← Home

@ckeditor/ckeditor5-paste-from-office-enhanced

Enhanced paste from Office feature for CKEditor 5.

14
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ckeditor

Keywords

ckeditorckeditor5ckeditor 5ckeditor5-featureckeditor5-pluginWYSIWYGtextrich-textrichtextckeditoreditoreditinghtmlcontentEditablepaste from Office enhanced

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:build/paste-from-office-enhanced.js AI (source-diff): Build artifact from CKSource commercial plugin. Minified bundle is expected in the build/ directory. Not malware. ai
source-diff obfuscated-file:src/normalizers/inliner/utils.js AI (source-diff): CKSource commercial plugin with declared obfuscation. Legal copyright notice present. Not malware. ai
source-diff obfuscated-file:src/normalizers/propagator/utils.js AI (source-diff): CKSource commercial plugin with declared obfuscation. Legal copyright notice present. Not malware. ai
semgrep semgrep:obfuscation-hex-functions AI (semgrep): CKSource intentionally obfuscates commercial plugins; package.json declares 'obfuscated: true'. This is IP protection, not malware. Stable for this package. ai
semgrep semgrep:obfuscation-while-true AI (semgrep): while(!![]) is a javascript-obfuscator artifact used intentionally by CKSource for commercial plugin IP protection. Stable false positive for this package. ai
source-diff obfuscated-file:src/pastefromofficeenhancedinliner.js AI (source-diff): CKSource commercial plugin with declared obfuscation ('obfuscated: true' in package.json). Legal copyright notice present. Not malware. ai
source-diff obfuscated-file:src/pastefromofficeenhancedpropagator.js AI (source-diff): CKSource commercial plugin with declared obfuscation. Legal copyright notice present. Not malware. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-clipboard AI (phantom-deps): Same-org CKEditor package; phantom dep finding is a false positive for this monorepo-style package family. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-utils AI (phantom-deps): Same-org CKEditor package; phantom dep finding is a false positive for this monorepo-style package family. ai

Versions (showing 14 of 14)

Version Deps Published
48.2.0 5 / 0
48.1.1 5 / 0
48.1.0 5 / 0
48.0.1 5 / 0
48.0.0 5 / 0
47.7.2 5 / 0
47.7.0 5 / 0
47.6.2 5 / 0
47.6.1 5 / 0
47.6.0 5 / 0
47.5.0 5 / 0
47.4.0 5 / 0
47.3.0 5 / 0
47.2.0 5 / 0

v48.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.1.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.1.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v48.0.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v47.7.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.7.0

69 findings
HIGH New obfuscated file: build/paste-from-office-enhanced.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/pastefromofficeenhancedinliner.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/pastefromofficeenhancedpropagator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/normalizers/inliner/utils.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/normalizers/propagator/utils.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH obfuscation-while-true: src/index.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x1b910e,_0x49e43f){var _0x4b756d=_0x4b19,_0x18c257=_0x1b910e();while(!![]){try{var _0x34d39d=-parseInt(_0x4b

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1b910e,_0x49e43f){var _0x4b756d=_0x4b19,_0x18c257=_0x1b910e();while(!![]){try{var _0x34d39d=-parseInt(_0x4b

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x1b910e,_0x49e43f){var _0x4b756d=_0x4b19,_0x18c257=_0x1b910e();while(!![]){try{var _0x34d39d=-parseInt(_0x4b

HIGH obfuscation-while-true: src/legacyerrors.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x129778,_0x1e75b3){var _0x16d904=_0x19c7,_0x1604f1=_0x129778();while(!![]){try{var _0x44e850=parseInt(_0x16d

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x129778,_0x1e75b3){var _0x16d904=_0x19c7,_0x1604f1=_0x129778();while(!![]){try{var _0x44e850=parseInt(_0x16d

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x129778,_0x1e75b3){var _0x16d904=_0x19c7,_0x1604f1=_0x129778();while(!![]){try{var _0x44e850=parseInt(_0x16d

HIGH obfuscation-hex-functions: src/normalizers/inliner/msofficestylesinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1e406c=_0x272d;function _0x5451(){const _0x37ae06=['684HfvDmE','38760TwGLqZ','3183775BcHTrb','item','document',

HIGH obfuscation-while-true: src/normalizers/inliner/msofficestylesinliner.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x1e406c=_0x272d;function _0x5451(){const _0x37ae06=['684HfvDmE','38760TwGLqZ','3183775BcHTrb','item','document',

HIGH obfuscation-hex-functions: src/normalizers/inliner/msofficestylesinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x1e406c=_0x272d;function _0x5451(){const _0x37ae06=['684HfvDmE','38760TwGLqZ','3183775BcHTrb','item','document',

HIGH obfuscation-while-true: src/normalizers/inliner/utils.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x271a44,_0x345b6d){const _0x5b5c8f=_0x48d5,_0x964d2=_0x271a44();while(!![]){try{const _0x5cffe0=-parseInt(_0

HIGH obfuscation-hex-functions: src/normalizers/inliner/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x271a44,_0x345b6d){const _0x5b5c8f=_0x48d5,_0x964d2=_0x271a44();while(!![]){try{const _0x5cffe0=-parseInt(_0

HIGH obfuscation-hex-functions: src/normalizers/inliner/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x271a44,_0x345b6d){const _0x5b5c8f=_0x48d5,_0x964d2=_0x271a44();while(!![]){try{const _0x5cffe0=-parseInt(_0

HIGH obfuscation-while-true: src/normalizers/propagator/msofficeinlinestylepropagator.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x3f1e74=_0x33c7;(function(_0x423a1e,_0x1895c1){const _0x3c406f=_0x33c7,_0x5aa7f4=_0x423a1e();while(!![]){try{con

HIGH obfuscation-hex-functions: src/normalizers/propagator/msofficeinlinestylepropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3f1e74=_0x33c7;(function(_0x423a1e,_0x1895c1){const _0x3c406f=_0x33c7,_0x5aa7f4=_0x423a1e();while(!![]){try{con

HIGH obfuscation-hex-functions: src/normalizers/propagator/msofficeinlinestylepropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3f1e74=_0x33c7;(function(_0x423a1e,_0x1895c1){const _0x3c406f=_0x33c7,_0x5aa7f4=_0x423a1e();while(!![]){try{con

HIGH obfuscation-while-true: src/normalizers/propagator/utils.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x2500ca=_0x3c85;(function(_0x11a73d,_0x3d6be4){const _0x5a684e=_0x3c85,_0x3a2e9a=_0x11a73d();while(!![]){try{con

HIGH obfuscation-hex-functions: src/normalizers/propagator/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2500ca=_0x3c85;(function(_0x11a73d,_0x3d6be4){const _0x5a684e=_0x3c85,_0x3a2e9a=_0x11a73d();while(!![]){try{con

HIGH obfuscation-hex-functions: src/normalizers/propagator/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2500ca=_0x3c85;(function(_0x11a73d,_0x3d6be4){const _0x5a684e=_0x3c85,_0x3a2e9a=_0x11a73d();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhanced.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x29fdee=_0x3069;function _0x3069(_0x3bb35b,_0x406dbd){var _0x5d4ed9=_0x5d4e();return _0x3069=function(_0x3069a4,_0

HIGH obfuscation-while-true: src/pastefromofficeenhanced.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x29fdee=_0x3069;function _0x3069(_0x3bb35b,_0x406dbd){var _0x5d4ed9=_0x5d4e();return _0x3069=function(_0x3069a4,_0

HIGH obfuscation-hex-functions: src/pastefromofficeenhanced.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x29fdee=_0x3069;function _0x3069(_0x3bb35b,_0x406dbd){var _0x5d4ed9=_0x5d4e();return _0x3069=function(_0x3069a4,_0

HIGH obfuscation-while-true: src/pastefromofficeenhancedinliner.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x2c80f8=_0x2992;(function(_0x4053d5,_0x3fb3a7){const _0xa1cf93=_0x2992,_0x187e91=_0x4053d5();while(!![]){try{con

HIGH obfuscation-while-true: src/pastefromofficeenhancedpropagator.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x4de48b=_0x7cfd;(function(_0x4caf9c,_0x2085c7){const _0x32fad1=_0x7cfd,_0x7b995a=_0x4caf9c();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedpropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4de48b=_0x7cfd;(function(_0x4caf9c,_0x2085c7){const _0x32fad1=_0x7cfd,_0x7b995a=_0x4caf9c();while(!![]){try{con

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedpropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x4de48b=_0x7cfd;(function(_0x4caf9c,_0x2085c7){const _0x32fad1=_0x7cfd,_0x7b995a=_0x4caf9c();while(!![]){try{con

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x59ab(){const _0x53e043=['152FYunEc','test','3716vbjQTo','223341hQdZpn','64924IfKCKH','848364swMPlq','3816590

HIGH obfuscation-while-true: src/utils.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x59ab(){const _0x53e043=['152FYunEc','test','3716vbjQTo','223341hQdZpn','64924IfKCKH','848364swMPlq','3816590

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x59ab(){const _0x53e043=['152FYunEc','test','3716vbjQTo','223341hQdZpn','64924IfKCKH','848364swMPlq','3816590

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.6.2

69 findings
HIGH New obfuscated file: build/paste-from-office-enhanced.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/pastefromofficeenhancedinliner.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/pastefromofficeenhancedpropagator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/normalizers/inliner/utils.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: src/normalizers/propagator/utils.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3189(){var _0x496294=['518601GtsrmR','10SdkowX','3360198oQnEay','4871112EpSpmI','475051vlFVbU','5hTZwTJ','7W

HIGH obfuscation-while-true: src/index.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3189(){var _0x496294=['518601GtsrmR','10SdkowX','3360198oQnEay','4871112EpSpmI','475051vlFVbU','5hTZwTJ','7W

HIGH obfuscation-hex-functions: src/index.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3189(){var _0x496294=['518601GtsrmR','10SdkowX','3360198oQnEay','4871112EpSpmI','475051vlFVbU','5hTZwTJ','7W

HIGH obfuscation-while-true: src/legacyerrors.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x8cbc1b,_0x1eeb2e){var _0x10ea29=_0x4837,_0x3e7cd1=_0x8cbc1b();while(!![]){try{var _0x52affe=-parseInt(_0x10

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x8cbc1b,_0x1eeb2e){var _0x10ea29=_0x4837,_0x3e7cd1=_0x8cbc1b();while(!![]){try{var _0x52affe=-parseInt(_0x10

HIGH obfuscation-hex-functions: src/legacyerrors.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x8cbc1b,_0x1eeb2e){var _0x10ea29=_0x4837,_0x3e7cd1=_0x8cbc1b();while(!![]){try{var _0x52affe=-parseInt(_0x10

HIGH obfuscation-hex-functions: src/normalizers/inliner/msofficestylesinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x341601=_0x2a03;function _0x2fd0(){const _0x2980f0=['465969WJznLD','5631564stVnsj','type','from','120CnEjzg','44

HIGH obfuscation-hex-functions: src/normalizers/inliner/msofficestylesinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x341601=_0x2a03;function _0x2fd0(){const _0x2980f0=['465969WJznLD','5631564stVnsj','type','from','120CnEjzg','44

HIGH obfuscation-while-true: src/normalizers/inliner/msofficestylesinliner.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x341601=_0x2a03;function _0x2fd0(){const _0x2980f0=['465969WJznLD','5631564stVnsj','type','from','120CnEjzg','44

HIGH obfuscation-while-true: src/normalizers/inliner/utils.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x5aa979,_0x1458e1){const _0xf3268b=_0x1ede,_0x5f330e=_0x5aa979();while(!![]){try{const _0x20e76d=-parseInt(_

HIGH obfuscation-hex-functions: src/normalizers/inliner/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x5aa979,_0x1458e1){const _0xf3268b=_0x1ede,_0x5f330e=_0x5aa979();while(!![]){try{const _0x20e76d=-parseInt(_

HIGH obfuscation-hex-functions: src/normalizers/inliner/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x5aa979,_0x1458e1){const _0xf3268b=_0x1ede,_0x5f330e=_0x5aa979();while(!![]){try{const _0x20e76d=-parseInt(_

HIGH obfuscation-hex-functions: src/normalizers/propagator/msofficeinlinestylepropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x292a(){const _0xde916c=['_parsedData','font','includes','3314210DdSaPp','6462346GgZMOI','6364520XxPisu','get

HIGH obfuscation-while-true: src/normalizers/propagator/msofficeinlinestylepropagator.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x292a(){const _0xde916c=['_parsedData','font','includes','3314210DdSaPp','6462346GgZMOI','6364520XxPisu','get

HIGH obfuscation-hex-functions: src/normalizers/propagator/msofficeinlinestylepropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x292a(){const _0xde916c=['_parsedData','font','includes','3314210DdSaPp','6462346GgZMOI','6364520XxPisu','get

HIGH obfuscation-while-true: src/normalizers/propagator/utils.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x236233=_0x27a8;(function(_0x363acd,_0x3573cc){const _0xf906e9=_0x27a8,_0x3aa5b3=_0x363acd();while(!![]){try{con

HIGH obfuscation-hex-functions: src/normalizers/propagator/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x236233=_0x27a8;(function(_0x363acd,_0x3573cc){const _0xf906e9=_0x27a8,_0x3aa5b3=_0x363acd();while(!![]){try{con

HIGH obfuscation-hex-functions: src/normalizers/propagator/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x236233=_0x27a8;(function(_0x363acd,_0x3573cc){const _0xf906e9=_0x27a8,_0x3aa5b3=_0x363acd();while(!![]){try{con

HIGH obfuscation-while-true: src/pastefromofficeenhanced.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x220aa4=_0x1931;(function(_0x588b2e,_0x31772f){var _0x2fdb26=_0x1931,_0x10e697=_0x588b2e();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/pastefromofficeenhanced.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x220aa4=_0x1931;(function(_0x588b2e,_0x31772f){var _0x2fdb26=_0x1931,_0x10e697=_0x588b2e();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/pastefromofficeenhanced.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x220aa4=_0x1931;(function(_0x588b2e,_0x31772f){var _0x2fdb26=_0x1931,_0x10e697=_0x588b2e();while(!![]){try{var _0x

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-while-true: src/pastefromofficeenhancedinliner.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedinliner.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x5afaf1=_0x45b8;function _0x45b8(_0x2d7c95,_0x5978ef){const _0xa9616=_0xa961();return _0x45b8=function(_0x45b83b

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedpropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x8faa(_0x1a191d,_0x364220){const _0x28578b=_0x2857();return _0x8faa=function(_0x8faae8,_0x1525f3){_0x8faae8=_

HIGH obfuscation-while-true: src/pastefromofficeenhancedpropagator.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x8faa(_0x1a191d,_0x364220){const _0x28578b=_0x2857();return _0x8faa=function(_0x8faae8,_0x1525f3){_0x8faae8=_

HIGH obfuscation-hex-functions: src/pastefromofficeenhancedpropagator.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x8faa(_0x1a191d,_0x364220){const _0x28578b=_0x2857();return _0x8faa=function(_0x8faae8,_0x1525f3){_0x8faae8=_

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5d11(_0x16ddf8,_0x26ed0e){const _0x3f6e1a=_0x3f6e();return _0x5d11=function(_0x5d11e7,_0x586469){_0x5d11e7=_

HIGH obfuscation-while-true: src/utils.js:23 semgrep

while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x5d11(_0x16ddf8,_0x26ed0e){const _0x3f6e1a=_0x3f6e();return _0x5d11=function(_0x5d11e7,_0x586469){_0x5d11e7=_

HIGH obfuscation-hex-functions: src/utils.js:23 semgrep

Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x5d11(_0x16ddf8,_0x26ed0e){const _0x3f6e1a=_0x3f6e();return _0x5d11=function(_0x5d11e7,_0x586469){_0x5d11e7=_

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.4.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v47.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v47.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.