← Home

@ckeditor/ckeditor5-format-painter

Format painter feature for CKEditor 5.

9
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

ckeditor

Keywords

ckeditorckeditor5ckeditor 5ckeditor5-featureckeditor5-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:src/formatpainterediting.js AI (source-diff): CKSource commercial obfuscation for license protection; benign, stable across versions. ai
source-diff obfuscated-file:build/format-painter.js AI (source-diff): Minified build output with CKSource license banner; benign. ai
source-diff obfuscated-file:src/formatpainterui.js AI (source-diff): CKSource commercial obfuscation for license protection; benign. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): Obfuscator signature from CKSource license protection; no payload. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): javascript-obfuscator output is CKSource's documented license protection; no malicious behavior. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-engine AI (phantom-deps): CKEditor monorepo plugin; same-org deps declared for resolution. Stable false positive for this package. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-icons AI (phantom-deps): CKEditor monorepo plugin; same-org deps declared for resolution. Stable false positive for this package. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-ui AI (phantom-deps): CKEditor monorepo plugin; same-org deps declared for resolution but may not be directly imported in every plugin's source. Stable false positive for this package. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-remove-format AI (phantom-deps): CKEditor monorepo plugin; same-org deps declared for resolution. Stable false positive for this package. ai

Versions (showing 9 of 9)

Version Deps Published
48.3.1 6 / 0
48.3.0 6 / 0
48.2.0 6 / 0
48.1.1 6 / 0
48.1.0 6 / 0
48.0.1 6 / 0
48.0.0 6 / 0
47.7.3 6 / 0
47.6.2 6 / 0

v48.3.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.7.3

61 findings
HIGH New obfuscated file: build/format-painter.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/formatpainterediting.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH New obfuscated file: src/formatpainterui.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.

HIGH obfuscation-hex-functions: src/copyformatcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x499808=_0x3057;function _0x3057(_0x8c1bd9,_0x322a21){const _0x153a1b=_0x153a();return _0x3057=function(_0x30578

HIGH obfuscation-while-true: src/copyformatcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x499808=_0x3057;function _0x3057(_0x8c1bd9,_0x322a21){const _0x153a1b=_0x153a();return _0x3057=function(_0x30578

HIGH obfuscation-hex-functions: src/copyformatcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x499808=_0x3057;function _0x3057(_0x8c1bd9,_0x322a21){const _0x153a1b=_0x153a();return _0x3057=function(_0x30578

HIGH obfuscation-while-true: src/formatpainter.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x5278f7=_0x2df0;(function(_0x544edb,_0x5ddcf9){var _0x249826=_0x2df0,_0x115256=_0x544edb();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/formatpainter.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x5278f7=_0x2df0;(function(_0x544edb,_0x5ddcf9){var _0x249826=_0x2df0,_0x115256=_0x544edb();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/formatpainter.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x5278f7=_0x2df0;(function(_0x544edb,_0x5ddcf9){var _0x249826=_0x2df0,_0x115256=_0x544edb();while(!![]){try{var _0x

HIGH obfuscation-while-true: src/formatpainterediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x2bc6be=_0xa291;(function(_0x17c90b,_0x4eeb17){const _0x1a5374=_0xa291,_0x23aefc=_0x17c90b();while(!![]){try{con

HIGH obfuscation-hex-functions: src/formatpainterediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2bc6be=_0xa291;(function(_0x17c90b,_0x4eeb17){const _0x1a5374=_0xa291,_0x23aefc=_0x17c90b();while(!![]){try{con

HIGH obfuscation-hex-functions: src/formatpainterediting.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2bc6be=_0xa291;(function(_0x17c90b,_0x4eeb17){const _0x1a5374=_0xa291,_0x23aefc=_0x17c90b();while(!![]){try{con

HIGH obfuscation-hex-functions: src/formatpainterui.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-while-true: src/formatpainterui.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/formatpainterui.js:24 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 22 | */ 23 | const _0x2f2b05=_0x18ef;function _0x1cce(){const _0x2a2629=['_pasteFormatting','Esc','editor','editing','292567FeKNXD',' > 24 | _0x43c249(_0x152e7c){static get[_0x2f2b05(0xbe)](){const _0x4f1abf=_0x2f2b05;return _0x4f1abf(0xe2);}static get[_0x2f2b0

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x36d8(){var _0x32a588=['3589705CvkXme','24scuHAb','1319478iBirfJ','21778KGnrtt','106965BisrXC','1266NjgvKq','

HIGH obfuscation-while-true: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x36d8(){var _0x32a588=['3589705CvkXme','24scuHAb','1319478iBirfJ','21778KGnrtt','106965BisrXC','1266NjgvKq','

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x36d8(){var _0x32a588=['3589705CvkXme','24scuHAb','1319478iBirfJ','21778KGnrtt','106965BisrXC','1266NjgvKq','

HIGH obfuscation-while-true: src/legacyerrors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x49a06e,_0x335bc6){var _0xad58cd=_0x30a8,_0x304589=_0x49a06e();while(!![]){try{var _0x86fa0a=-parseInt(_0xad

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x49a06e,_0x335bc6){var _0xad58cd=_0x30a8,_0x304589=_0x49a06e();while(!![]){try{var _0x86fa0a=-parseInt(_0xad

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x49a06e,_0x335bc6){var _0xad58cd=_0x30a8,_0x304589=_0x49a06e();while(!![]){try{var _0x86fa0a=-parseInt(_0xad

HIGH obfuscation-hex-functions: src/pasteformatcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x33418e=_0x1065;function _0x1065(_0x5447d0,_0x5256c7){const _0x32ee73=_0x32ee();return _0x1065=function(_0x1065c

HIGH obfuscation-while-true: src/pasteformatcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x33418e=_0x1065;function _0x1065(_0x5447d0,_0x5256c7){const _0x32ee73=_0x32ee();return _0x1065=function(_0x1065c

HIGH obfuscation-hex-functions: src/pasteformatcommand.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x33418e=_0x1065;function _0x1065(_0x5447d0,_0x5256c7){const _0x32ee73=_0x32ee();return _0x1065=function(_0x1065c

HIGH obfuscation-while-true: src/utils.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Confirmed javascript-obfuscator signature alongside hex-function obfuscation; disqualifying for all versions.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x56a2ba=_0x2e9a;(function(_0x295308,_0x54b45d){const _0x4463ea=_0x2e9a,_0x369144=_0x295308();while(!![]){try{con

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x56a2ba=_0x2e9a;(function(_0x295308,_0x54b45d){const _0x4463ea=_0x2e9a,_0x369144=_0x295308();while(!![]){try{con

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

[Reject — re-review on republish] (prior reject: AI (semgrep): Package self-declares obfuscation and ships javascript-obfuscator output; this is a disqualifying signal for any version of this package.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x56a2ba=_0x2e9a;(function(_0x295308,_0x54b45d){const _0x4463ea=_0x2e9a,_0x369144=_0x295308();while(!![]){try{con

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.