dd7e7=_0x1b12,_0x4883d8=_0x1eb102();while(!![]){try{const _0x37842f=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1eb102,_0x26814f){const _0x1dd7e7=_0x1b12,_0x4883d8=_0x1eb102();while(!![]){try{const _0x37842f=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1eb102,_0x26814f){const _0x1dd7e7=_0x1b12,_0x4883d8=_0x1eb102();while(!![]){try{const _0x37842f=parseInt(_0
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.5.0
16 findingsHex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x55be6d=_0x4b13;function _0x4b13(_0x4f0a97,_0x4f43e7){const _0x50f98f=_0x50f9();return _0x4b13=function(_0x4b13b
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x55be6d=_0x4b13;function _0x4b13(_0x4f0a97,_0x4f43e7){const _0x50f98f=_0x50f9();return _0x4b13=function(_0x4b13b
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x55be6d=_0x4b13;function _0x4b13(_0x4f0a97,_0x4f43e7){const _0x50f98f=_0x50f9();return _0x4b13=function(_0x4b13b
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2c2e(_0x54a1da,_0x2fe0db){const _0x2c45c0=_0x2c45();return _0x2c2e=function(_0x2c2e57,_0x2520a8){_0x2c2e57=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x2c2e(_0x54a1da,_0x2fe0db){const _0x2c45c0=_0x2c45();return _0x2c2e=function(_0x2c2e57,_0x2520a8){_0x2c2e57=_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2c2e(_0x54a1da,_0x2fe0db){const _0x2c45c0=_0x2c45();return _0x2c2e=function(_0x2c2e57,_0x2520a8){_0x2c2e57=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x598b02=_0x3315;(function(_0x1fd035,_0x125890){const _0x5b7892=_0x3315,_0x5a4e2b=_0x1fd035();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x598b02=_0x3315;(function(_0x1fd035,_0x125890){const _0x5b7892=_0x3315,_0x5a4e2b=_0x1fd035();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x598b02=_0x3315;(function(_0x1fd035,_0x125890){const _0x5b7892=_0x3315,_0x5a4e2b=_0x1fd035();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5868(){var _0x1e072f=['2605779TIYctf','50WeFHpL','104xndVSV','468880KAvCoj','645912ehAkkS','3001800yoQNfA','
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x5868(){var _0x1e072f=['2605779TIYctf','50WeFHpL','104xndVSV','468880KAvCoj','645912ehAkkS','3001800yoQNfA','
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5868(){var _0x1e072f=['2605779TIYctf','50WeFHpL','104xndVSV','468880KAvCoj','645912ehAkkS','3001800yoQNfA','
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x2344ee,_0x1b5119){const _0x43c480=_0x4f19,_0x40741d=_0x2344ee();while(!![]){try{const _0x14957b=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x2344ee,_0x1b5119){const _0x43c480=_0x4f19,_0x40741d=_0x2344ee();while(!![]){try{const _0x14957b=parseInt(_0
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x2344ee,_0x1b5119){const _0x43c480=_0x4f19,_0x40741d=_0x2344ee();while(!![]){try{const _0x14957b=parseInt(_0
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.4.0
16 findingsHex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1ef995=_0x3d5e;function _0x8812(){const _0x69c50b=['exportWord','pluginName','commands','plugins','CloudService
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1ef995=_0x3d5e;function _0x8812(){const _0x69c50b=['exportWord','pluginName','commands','plugins','CloudService
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x1ef995=_0x3d5e;function _0x8812(){const _0x69c50b=['exportWord','pluginName','commands','plugins','CloudService
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x50880a=_0x126a;(function(_0x1746ee,_0x7888df){const _0x15c8ad=_0x126a,_0x41846c=_0x1746ee();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x50880a=_0x126a;(function(_0x1746ee,_0x7888df){const _0x15c8ad=_0x126a,_0x41846c=_0x1746ee();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x50880a=_0x126a;(function(_0x1746ee,_0x7888df){const _0x15c8ad=_0x126a,_0x41846c=_0x1746ee();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x12b8(_0x158140,_0x4275ef){const _0x2ee3ac=_0x2ee3();return _0x12b8=function(_0x12b8f7,_0x334f56){_0x12b8f7=_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x12b8(_0x158140,_0x4275ef){const _0x2ee3ac=_0x2ee3();return _0x12b8=function(_0x12b8f7,_0x334f56){_0x12b8f7=_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x12b8(_0x158140,_0x4275ef){const _0x2ee3ac=_0x2ee3();return _0x12b8=function(_0x12b8f7,_0x334f56){_0x12b8f7=_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2e90(_0x3f8788,_0x306aa0){var _0x4f6121=_0x4f61();return _0x2e90=function(_0x2e90fb,_0xa67109){_0x2e90fb=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x2e90(_0x3f8788,_0x306aa0){var _0x4f6121=_0x4f61();return _0x2e90=function(_0x2e90fb,_0xa67109){_0x2e90fb=_0x
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2e90(_0x3f8788,_0x306aa0){var _0x4f6121=_0x4f61();return _0x2e90=function(_0x2e90fb,_0xa67109){_0x2e90fb=_0x
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4095(){const _0x5c47ed=['DateTimeFormat','previewMode','data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAA
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x4095(){const _0x5c47ed=['DateTimeFormat','previewMode','data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAA
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4095(){const _0x5c47ed=['DateTimeFormat','previewMode','data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAA
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.3.0
16 findingswhile(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x49995d=_0x33b6;(function(_0x1ddaaa,_0x5e6049){const _0x1f352e=_0x33b6,_0x3274c9=_0x1ddaaa();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x49995d=_0x33b6;(function(_0x1ddaaa,_0x5e6049){const _0x1f352e=_0x33b6,_0x3274c9=_0x1ddaaa();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x49995d=_0x33b6;(function(_0x1ddaaa,_0x5e6049){const _0x1f352e=_0x33b6,_0x3274c9=_0x1ddaaa();while(!![]){try{con
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x22ef69=_0xec78;(function(_0x23b4f3,_0x32d6fe){const _0xd711ea=_0xec78,_0x388204=_0x23b4f3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x22ef69=_0xec78;(function(_0x23b4f3,_0x32d6fe){const _0xd711ea=_0xec78,_0x388204=_0x23b4f3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x22ef69=_0xec78;(function(_0x23b4f3,_0x32d6fe){const _0xd711ea=_0xec78,_0x388204=_0x23b4f3();while(!![]){try{con
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0xe37431=_0x3f24;(function(_0x5cf0d3,_0x24d7ee){const _0xd2794a=_0x3f24,_0x2d367b=_0x5cf0d3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xe37431=_0x3f24;(function(_0x5cf0d3,_0x24d7ee){const _0xd2794a=_0x3f24,_0x2d367b=_0x5cf0d3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xe37431=_0x3f24;(function(_0x5cf0d3,_0x24d7ee){const _0xd2794a=_0x3f24,_0x2d367b=_0x5cf0d3();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x570e(){var _0xdf70c1=['1080029ulcDAJ','1254320nHhacB','9820UYZZbG','2217YCGBJG','12872349zCPFaq','4639405TCG
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x570e(){var _0xdf70c1=['1080029ulcDAJ','1254320nHhacB','9820UYZZbG','2217YCGBJG','12872349zCPFaq','4639405TCG
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x570e(){var _0xdf70c1=['1080029ulcDAJ','1254320nHhacB','9820UYZZbG','2217YCGBJG','12872349zCPFaq','4639405TCG
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0xfe36(){const _0x530ac2=['config','getDefaultValues','90gHVkjj','16228PoMvZn','locale','mergeFields','keys','
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0xfe36(){const _0x530ac2=['config','getDefaultValues','90gHVkjj','16228PoMvZn','locale','mergeFields','keys','
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0xfe36(){const _0x530ac2=['config','getDefaultValues','90gHVkjj','16228PoMvZn','locale','mergeFields','keys','
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v47.2.0
16 findingsHex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17d6d1=_0x39c4;function _0x25be(){const _0x5f279b=['commands','then','isOfficialPlugin','2530515wSduim','720000
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x17d6d1=_0x39c4;function _0x25be(){const _0x5f279b=['commands','then','isOfficialPlugin','2530515wSduim','720000
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17d6d1=_0x39c4;function _0x25be(){const _0x5f279b=['commands','then','isOfficialPlugin','2530515wSduim','720000
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x334f68=_0x1a48;(function(_0x333ed2,_0x54732c){const _0x5f3963=_0x1a48,_0x483327=_0x333ed2();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x334f68=_0x1a48;(function(_0x333ed2,_0x54732c){const _0x5f3963=_0x1a48,_0x483327=_0x333ed2();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x334f68=_0x1a48;(function(_0x333ed2,_0x54732c){const _0x5f3963=_0x1a48,_0x483327=_0x333ed2();while(!![]){try{con
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x44de13=_0x3e3e;function _0x21e8(){const _0x4d5dce=['children','40QTUwrX','set','53874630jiafTG','pluginName','_
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x44de13=_0x3e3e;function _0x21e8(){const _0x4d5dce=['children','40QTUwrX','set','53874630jiafTG','pluginName','_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x44de13=_0x3e3e;function _0x21e8(){const _0x4d5dce=['children','40QTUwrX','set','53874630jiafTG','pluginName','_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x152d(_0x977825,_0x39916a){var _0x40a181=_0x40a1();return _0x152d=function(_0x152d64,_0x323dc1){_0x152d64=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x152d(_0x977825,_0x39916a){var _0x40a181=_0x40a1();return _0x152d=function(_0x152d64,_0x323dc1){_0x152d64=_0x
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x152d(_0x977825,_0x39916a){var _0x40a181=_0x40a1();return _0x152d=function(_0x152d64,_0x323dc1){_0x152d64=_0x
while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0xc491e2,_0x2888a3){const _0x27234c=_0x2216,_0x3a7cca=_0xc491e2();while(!![]){try{const _0x49bcd2=-parseInt(_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0xc491e2,_0x2888a3){const _0x27234c=_0x2216,_0x3a7cca=_0xc491e2();while(!![]){try{const _0x49bcd2=-parseInt(_
Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0xc491e2,_0x2888a3){const _0x27234c=_0x2216,_0x3a7cca=_0xc491e2();while(!![]){try{const _0x49bcd2=-parseInt(_
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.