@everymatrix/player-bonus-history
51
Versions
—
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
clokzeoleksandr.v.stepanovtaras.maksymivnatalya.anisimovaemfe_releaserayiispmariana.gheorgheadrian.priponandriizadvirnyiraulvasileemstefan.vladgoe.sutadarie.tisaianustefanaotong.woodtikarncatalinpoclidcristi.ungureanumaria.bumbar1liviuclement.everymatrixmihaibalanfrankie24
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:components/PlayerBonusCard-Cck44NjQ.cjs | AI (source-diff): Standard Vite/Rollup minified build output for a Svelte component; consistent with package's build pattern. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-twBPgR1c.js | AI (source-diff): Standard Vite/Rollup minified build output; Svelte runtime boilerplate visible in sample. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-twBPgR1c.js | AI (source-diff): Network calls and dynamic code are from Svelte runtime, not dropper malware. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CE30hMs_.js | AI (source-diff): Network calls and dynamic code are from Svelte runtime, not dropper malware. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CE30hMs_.js | AI (source-diff): Standard Vite/Rollup minified build output; Svelte runtime boilerplate visible in sample. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BVwBFmkM.cjs | AI (source-diff): Network calls and dynamic code (new Function) are from Vaadin/Svelte runtime, not dropper malware. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BVwBFmkM.cjs | AI (source-diff): Standard Vite/Rollup minified build output; Svelte runtime boilerplate visible in sample. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BUDWlZXF.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output; not malicious obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DdyXfGAs.js | AI (source-diff): Network calls are API fetches in Svelte component; dynamic execution is standard framework lifecycle, not dropper behavior. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BEJCSoQ6.js | AI (source-diff): Network calls are API fetches in Svelte component; dynamic execution is standard framework lifecycle, not dropper behavior. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BUDWlZXF.cjs | AI (source-diff): Network calls are API fetches in Svelte component; dynamic execution is standard framework lifecycle, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DdyXfGAs.js | AI (source-diff): Standard Svelte/Vite minified bundle output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BEJCSoQ6.js | AI (source-diff): Standard Svelte/Vite minified bundle output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-CxACrSzY.cjs | AI (source-diff): Standard Svelte/Vite minified bundle output; not malicious obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-Cp0SoXmB.cjs | AI (source-diff): Vaadin dev-mode new Function() + fetch in UI component; not malicious. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BPTJa7VA.js | AI (source-diff): Vaadin dev-mode new Function() + fetch in UI component; not malicious. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BC5ZS-3h.js | AI (source-diff): Vaadin dev-mode new Function() + fetch in UI component; not malicious. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BPTJa7VA.js | AI (source-diff): Bundled Svelte ESM output; standard build artifact. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BC5ZS-3h.js | AI (source-diff): Bundled Svelte ESM output; standard build artifact. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-Cp0SoXmB.cjs | AI (source-diff): Bundled Svelte CJS output; long lines from minification, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-CGxntrpq.cjs | AI (source-diff): Standard bundled Svelte component output with i18n strings; not obfuscated. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CPI4qDOm.js | AI (source-diff): Same Vaadin dev-mode + fetch pattern; not malicious. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CPI4qDOm.js | AI (source-diff): ESM bundle with i18n; standard build output. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CmK1Rri5.js | AI (source-diff): Vaadin dev-mode pattern + fetch in UI component; not malicious. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CmK1Rri5.js | AI (source-diff): ESM bundle with i18n; standard build output. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BL8oTuyG.cjs | AI (source-diff): Vaadin dev-mode new Function() + fetch in UI component; not malicious. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BL8oTuyG.cjs | AI (source-diff): CJS bundle with i18n strings; minification is expected build output. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CXJ32nqq.cjs | AI (source-diff): Bundled Svelte runtime + component code; long lines from minification, not obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CXJ32nqq.cjs | AI (source-diff): Svelte compiled output with fetch + Function patterns; no malicious payload. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-FojWd9cl.js | AI (source-diff): Same benign Svelte runtime patterns in alternate build target. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-FojWd9cl.js | AI (source-diff): Another build target of same Svelte component; standard output. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-C50YCkyK.cjs | AI (source-diff): Standard Vite/Rollup bundled Svelte component output with i18n strings; not obfuscated. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-B4iMNr6v.js | AI (source-diff): ESM variant; same benign Svelte runtime patterns. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-B4iMNr6v.js | AI (source-diff): ESM variant of same bundled Svelte component; not obfuscated. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DtaxrYhh.js | AI (source-diff): Same pattern as sibling file — minified Svelte bundle, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DHVfmVdW.js | AI (source-diff): Minified Svelte/framework bundle output; readable structure, @__PURE__ annotations confirm standard build tooling. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DHVfmVdW.js | AI (source-diff): Network calls and dynamic execution are expected in a frontend UI component bundle; no dropper indicators. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DtaxrYhh.js | AI (source-diff): Frontend component bundle; network+exec pattern is benign in this context. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DHnglXOD.js | AI (source-diff): Minified Svelte/Vite bundle; readable helper functions, not obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BKM8FQRN.js | AI (source-diff): Standard Svelte runtime network+DOM patterns in a UI component bundle. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BKM8FQRN.js | AI (source-diff): Minified Svelte/Vite ESM bundle; readable structure, not obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DYDPAsky.cjs | AI (source-diff): Network calls and dynamic code are standard Svelte runtime patterns (fetch + addEventListener), not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-DYDPAsky.cjs | AI (source-diff): Minified Svelte/Vite bundle output; standard component runtime helpers, not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-CKgXB5tw.cjs | AI (source-diff): Minified Svelte/Vite bundle output; readable i18n and DOM code, not obfuscation. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-DHnglXOD.js | AI (source-diff): Standard Svelte runtime patterns; no dropper indicators in sampled code. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-L1IMmrg6.cjs | AI (source-diff): Network calls and dynamic code are Svelte/Vaadin runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-AZoMiRUh.cjs | AI (source-diff): Standard Rollup/Vite minified build output for Svelte component; not obfuscation. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-L1IMmrg6.cjs | AI (source-diff): Standard Rollup/Vite minified build output; content is i18n strings and Svelte runtime. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-EarPJwtH.js | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-EarPJwtH.js | AI (source-diff): Standard Rollup/Vite minified build output for Svelte component. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory--nIn73Vl.js | AI (source-diff): Network calls and dynamic code are Svelte runtime patterns, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory--nIn73Vl.js | AI (source-diff): Standard Rollup/Vite minified build output; content is i18n strings and Svelte runtime. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-D2bsuLf4.js | AI (source-diff): Standard Rollup/Vite minified build output for Svelte component. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-CJivsjxP.js | AI (source-diff): Standard Rollup/Vite minified build output for Svelte component. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CATEo6os.cjs | AI (source-diff): Standard minified Svelte runtime bundle; no obfuscation indicators beyond minification. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-D1LjOTQU.js | AI (source-diff): DOM/fetch patterns in Svelte component; consistent with prior versions. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-D1LjOTQU.js | AI (source-diff): Minified Svelte bundle; readable runtime helpers visible in sample. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BPA7vUbZ.js | AI (source-diff): Standard Svelte component network patterns; not dropper/loader behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BPA7vUbZ.js | AI (source-diff): Minified Svelte ESM bundle; same pattern as prior approved versions. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CATEo6os.cjs | AI (source-diff): Network calls are DOM fetch/XHR patterns in Svelte component; no dropper behavior visible. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-C_Y0JHfR.cjs | AI (source-diff): Minified Svelte/Rollup build output; readable i18n strings and DOM APIs visible in sample. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-CJz1RBfF.cjs | AI (source-diff): Standard Vite/Svelte minified build output; consistent with prior versions of this package. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-ImKhkCU7.js | AI (source-diff): Network calls are UI fetch; dynamic execution is Svelte runtime pattern, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-ImKhkCU7.js | AI (source-diff): Standard Vite/Svelte minified build output. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-BLImQ91h.js | AI (source-diff): Network calls are UI fetch; dynamic execution is Svelte runtime pattern, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusHistory-BLImQ91h.js | AI (source-diff): Standard Vite/Svelte minified build output. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-ONInjr0K.js | AI (source-diff): Standard Vite/Svelte minified build output. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-CL3gHhi_.js | AI (source-diff): Standard Vite/Svelte minified build output. | ai | |
| source-diff | net-exec-file:components/PlayerBonusHistory-CJz1RBfF.cjs | AI (source-diff): Network calls are UI fetch; dynamic execution is Svelte runtime pattern, not dropper behavior. | ai | |
| source-diff | obfuscated-file:components/PlayerBonusCard-DpuXmWBS.cjs | AI (source-diff): Standard Vite/Svelte minified build output; consistent with prior versions of this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Scoped component library with 847 versions; missing metadata is a known pattern for this org. | ai | |
| semgrep | semgrep:new-function-constructor | AI (semgrep): Fires inside Vaadin dev-mode detector utility; standard pattern, not malicious. | ai |
Versions (showing 51 of 353)
| Version | Deps | Published |
|---|---|---|
| 1.94.81 | 0 / 0 | |
| 1.94.80 | 0 / 0 | |
| 1.94.79 | 0 / 0 | |
| 1.94.78 | 0 / 0 | |
| 1.94.77 | 0 / 0 | |
| 1.94.76 | 0 / 0 | |
| 1.94.75 | 0 / 0 | |
| 1.94.74 | 0 / 0 | |
| 1.94.73 | 0 / 0 | |
| 1.94.72 | 0 / 0 | |
| 1.94.71 | 0 / 0 | |
| 1.94.70 | 0 / 0 | |
| 1.94.69 | 0 / 0 | |
| 1.94.68 | 0 / 0 | |
| 1.94.67 | 0 / 0 | |
| 1.94.66 | 0 / 0 | |
| 1.94.65 | 0 / 0 | |
| 1.94.64 | 0 / 0 | |
| 1.94.63 | 0 / 0 | |
| 1.94.62 | 0 / 0 | |
| 1.94.61 | 0 / 0 | |
| 1.94.60 | 0 / 0 | |
| 1.94.59 | 0 / 0 | |
| 1.94.58 | 0 / 0 | |
| 1.94.57 | 0 / 0 | |
| 1.94.56 | 0 / 0 | |
| 1.94.55 | 0 / 0 | |
| 1.94.54 | 0 / 0 | |
| 1.94.53 | 0 / 0 | |
| 1.94.52 | 0 / 0 | |
| 1.94.51 | 0 / 0 | |
| 1.94.50 | 0 / 0 | |
| 1.94.49 | 0 / 0 | |
| 1.94.48 | 0 / 0 | |
| 1.94.47 | 0 / 0 | |
| 1.94.46 | 0 / 0 | |
| 1.94.45 | 0 / 0 | |
| 1.94.44 | 0 / 0 | |
| 1.94.43 | 0 / 0 | |
| 1.94.42 | 0 / 0 | |
| 1.94.41 | 0 / 0 | |
| 1.94.40 | 0 / 0 | |
| 1.94.39 | 0 / 0 | |
| 1.94.38 | 0 / 0 | |
| 1.94.37 | 0 / 0 | |
| 1.94.36 | 0 / 0 | |
| 1.94.35 | 0 / 0 | |
| 1.94.34 | 0 / 0 | |
| 1.94.33 | 0 / 0 | |
| 1.94.32 | 0 / 0 | |
| 1.94.31 | 0 / 0 |
v1.94.81
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.80
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.79
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.78
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.77
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.76
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.75
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.74
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.73
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.72
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.71
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.70
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.69
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.68
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.67
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.66
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.65
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.64
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.63
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.62
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.61
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.60
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.59
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.58
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.57
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.56
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.55
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.94.54
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.