← Home

@ckeditor/ckeditor5-merge-fields

Merge fields feature for CKEditor 5.

14
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ckeditor

Keywords

ckeditorckeditor5ckeditor 5ckeditor5-featureckeditor5-plugin

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
publish-pattern dormant-publish AI (publish-pattern): Package has 1039 versions in registry indicating active publishing history; dormancy reflects analyzer tracking gap, not actual inactivity. ai
source-diff obfuscated-file:build/merge-fields.js AI (source-diff): build/merge-fields.js is a pre-built DLL bundle; obfuscation is intentional per CKSource commercial licensing. Content shows legitimate translation strings and SVG assets. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-ui AI (phantom-deps): Same-org CKEditor peer dependency declared for compatibility; resolved via umbrella ckeditor5 package in monorepo structure. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-core AI (phantom-deps): Same-org CKEditor peer dependency; normal monorepo pattern for CKEditor 5 plugins. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-image AI (phantom-deps): Same-org CKEditor peer dependency; normal monorepo pattern for CKEditor 5 plugins. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-widget AI (phantom-deps): Same-org CKEditor peer dependency; normal monorepo pattern for CKEditor 5 plugins. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-mention AI (phantom-deps): Same-org CKEditor peer dependency; normal monorepo pattern for CKEditor 5 plugins. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): CKEditor commercial plugins explicitly declare obfuscated:true in package.json; javascript-obfuscator output is intentional IP protection by CKSource, not malware. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): CKEditor commercial plugins explicitly declare obfuscated:true in package.json; hex-prefixed names are intentional javascript-obfuscator output by CKSource. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-ui AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-core AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-image AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-utils AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-engine AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-widget AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
dependencies unvetted-dep:@ckeditor/ckeditor5-mention AI (dependencies): Same-org CKEditor dependency published by CKSource at matching version; not an independent risk. ai
phantom-deps phantom-dep:es-toolkit AI (phantom-deps): es-toolkit is a legitimate utility library; phantom classification likely due to indirect import patterns in CKEditor's build system. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-icons AI (phantom-deps): Same-org CKEditor icons package; phantom classification is a build artifact, not a security concern. ai

Versions (showing 14 of 14)

Version Deps Published
48.2.0 9 / 0
48.1.1 9 / 0
48.1.0 9 / 0
48.0.1 9 / 0
48.0.0 9 / 0
47.7.2 9 / 0
47.7.0 9 / 0
47.6.2 9 / 0
47.6.1 9 / 0
47.6.0 9 / 0
47.5.0 9 / 0
47.4.0 9 / 0
47.3.0 9 / 0
47.2.0 9 / 0

v48.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.1.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.1.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v48.0.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v47.7.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.7.0

67 findings
HIGH New obfuscated file: build/merge-fields.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH obfuscation-while-true: src/index.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x161993,_0x2e4b48){var _0x485916=_0x4329,_0x2e6f67=_0x161993();while(!![]){try{var _0x46b76b=parseInt(_0x485

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x161993,_0x2e4b48){var _0x485916=_0x4329,_0x2e6f67=_0x161993();while(!![]){try{var _0x46b76b=parseInt(_0x485

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x161993,_0x2e4b48){var _0x485916=_0x4329,_0x2e6f67=_0x161993();while(!![]){try{var _0x46b76b=parseInt(_0x485

HIGH obfuscation-hex-functions: src/insertmergefieldblockcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3d6c33=_0x5359;function _0x2d70(){const _0x5c0e2b=['29485884UcxZWr','document','1XSDrsu','1057240vRPgxa','40mQR

HIGH obfuscation-hex-functions: src/insertmergefieldblockcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3d6c33=_0x5359;function _0x2d70(){const _0x5c0e2b=['29485884UcxZWr','document','1XSDrsu','1057240vRPgxa','40mQR

HIGH obfuscation-while-true: src/insertmergefieldblockcommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x3d6c33=_0x5359;function _0x2d70(){const _0x5c0e2b=['29485884UcxZWr','document','1XSDrsu','1057240vRPgxa','40mQR

HIGH obfuscation-hex-functions: src/insertmergefieldcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3da5(_0x4eb105,_0x51bab9){const _0x150327=_0x1503();return _0x3da5=function(_0x3da5a1,_0x3c686b){_0x3da5a1=_

HIGH obfuscation-while-true: src/insertmergefieldcommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3da5(_0x4eb105,_0x51bab9){const _0x150327=_0x1503();return _0x3da5=function(_0x3da5a1,_0x3c686b){_0x3da5a1=_

HIGH obfuscation-hex-functions: src/insertmergefieldcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3da5(_0x4eb105,_0x51bab9){const _0x150327=_0x1503();return _0x3da5=function(_0x3da5a1,_0x3c686b){_0x3da5a1=_

HIGH obfuscation-while-true: src/insertmergefieldimagecommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4ceb8e=_0x22df;(function(_0x213c47,_0xad0257){const _0x1d93bf=_0x22df,_0x108c33=_0x213c47();while(!![]){try{con

HIGH obfuscation-hex-functions: src/insertmergefieldimagecommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4ceb8e=_0x22df;(function(_0x213c47,_0xad0257){const _0x1d93bf=_0x22df,_0x108c33=_0x213c47();while(!![]){try{con

HIGH obfuscation-hex-functions: src/insertmergefieldimagecommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4ceb8e=_0x22df;(function(_0x213c47,_0xad0257){const _0x1d93bf=_0x22df,_0x108c33=_0x213c47();while(!![]){try{con

HIGH obfuscation-while-true: src/mergefields.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0xdc98e8=_0x4493;(function(_0xe667e8,_0x985476){var _0x5475e2=_0x4493,_0x361273=_0xe667e8();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/mergefields.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0xdc98e8=_0x4493;(function(_0xe667e8,_0x985476){var _0x5475e2=_0x4493,_0x361273=_0xe667e8();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/mergefields.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0xdc98e8=_0x4493;(function(_0xe667e8,_0x985476){var _0x5475e2=_0x4493,_0x361273=_0xe667e8();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-while-true: src/mergefieldsediting.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x17847e=_0x26a9;function _0x21d7(){const _0xa0512b=['previewMode','data','match','WARNING_MISSING_DEFAULT_VALUE'

HIGH obfuscation-while-true: src/mergefieldsui.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x3c06d2=_0x1e6b;(function(_0x18ebb4,_0x2c9e28){const _0x1ee9e9=_0x1e6b,_0x3ae830=_0x18ebb4();while(!![]){try{con

HIGH obfuscation-hex-functions: src/mergefieldsui.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3c06d2=_0x1e6b;(function(_0x18ebb4,_0x2c9e28){const _0x1ee9e9=_0x1e6b,_0x3ae830=_0x18ebb4();while(!![]){try{con

HIGH obfuscation-hex-functions: src/mergefieldsui.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3c06d2=_0x1e6b;(function(_0x18ebb4,_0x2c9e28){const _0x1ee9e9=_0x1e6b,_0x3ae830=_0x18ebb4();while(!![]){try{con

HIGH obfuscation-hex-functions: src/mergefieldsui.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3c06d2=_0x1e6b;(function(_0x18ebb4,_0x2c9e28){const _0x1ee9e9=_0x1e6b,_0x3ae830=_0x18ebb4();while(!![]){try{con

HIGH obfuscation-hex-functions: src/previewmergefieldscommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5398(){const _0xdc6096=['value','bind','14qGJZlQ','929210EJTJiN','342251apENtl','1383etgOwM','2394xvBmuQ','e

HIGH obfuscation-while-true: src/previewmergefieldscommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x5398(){const _0xdc6096=['value','bind','14qGJZlQ','929210EJTJiN','342251apENtl','1383etgOwM','2394xvBmuQ','e

HIGH obfuscation-hex-functions: src/previewmergefieldscommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5398(){const _0xdc6096=['value','bind','14qGJZlQ','929210EJTJiN','342251apENtl','1383etgOwM','2394xvBmuQ','e

HIGH obfuscation-hex-functions: src/ui/mergefieldslistview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5971(_0x33a111,_0x5bb62c){var _0x562c5c=_0x562c();return _0x5971=function(_0x59719b,_0xac2476){_0x59719b=_0x

HIGH obfuscation-while-true: src/ui/mergefieldslistview.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x5971(_0x33a111,_0x5bb62c){var _0x562c5c=_0x562c();return _0x5971=function(_0x59719b,_0xac2476){_0x59719b=_0x

HIGH obfuscation-hex-functions: src/ui/mergefieldslistview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5971(_0x33a111,_0x5bb62c){var _0x562c5c=_0x562c();return _0x5971=function(_0x59719b,_0xac2476){_0x59719b=_0x

HIGH obfuscation-hex-functions: src/ui/mergefieldspanelview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2f05(_0x116dff,_0x36798e){const _0x12bf75=_0x12bf();return _0x2f05=function(_0x2f052d,_0x20d838){_0x2f052d=_

HIGH obfuscation-hex-functions: src/ui/mergefieldspanelview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2f05(_0x116dff,_0x36798e){const _0x12bf75=_0x12bf();return _0x2f05=function(_0x2f052d,_0x20d838){_0x2f052d=_

HIGH obfuscation-while-true: src/ui/mergefieldspanelview.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x2f05(_0x116dff,_0x36798e){const _0x12bf75=_0x12bf();return _0x2f05=function(_0x2f052d,_0x20d838){_0x2f052d=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.6.2

67 findings
HIGH New obfuscated file: build/merge-fields.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH obfuscation-while-true: src/index.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x31a90a,_0x289f30){var _0x254c5d=_0x37b1,_0x316d78=_0x31a90a();while(!![]){try{var _0x3a605e=parseInt(_0x254

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x31a90a,_0x289f30){var _0x254c5d=_0x37b1,_0x316d78=_0x31a90a();while(!![]){try{var _0x3a605e=parseInt(_0x254

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x31a90a,_0x289f30){var _0x254c5d=_0x37b1,_0x316d78=_0x31a90a();while(!![]){try{var _0x3a605e=parseInt(_0x254

HIGH obfuscation-while-true: src/insertmergefieldblockcommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4cdd63=_0x1dba;(function(_0x595fbd,_0x48a6ea){const _0x3c33c4=_0x1dba,_0x3908f9=_0x595fbd();while(!![]){try{con

HIGH obfuscation-hex-functions: src/insertmergefieldblockcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4cdd63=_0x1dba;(function(_0x595fbd,_0x48a6ea){const _0x3c33c4=_0x1dba,_0x3908f9=_0x595fbd();while(!![]){try{con

HIGH obfuscation-hex-functions: src/insertmergefieldblockcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4cdd63=_0x1dba;(function(_0x595fbd,_0x48a6ea){const _0x3c33c4=_0x1dba,_0x3908f9=_0x595fbd();while(!![]){try{con

HIGH obfuscation-hex-functions: src/insertmergefieldcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4873(_0x57d50c,_0x6f0740){const _0x2df91e=_0x2df9();return _0x4873=function(_0x48737a,_0xd2a895){_0x48737a=_

HIGH obfuscation-while-true: src/insertmergefieldcommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x4873(_0x57d50c,_0x6f0740){const _0x2df91e=_0x2df9();return _0x4873=function(_0x48737a,_0xd2a895){_0x48737a=_

HIGH obfuscation-hex-functions: src/insertmergefieldcommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x4873(_0x57d50c,_0x6f0740){const _0x2df91e=_0x2df9();return _0x4873=function(_0x48737a,_0xd2a895){_0x48737a=_

HIGH obfuscation-hex-functions: src/insertmergefieldimagecommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x129756=_0x500e;function _0x500e(_0x979409,_0x351773){const _0x5b1e79=_0x5b1e();return _0x500e=function(_0x500e0

HIGH obfuscation-while-true: src/insertmergefieldimagecommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x129756=_0x500e;function _0x500e(_0x979409,_0x351773){const _0x5b1e79=_0x5b1e();return _0x500e=function(_0x500e0

HIGH obfuscation-hex-functions: src/insertmergefieldimagecommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x129756=_0x500e;function _0x500e(_0x979409,_0x351773){const _0x5b1e79=_0x5b1e();return _0x500e=function(_0x500e0

HIGH obfuscation-while-true: src/mergefields.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x31c7a6=_0x2192;(function(_0x3c728d,_0x34c702){var _0x39ebe3=_0x2192,_0x585caf=_0x3c728d();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/mergefields.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x31c7a6=_0x2192;(function(_0x3c728d,_0x34c702){var _0x39ebe3=_0x2192,_0x585caf=_0x3c728d();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/mergefields.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x31c7a6=_0x2192;(function(_0x3c728d,_0x34c702){var _0x39ebe3=_0x2192,_0x585caf=_0x3c728d();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-while-true: src/mergefieldsediting.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-hex-functions: src/mergefieldsediting.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3a4dce=_0x3e8d;function _0x5b77(){const _0x20e9f5=['slice','setCustomProperty','join','imageBlock','insertMerge

HIGH obfuscation-while-true: src/mergefieldsui.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4ccf80=_0x4e56;(function(_0xb78478,_0x167fa1){const _0x5edc39=_0x4e56,_0x40e262=_0xb78478();while(!![]){try{con

HIGH obfuscation-hex-functions: src/mergefieldsui.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4ccf80=_0x4e56;(function(_0xb78478,_0x167fa1){const _0x5edc39=_0x4e56,_0x40e262=_0xb78478();while(!![]){try{con

HIGH obfuscation-hex-functions: src/mergefieldsui.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4ccf80=_0x4e56;(function(_0xb78478,_0x167fa1){const _0x5edc39=_0x4e56,_0x40e262=_0xb78478();while(!![]){try{con

HIGH obfuscation-hex-functions: src/mergefieldsui.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4ccf80=_0x4e56;(function(_0xb78478,_0x167fa1){const _0x5edc39=_0x4e56,_0x40e262=_0xb78478();while(!![]){try{con

HIGH obfuscation-hex-functions: src/previewmergefieldscommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5e2157=_0x5c80;function _0x5c80(_0xd47dd3,_0x225025){const _0xf7faa6=_0xf7fa();return _0x5c80=function(_0x5c80f

HIGH obfuscation-hex-functions: src/previewmergefieldscommand.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5e2157=_0x5c80;function _0x5c80(_0xd47dd3,_0x225025){const _0xf7faa6=_0xf7fa();return _0x5c80=function(_0x5c80f

HIGH obfuscation-while-true: src/previewmergefieldscommand.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x5e2157=_0x5c80;function _0x5c80(_0xd47dd3,_0x225025){const _0xf7faa6=_0xf7fa();return _0x5c80=function(_0x5c80f

HIGH obfuscation-while-true: src/ui/mergefieldslistview.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x1dcdad=_0xb20b;(function(_0x406ce7,_0x427203){var _0x4ca942=_0xb20b,_0x11610a=_0x406ce7();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/ui/mergefieldslistview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x1dcdad=_0xb20b;(function(_0x406ce7,_0x427203){var _0x4ca942=_0xb20b,_0x11610a=_0x406ce7();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/ui/mergefieldslistview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x1dcdad=_0xb20b;(function(_0x406ce7,_0x427203){var _0x4ca942=_0xb20b,_0x11610a=_0x406ce7();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/ui/mergefieldspanelview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5b88(){const _0x3a8df3=['set','div','ck-merge-fields-form','8FcSQTh','6612900OeyVqY','ck-merge-fields-form__

HIGH obfuscation-while-true: src/ui/mergefieldspanelview.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x5b88(){const _0x3a8df3=['set','div','ck-merge-fields-form','8FcSQTh','6612900OeyVqY','ck-merge-fields-form__

HIGH obfuscation-hex-functions: src/ui/mergefieldspanelview.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5b88(){const _0x3a8df3=['set','div','ck-merge-fields-form','8FcSQTh','6612900OeyVqY','ck-merge-fields-form__

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v47.4.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v47.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v47.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.