@ckeditor/ckeditor5-uploadcare
Uploadcare feature for CKEditor 5.
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:src/utils/editingutils.js | AI (source-diff): Intentional obfuscation of first-party source; benign image-processing logic. | ai | |
| semgrep | semgrep:obfuscation-hex-functions | AI (semgrep): Intentional CKSource proprietary-source obfuscation (package.json obfuscated:true); stable trait. | ai | |
| semgrep | semgrep:obfuscation-while-true | AI (semgrep): Same intentional javascript-obfuscator output; no malicious behavior. | ai | |
| dependencies | unvetted-dep:@uploadcare/upload-client | AI (dependencies): This is the official Uploadcare upload client SDK, expected and legitimate for a CKEditor Uploadcare integration plugin. | ai | |
| dependencies | unvetted-dep:@uploadcare/file-uploader | AI (dependencies): This is the official Uploadcare file uploader SDK, expected and legitimate for a CKEditor Uploadcare integration plugin. | ai | |
| phantom-deps | phantom-dep:@ckeditor/ckeditor5-icons | AI (phantom-deps): Icons package is a same-org dependency used in build/config context; not directly imported in source but legitimately declared as a dep in the CKEditor5 monorepo pattern. | ai | |
| provenance | no-provenance | AI (provenance): CKEditor5 packages are published by an established vendor (CKSource); lack of Sigstore provenance is common and not a risk signal for this publisher. | ai | |
| phantom-deps | phantom-dep:@uploadcare/upload-client | AI (phantom-deps): Referenced in config files as documented; legitimate dependency for the Uploadcare integration. Not a phantom in the malicious sense. | ai |
Versions (showing 9 of 9)
| Version | Deps | Published |
|---|---|---|
| 48.3.1 | 9 / 0 | |
| 48.3.0 | 9 / 0 | |
| 48.2.0 | 9 / 0 | |
| 48.1.1 | 9 / 0 | |
| 48.1.0 | 9 / 0 | |
| 48.0.1 | 9 / 0 | |
| 48.0.0 | 9 / 0 | |
| 47.7.3 | 10 / 0 | |
| 47.7.0 | 10 / 0 |
v48.3.1
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v48.3.0
1 finding[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v47.7.3
88 findingsNewly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: obfuscated (_0x-array) — true obfuscation signature.
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x4997b9,_0xfed663){var _0xa5e991=_0x2d68,_0x410e1f=_0x4997b9();while(!![]){try{var _0x2daf71=-parseInt(_0xa5
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x4997b9,_0xfed663){var _0xa5e991=_0x2d68,_0x410e1f=_0x4997b9();while(!![]){try{var _0x2daf71=-parseInt(_0xa5
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x4997b9,_0xfed663){var _0xa5e991=_0x2d68,_0x410e1f=_0x4997b9();while(!![]){try{var _0x2daf71=-parseInt(_0xa5
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3c86(){const _0x5af441=['configElement','imageInline','done-click','121513UCwPMM','_insertAsset','selection' 24 | _0x2c8787(){[_0x59cdb5(0x93)];[_0x59cdb5(0x8a)];[_0x59cdb5(0x9b)];[_0x59cdb5(0xbc)];[_0x59cdb5(0x9e)]=null;[_0x59cdb5(0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3c86(){const _0x5af441=['configElement','imageInline','done-click','121513UCwPMM','_insertAsset','selection' 24 | _0x2c8787(){[_0x59cdb5(0x93)];[_0x59cdb5(0x8a)];[_0x59cdb5(0x9b)];[_0x59cdb5(0xbc)];[_0x59cdb5(0x9e)]=null;[_0x59cdb5(0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3c86(){const _0x5af441=['configElement','imageInline','done-click','121513UCwPMM','_insertAsset','selection' 24 | _0x2c8787(){[_0x59cdb5(0x93)];[_0x59cdb5(0x8a)];[_0x59cdb5(0x9b)];[_0x59cdb5(0xbc)];[_0x59cdb5(0x9e)]=null;[_0x59cdb5(0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x55ab(_0x2f2422,_0x3d1a8a){var _0x4027d0=_0x4027();return _0x55ab=function(_0x55ab8f,_0xf290b){_0x55ab8f=_0x5
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x55ab(_0x2f2422,_0x3d1a8a){var _0x4027d0=_0x4027();return _0x55ab=function(_0x55ab8f,_0xf290b){_0x55ab8f=_0x5
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x55ab(_0x2f2422,_0x3d1a8a){var _0x4027d0=_0x4027();return _0x55ab=function(_0x55ab8f,_0xf290b){_0x55ab8f=_0x5
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0xedac24=_0x4aad;(function(_0x30c4c6,_0x184a35){const _0x49fd05=_0x4aad,_0x246695=_0x30c4c6();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xedac24=_0x4aad;(function(_0x30c4c6,_0x184a35){const _0x49fd05=_0x4aad,_0x246695=_0x30c4c6();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0xedac24=_0x4aad;(function(_0x30c4c6,_0x184a35){const _0x49fd05=_0x4aad,_0x246695=_0x30c4c6();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x193143=_0x22f6;(function(_0x5309b1,_0x2c2c83){var _0x2f6bf6=_0x22f6,_0x254d33=_0x5309b1();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x193143=_0x22f6;(function(_0x5309b1,_0x2c2c83){var _0x2f6bf6=_0x22f6,_0x254d33=_0x5309b1();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x193143=_0x22f6;(function(_0x5309b1,_0x2c2c83){var _0x2f6bf6=_0x22f6,_0x254d33=_0x5309b1();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3b57(_0x2887b1,_0x5d289a){var _0x557e5e=_0x557e();return _0x3b57=function(_0x3b57e0,_0x450faa){_0x3b57e0=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3b57(_0x2887b1,_0x5d289a){var _0x557e5e=_0x557e();return _0x3b57=function(_0x3b57e0,_0x450faa){_0x3b57e0=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3b57(_0x2887b1,_0x5d289a){var _0x557e5e=_0x557e();return _0x3b57=function(_0x3b57e0,_0x450faa){_0x3b57e0=_0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x2277(_0x2a15fc,_0x3cf9cd){const _0x2e14b9=_0x2e14();return _0x2277=function(_0x22771a,_0x3effee){_0x22771a=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x1e797a=_0x1473;(function(_0x4cfda2,_0x3b3cf9){var _0x2f8185=_0x1473,_0x321799=_0x4cfda2();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x1e797a=_0x1473;(function(_0x4cfda2,_0x3b3cf9){var _0x2f8185=_0x1473,_0x321799=_0x4cfda2();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x1e797a=_0x1473;(function(_0x4cfda2,_0x3b3cf9){var _0x2f8185=_0x1473,_0x321799=_0x4cfda2();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x196e54,_0xdd5da2){const _0x29b818=_0x1feb,_0x445258=_0x196e54();while(!![]){try{const _0x40c4fc=parseInt(_0
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x196e54,_0xdd5da2){const _0x29b818=_0x1feb,_0x445258=_0x196e54();while(!![]){try{const _0x40c4fc=parseInt(_0
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x196e54,_0xdd5da2){const _0x29b818=_0x1feb,_0x445258=_0x196e54();while(!![]){try{const _0x40c4fc=parseInt(_0
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x482258=_0x17f9;(function(_0x2ed6ab,_0x27683e){const _0x51730d=_0x17f9,_0x3c696d=_0x2ed6ab();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x482258=_0x17f9;(function(_0x2ed6ab,_0x27683e){const _0x51730d=_0x17f9,_0x3c696d=_0x2ed6ab();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x482258=_0x17f9;(function(_0x2ed6ab,_0x27683e){const _0x51730d=_0x17f9,_0x3c696d=_0x2ed6ab();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x125431=_0x4d03;(function(_0x182585,_0x48940b){const _0x35db73=_0x4d03,_0x2aebb2=_0x182585();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x125431=_0x4d03;(function(_0x182585,_0x48940b){const _0x35db73=_0x4d03,_0x2aebb2=_0x182585();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x125431=_0x4d03;(function(_0x182585,_0x48940b){const _0x35db73=_0x4d03,_0x2aebb2=_0x182585();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x3c5b07=_0xf203;(function(_0x27d6f7,_0x5e45ff){const _0x4f01cc=_0xf203,_0x3a3999=_0x27d6f7();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3c5b07=_0xf203;(function(_0x27d6f7,_0x5e45ff){const _0x4f01cc=_0xf203,_0x3a3999=_0x27d6f7();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x3c5b07=_0xf203;(function(_0x27d6f7,_0x5e45ff){const _0x4f01cc=_0xf203,_0x3a3999=_0x27d6f7();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x57fe(_0x7e964b,_0x499705){const _0x55cb47=_0x55cb();return _0x57fe=function(_0x57fe7c,_0x11e1c7){_0x57fe7c=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x57fe(_0x7e964b,_0x499705){const _0x55cb47=_0x55cb();return _0x57fe=function(_0x57fe7c,_0x11e1c7){_0x57fe7c=_
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x57fe(_0x7e964b,_0x499705){const _0x55cb47=_0x55cb();return _0x57fe=function(_0x57fe7c,_0x11e1c7){_0x57fe7c=_
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | const _0x387baa=_0x2aab;(function(_0x4b3f45,_0x4c45c7){const _0x406af4=_0x2aab,_0x11f19d=_0x4b3f45();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x387baa=_0x2aab;(function(_0x4b3f45,_0x4c45c7){const _0x406af4=_0x2aab,_0x11f19d=_0x4b3f45();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | const _0x387baa=_0x2aab;(function(_0x4b3f45,_0x4c45c7){const _0x406af4=_0x2aab,_0x11f19d=_0x4b3f45();while(!![]){try{con
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0x484741=_0x22f2;(function(_0x2286d2,_0x14b089){var _0x1f093b=_0x22f2,_0x16193c=_0x2286d2();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x484741=_0x22f2;(function(_0x2286d2,_0x14b089){var _0x1f093b=_0x22f2,_0x16193c=_0x2286d2();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0x484741=_0x22f2;(function(_0x2286d2,_0x14b089){var _0x1f093b=_0x22f2,_0x16193c=_0x2286d2();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3f95(){const _0x4fb61c=['match','getAttribute','isArray','replace','/-/resize/','imageInline','1098hIIBNX','
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | function _0x3f95(){const _0x4fb61c=['match','getAttribute','isArray','replace','/-/resize/','imageInline','1098hIIBNX','
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | function _0x3f95(){const _0x4fb61c=['match','getAttribute','isArray','replace','/-/resize/','imageInline','1098hIIBNX','
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | (function(_0x302943,_0x18c454){var _0x54fa93=_0x6713,_0x2b7d07=_0x302943();while(!![]){try{var _0x172b19=-parseInt(_0x54
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x302943,_0x18c454){var _0x54fa93=_0x6713,_0x2b7d07=_0x302943();while(!![]){try{var _0x172b19=-parseInt(_0x54
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | (function(_0x302943,_0x18c454){var _0x54fa93=_0x6713,_0x2b7d07=_0x302943();while(!![]){try{var _0x172b19=-parseInt(_0x54
[Reject — re-review on republish] (prior reject: AI (semgrep): Companion obfuscation signal to hex-functions; same obfuscated source, same rationale — generalizes across versions of this package.) while(!![]) loop is a signature of javascript-obfuscator output 21 | * 22 | */ > 23 | var _0xa9070c=_0x34b9;(function(_0x5b4dae,_0x1ed2bc){var _0x129132=_0x34b9,_0x5181cd=_0x5b4dae();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0xa9070c=_0x34b9;(function(_0x5b4dae,_0x1ed2bc){var _0x129132=_0x34b9,_0x5181cd=_0x5b4dae();while(!![]){try{var _0x
[Reject — re-review on republish] (prior reject: AI (semgrep): src/index.js is intentionally obfuscated (package.json declares 'obfuscated: true'); this is a persistent characteristic of this package that prevents security auditing.) Hex-prefixed function names (_0x...) are generated by javascript-obfuscator 21 | * 22 | */ > 23 | var _0xa9070c=_0x34b9;(function(_0x5b4dae,_0x1ed2bc){var _0x129132=_0x34b9,_0x5181cd=_0x5b4dae();while(!![]){try{var _0x
[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.