← Home

@getflip/swirl-components-react

npm Repository Homepage

THIS PACKAGE IS GENRATED VIA THE STENCIL.JS REACT OUTPUT TARGET. DO NOT EDIT THIS PACKAGE DIRECTLY!

51
Versions
—
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

psiekmanngetflipapp

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/index.0c15968e.js AI (source-diff): Vite/React bundle output, standard minification. ai
source-diff obfuscated-file:dist/file-manager.entry.82b1aa51.js AI (source-diff): Vite-bundled component chunk, minified not obfuscated, no malicious code. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.9b9ccc75.js AI (source-diff): File-viewer demo data referencing static sample assets, not a loader. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.9b9ccc75.js AI (source-diff): Minified Stencil/Vite bundle chunk, not true obfuscation. ai
source-diff obfuscated-file:dist/file-manager.entry.e575e242.js AI (source-diff): Vite-bundled component chunk, not obfuscation. ai
source-diff obfuscated-file:dist/index.e285cfde.js AI (source-diff): Bundled React/vendor chunk with license headers, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.dff26b98.js AI (source-diff): File-viewer UI component with static sample data, not a loader. ai
source-diff obfuscated-file:dist/index.bd356e40.js AI (source-diff): Vite/Rollup bundle of React/index code, readable, not obfuscated. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.dff26b98.js AI (source-diff): Bundled Vite component chunk, minified not obfuscated. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.c6f9dc93.js AI (source-diff): File-viewer component fetching/rendering sample files is its stated function. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.c6f9dc93.js AI (source-diff): Bundled Vite/Stencil output, not obfuscation; component ships large sample-file viewer UI. ai
source-diff obfuscated-file:dist/index.b674819a.js AI (source-diff): Minified Vite/Stencil bundle output (react-jsx-runtime), not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.db7047cd.js AI (source-diff): Bundled file-viewer component; no malicious payload evidenced, standard fetch+render code. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.d90649e7.js AI (source-diff): Bundled build output for file-viewer component, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.d90649e7.js AI (source-diff): File-viewer component code, consistent with stated functionality, no exfil target. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.181558d6.js AI (source-diff): Bundled Vite output for a file-viewer component, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.181558d6.js AI (source-diff): File-viewer component plausibly fetches/renders media; no hostile destination shown. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.b28deb3b.js AI (source-diff): File-viewer component fetching sample files matches component's purpose. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.b28deb3b.js AI (source-diff): Bundled Vite/Stencil output, not obfuscation. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.db33246a.js AI (source-diff): Vite-bundled component chunk; minified build output, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.db33246a.js AI (source-diff): Bundled file viewer component; no evidence of malicious network/exec behavior. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.f5bbeb84.js AI (source-diff): File-viewer component sample data/fetch logic, not a loader. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.f5bbeb84.js AI (source-diff): Minified Stencil/Vite bundle output, not true obfuscation. ai
source-diff obfuscated-file:dist/index.90052340.js AI (source-diff): Vite bundle output containing React/date-fns, not obfuscation. ai
source-diff obfuscated-file:dist/swirl-app-layout_6.entry.37900a77.js AI (source-diff): Bundled component chunk with CSS-in-JS strings, not obfuscation. ai
source-diff obfuscated-file:dist/file-manager.entry.a1409397.js AI (source-diff): Vite/Rollup bundled component chunk, minified not obfuscated. ai
source-diff obfuscated-file:dist/index.1e316f69.js AI (source-diff): Bundled React/vendor chunk, standard minification. ai
source-diff obfuscated-file:dist/swirl-file-viewer_7.entry.47d63e47.js AI (source-diff): Rollup-bundled component output, no malicious behavior found. ai
source-diff obfuscated-file:dist/swirl-avatar.entry.584dde67.js AI (source-diff): Bundled component CSS/JS, not obfuscation. ai
source-diff obfuscated-file:dist/index.385abe8b.js AI (source-diff): Rollup-bundled React runtime, standard build output. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.d52fe4f7.js AI (source-diff): File viewer component; network+dynamic import is normal bundler code-splitting, no exfil target. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.d52fe4f7.js AI (source-diff): Bundled Stencil/Vite component output, not true obfuscation. ai
source-diff obfuscated-file:dist/swirl-file-viewer_7.entry.3d65729b.js AI (source-diff): Rollup-bundled component output, minified not obfuscated; consistent with library's build pipeline. ai
source-diff obfuscated-file:dist/index.def24d71.js AI (source-diff): Vite/React bundle output, not obfuscation; matches library's build tooling. ai
source-diff obfuscated-file:dist/swirl-file-viewer_7.entry.97a4014f.js AI (source-diff): Rollup-bundled component chunk; large size is normal for a file viewer component. ai
source-diff obfuscated-file:dist/index.8bfddb76.js AI (source-diff): Vite/Rollup bundle output with React license headers, not obfuscation. ai
source-diff obfuscated-file:dist/index.e2f6740c.js AI (source-diff): Minified bundle output (Vite/Rollup), not true obfuscation. ai
source-diff obfuscated-file:dist/index.08e7bee6.js AI (source-diff): Vite/tsc bundled output, not true obfuscation; stable for this build pipeline. ai
source-diff obfuscated-file:dist/index.40ad66e0.js AI (source-diff): Bundled Vite/React output, not true obfuscation; matches build pipeline. ai
source-diff obfuscated-file:dist/index.54b3f249.js AI (source-diff): Vite bundle output, not obfuscation. ai
source-diff obfuscated-file:dist/index.ef5fb35b.js AI (source-diff): Vite/Rollup bundle output; standard React internals, not obfuscation. ai
source-diff obfuscated-file:dist/index.5311f3dd.js AI (source-diff): Vite bundle output (React JSX runtime), not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.d4e9007a.js AI (source-diff): Bundled media component; no concrete malicious destination shown. ai
source-diff obfuscated-file:dist/index.ac02d33c.js AI (source-diff): Vite/Rollup bundle output, not true obfuscation; matches React/JSX runtime banner. ai
source-diff obfuscated-file:dist/index.c0a92c2c.js AI (source-diff): Vite bundle output (react-jsx-runtime headers visible), not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.7d4886c4.js AI (source-diff): Bundled media-viewer component; network+eval pattern is bundler artifact, not dropper behavior. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.d4bf4e07.js AI (source-diff): Audio/file viewer component legitimately uses fetch + dynamic code paths in bundled build. ai
source-diff obfuscated-file:dist/index.3fbf4c9e.js AI (source-diff): Bundled Vite/Stencil build output (React JSX runtime), not true obfuscation. ai
source-diff obfuscated-file:dist/index.d861ea24.js AI (source-diff): Vite bundle output with react-jsx-runtime license header, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.afcf10a3.js AI (source-diff): Media viewer component bundling standard dynamic import + fetch, not a dropper. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.3c3c7300.js AI (source-diff): Bundled media-viewer component code, not a dropper. ai
source-diff obfuscated-file:dist/index.09811de9.js AI (source-diff): Vite bundle output, not obfuscation; contains React JSX runtime headers. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.8e9e1482.js AI (source-diff): Bundled media-viewer component, no fetched-binary/exfil behavior observed. ai
source-diff obfuscated-file:dist/index.07b1a8be.js AI (source-diff): Minified Vite bundle output (React/JSX runtime), not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.16d38a13.js AI (source-diff): Audio file-viewer component; network+exec pattern matches media fetch/playback, not a dropper. ai
source-diff obfuscated-file:dist/index.9e55c675.js AI (source-diff): Vite/esbuild bundle output with React license headers, not obfuscation. ai
source-diff obfuscated-file:dist/index.e1f07469.js AI (source-diff): Standard Vite/React bundler minified output, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.f3ad9def.js AI (source-diff): Bundled PapaParse/pdf.js: fetch(this.file) renders user file + pdf.js new Function() feature-detect; no exfil sink. ai
source-diff obfuscated-file:dist/index.a55892ec.js AI (source-diff): Vite bundle output with visible React/Stencil source, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.c05757c6.js AI (source-diff): Bundled audio file-viewer component; network+eval pattern matches media player libs, not exfil. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.116d3b6a.js AI (source-diff): Bundled component code, no real exfil/dropper behavior. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.34ad162c.js AI (source-diff): Bundled media/file-viewer component, no evidence of malicious network+exec beyond bundler pattern. ai
source-diff obfuscated-file:dist/index.7c30004b.js AI (source-diff): Vite/bundler minified output, not obfuscation; matches library's build tooling. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.6ad81bf9.js AI (source-diff): Audio file-viewer component likely uses fetch+decode for media playback; no malicious target shown. ai
source-diff obfuscated-file:dist/index.bf524185.js AI (source-diff): Vite-bundled React/JSX runtime output, not obfuscation. ai
source-diff obfuscated-file:dist/index.dcd60e3b.js AI (source-diff): Vite bundle output for React component lib, not true obfuscation. ai
source-diff obfuscated-file:dist/index.d0440b75.js AI (source-diff): Vite/Stencil bundled output with license headers, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.e4eca927.js AI (source-diff): Bundled audio-viewer component; no concrete malicious destination found. ai
source-diff obfuscated-file:dist/index.bb6a8b43.js AI (source-diff): Vite/Stencil bundled build output, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.2dcba2a2.js AI (source-diff): File viewer component bundling media/network code, not a dropper. ai
source-diff obfuscated-file:dist/index.de9f82ee.js AI (source-diff): Bundled Vite/Stencil build output, not obfuscation. ai
source-diff obfuscated-file:dist/index.ddc2c23c.js AI (source-diff): Vite bundle output with react-jsx-runtime shims, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.7824c86f.js AI (source-diff): Audio file-viewer component; network+exec consistent with media loading, no exfil evidence. ai
source-diff obfuscated-file:dist/index.dfe762e5.js AI (source-diff): Vite-bundled React runtime output, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.6cdd987d.js AI (source-diff): Bundled audio/media component, no exfil target shown. ai
source-diff obfuscated-file:dist/index.5a24978e.js AI (source-diff): Vite/Stencil bundle output, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.b17d86d3.js AI (source-diff): Audio file-viewer component; network+exec pattern matches media loading in bundled component. ai
source-diff obfuscated-file:dist/index.bba28f63.js AI (source-diff): Vite/Rollup bundled output with React license headers, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.600d2c2d.js AI (source-diff): Audio file-viewer component; network+exec pattern matches bundled media-handling code. ai
source-diff obfuscated-file:dist/index.de6ff030.js AI (source-diff): Vite/Stencil bundled output (React jsx-runtime banner visible), not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.62e77b13.js AI (source-diff): Audio file-viewer component bundling fetch + media APIs, not a dropper. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.89529f7b.js AI (source-diff): Bundled media-viewer component code, no hostile payload evidence. ai
source-diff obfuscated-file:dist/index.53ab2b2c.js AI (source-diff): Vite-bundled React runtime, not obfuscation. ai
source-diff obfuscated-file:dist/index.a5e4c7a8.js AI (source-diff): Minified Vite bundle, not obfuscated malicious code. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.3c9de3d4.js AI (source-diff): Audio file viewer component bundle, expected fetch+decode logic. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.d521da4a.js AI (source-diff): Audio-viewer component bundling fetch+codec logic; no exfil target present. ai
source-diff obfuscated-file:dist/index.e6beb8d9.js AI (source-diff): Bundled Vite/Stencil output with visible license headers, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.62fa08e5.js AI (source-diff): Media viewer bundle; no concrete malicious destination shown, likely bundler pattern match. ai
source-diff obfuscated-file:dist/index.fdeca408.js AI (source-diff): Minified Vite bundle output, not true obfuscation. ai
source-diff obfuscated-file:dist/index.88b0c3c7.js AI (source-diff): Bundled Vite/React output, not true obfuscation. ai
source-diff obfuscated-file:dist/index.da428f48.js AI (source-diff): Vite/Stencil bundled output, not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.eefcb2ba.js AI (source-diff): Audio file-viewer component; network+exec is expected media-loading code, not a dropper. ai
source-diff obfuscated-file:dist/index.38c98690.js AI (source-diff): Vite bundle output with React license headers; minified not obfuscated. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.32ed9502.js AI (source-diff): Bundled audio/file-viewer component; network+exec pattern is normal player code, not a dropper. ai
source-diff obfuscated-file:dist/index.d694196a.js AI (source-diff): Vite/Rollup bundle output (react-jsx-runtime), not true obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.16ee4354.js AI (source-diff): Bundled audio/file-viewer component, no evidence of hostile fetch+exec target. ai
source-diff obfuscated-file:dist/swirl-file-viewer_7.entry.d1e83f14.js AI (source-diff): Rollup-bundled component output, not true obfuscation; consistent with library's build tooling. ai
source-diff obfuscated-file:dist/index.be81da69.js AI (source-diff): Vite bundle of react-jsx-runtime, minified not obfuscated. ai
source-diff net-exec-file:dist/swirl-file-viewer-audio_7.entry.255d4c37.js AI (source-diff): Bundled media-viewer component; no evidence of dropper behavior beyond bundler pattern. ai
source-diff obfuscated-file:dist/swirl-file-viewer_8.entry.673e24af.js AI (source-diff): Bundled Vite component output, not obfuscation. ai
source-diff net-exec-file:dist/swirl-file-viewer_8.entry.673e24af.js AI (source-diff): File-viewer UI component, no dropper behavior evident. ai
maintainer-change maintainer-removed AI (maintainer-change): Routine maintainer roster change for established org package. ai
source-diff encoded-string-file:dist/swirl-components-react.umd.cjs AI (source-diff): Bundled UMD build artifact, not a hidden payload. ai
provenance publisher-changed AI (provenance): Publisher changed to GitHub Actions CI/CD with SLSA provenance; legitimate automation transition for this package. ai
publish-pattern dormant-publish AI (publish-pattern): Dormancy finding is inconsistent with 874 versions in registry; likely a gap in the approved version history rather than true inactivity. ai
source-diff obfuscated-file:dist/swirl-action-list_8.entry.c217e249.js AI (source-diff): Standard Stencil/Vite minified component entry; consistent with build tooling. ai
source-diff obfuscated-file:dist/index.2e681538.js AI (source-diff): Standard Vite minified bundle output for this React component library; not obfuscation. ai
source-diff obfuscated-file:dist/swirl-button.entry.cfa13628.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified CSS and component logic. ai
source-diff obfuscated-file:dist/swirl-banner.entry.b1bfc9e2.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified CSS and component logic. ai
source-diff obfuscated-file:dist/swirl-avatar.entry.d3da7898.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified CSS and component logic. ai
source-diff obfuscated-file:dist/swirl-app-layout.entry.825d59bf.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified CSS and component logic. ai
source-diff obfuscated-file:dist/swirl-action-list_8.entry.5dbe005b.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified but readable component logic. ai
source-diff obfuscated-file:dist/index.61732cef.js AI (source-diff): Standard Vite minified bundle output for a React UI component library; not actual obfuscation. ai
source-diff large-new-source-files AI (source-diff): Component library with 874 versions regularly ships many new component entry files per release. ai
source-diff obfuscated-file:dist/swirl-checkbox.entry.f3200845.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified CSS and component logic. ai
source-diff obfuscated-file:dist/swirl-card.entry.40f9139d.js AI (source-diff): Stencil/Vite lazy-loaded component entry; minified CSS and component logic. ai
dependencies unvetted-dep:@getflip/swirl-components AI (dependencies): First-party sibling package from the same org/repo; unvetted status is a pipeline artifact, not a real risk. ai
bogus-package bogus-package AI (bogus-package): Mature component library with 874 versions; sparse README/keywords are cosmetic, not spam indicators. ai

Versions (showing 51 of 431)

View all versions
Version Deps Published
0.513.0 1 / 8
0.512.0 1 / 8
0.509.0 1 / 8
0.508.0 1 / 8
0.506.0 1 / 8
0.505.0 1 / 8
0.503.0 1 / 8
0.502.1 1 / 8
0.502.0 1 / 8
0.500.0 1 / 8
0.498.0 1 / 8
0.496.0 1 / 8
0.495.0 1 / 8
0.493.2 1 / 8
0.493.0 1 / 8
0.492.1 1 / 8
0.492.0 1 / 8
0.491.0 1 / 8
0.490.0 1 / 8
0.489.0 1 / 8
0.487.0 1 / 8
0.486.0 1 / 8
0.485.1 1 / 8
0.485.0 1 / 8
0.483.0 1 / 8
0.482.2 1 / 8
0.482.1 1 / 8
0.482.0 1 / 8
0.481.0 1 / 8
0.480.0 1 / 8
0.479.0 1 / 8
0.478.0 1 / 8
0.477.0 1 / 8
0.476.0 1 / 8
0.475.0 1 / 8
0.474.0 1 / 8
0.473.0 1 / 8
0.471.0 1 / 8
0.470.1 1 / 8
0.468.0 1 / 8
0.467.0 1 / 8
0.466.2 1 / 8
0.449.0 1 / 8
0.426.4 1 / 8
0.426.3 1 / 8
0.426.1 1 / 8
0.423.1 1 / 8
0.421.0 1 / 8
0.420.1 1 / 8
0.420.0 1 / 8
0.418.0 1 / 8

v0.513.0

24 findings
HIGH New obfuscated file: dist/index.c0a92c2c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.e9f3c932.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.a9ec2f82.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.e978600e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.1cb244a0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.e01af29d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.225d6df0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.ba25a69a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.159204a9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.00811674.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.4bc285e6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.95869c6c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.08ebd9e1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.a40635dc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.0a1eae3a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.7d4886c4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.7d4886c4.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.6fb5e23e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.883c1d1e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.515031bf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.b253cf44.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-reaction.entry.de9190af.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.512.0

24 findings
HIGH New obfuscated file: dist/index.ef5fb35b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.32909af9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.066e4f61.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.09148556.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.35405136.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.61013acc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.85b4732e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.64697366.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.3583f8cd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.38adf343.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.b7e987f9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.a958156d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.b02e1baf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.191c6063.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.fd4b101c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.d8ea9e4d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.d8ea9e4d.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.b351dd76.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.80aac044.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.f560989c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.e295c2a7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-reaction.entry.e5ca3618.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.496.0

23 findings
HIGH New obfuscated file: dist/index.ddc2c23c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.beb6fcb7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.7dbe836c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.7e35f577.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.8ef08247.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.01c3bf8f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.92e64a59.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.bb64f4c4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.ba4360a0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.8b645a35.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.445c7acf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.fa92083a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.baeb896b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.a47a15a5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.2ce8189e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.7824c86f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.7824c86f.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.cc9658f0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.855a5200.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.1eb4f445.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.a9576db1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-reaction.entry.22e696b1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.492.1

23 findings
HIGH New obfuscated file: dist/index.fdeca408.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.bdddb436.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.7461d925.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.2525157d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.7703d2e2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.32137223.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.f841ed2d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.e188b84c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.ac6d47ac.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.5d8b0a10.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.c29020b1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.779717d4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.bbe6bc30.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.43fe02c4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.bc48e7fd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.62fa08e5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.62fa08e5.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.25f870d4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.5fe44793.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.bc6f80ac.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.ddec2e17.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-reaction.entry.f7a25968.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.492.0

23 findings
HIGH New obfuscated file: dist/index.fdeca408.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.bdddb436.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.7461d925.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.2525157d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.7703d2e2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.32137223.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.f841ed2d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.e188b84c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.ac6d47ac.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.5d8b0a10.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.c29020b1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.779717d4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.bbe6bc30.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.43fe02c4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.bc48e7fd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.62fa08e5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.62fa08e5.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.25f870d4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.5fe44793.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.bc6f80ac.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.ddec2e17.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-reaction.entry.f7a25968.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.490.0

22 findings
HIGH New obfuscated file: dist/index.a55892ec.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.b1f65460.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.e2226967.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.58d9ee47.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.fb11d945.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.156c67cd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.0ef78382.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.0ada2dbe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.f8d83d86.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.0c6dfc50.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.3149a795.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.786d4ccb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.aa673cfb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.d397af6b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.d5a2eec0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.c05757c6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.c05757c6.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.131cfa84.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.4b9ca0fa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.4e60398c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.b3bc9ee8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.489.0

22 findings
HIGH New obfuscated file: dist/index.3fbf4c9e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.e4c57bad.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.f690bd93.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.81ae89f0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.ffe26f60.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.c84c7298.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.63475ad7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.078e9a99.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.a3c74f0b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.8747ca86.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.9d80012b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.f469908b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.37affb37.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.e3a7bbe3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.4081ece3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.d4bf4e07.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.d4bf4e07.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.5c6a7856.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.fb300697.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.0b2ae05d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.4115855d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.487.0

22 findings
HIGH New obfuscated file: dist/index.bf524185.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.36f9a06b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.f0c72465.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.8a89ca3f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.c53da302.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.9631830d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.1cdbb331.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.041dabd6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.eccb09c0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.5c6e19b0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.2ade1f01.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.58692069.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.6e1a52e5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.79703130.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.2a3dfe26.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.6ad81bf9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.6ad81bf9.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.d0b1937b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.a8f525d1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.86630d3b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.c16bf195.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.486.0

22 findings
HIGH New obfuscated file: dist/index.de9f82ee.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.46b1ccc3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.81828a35.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.d126bba9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.f038b60b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.38b66e1d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.9e398b7d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.8a7e48b1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.748e2c98.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.ef665514.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.0fcae2ed.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.311c03fb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.c369ff06.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.31661f1e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.fa59b096.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.2dcba2a2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.2dcba2a2.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.efb25c0e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.23011f55.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.f27a32bb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.089ec9a7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.485.1

22 findings
HIGH New obfuscated file: dist/index.5a24978e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.9e770a64.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.348eac2a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.3ef9954f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.1f318b6d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.cecb07b3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.12989e9f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.1e65054f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.9fb0ef21.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.6d2f106c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.fe57662a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.188ccf0e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.ec3b9716.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.e489e677.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.000473d5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.b17d86d3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.b17d86d3.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.0227480b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.7f64672d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.b734d363.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.346af7b4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.485.0

22 findings
HIGH New obfuscated file: dist/index.dcd60e3b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout.entry.ae7f1bb1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.f049875a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.047b9898.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.3c71f12b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-card.entry.9ab11f4c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.22df7f7a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.924ff9cc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.3b4a0406.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-data-cell.entry.8670b7f8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.c7f80e55.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.17a18ca2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-chip.entry.a7e7958b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.c568264a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_7.entry.5f8cf6e8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer-audio_7.entry.8f666733.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer-audio_7.entry.8f666733.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.e59bc714.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-box.entry.3e1660f3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-moderator.entry.03bb128a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-icon-add-photo.entry.c31dc6b7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.449.0

17 findings
HIGH New obfuscated file: dist/file-manager.entry.305e64bb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.90052340.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-action-list_7.entry.639c09d8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.be89c45d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.b70967da.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.c5494fa9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.f6839ec4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.e6365828.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.3184e3d8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.35f1b3e5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.899ebc72.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.8558634b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.15189fdd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2026-02-25, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2026-02-25, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.426.4

16 findings
HIGH New obfuscated file: dist/file-manager.entry.82b1aa51.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.0c15968e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.46abfa5a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.fd22accd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.b5b72b90.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.6023768c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.b1eccbd7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.5760f4f9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.b99fedd2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.f5fdc157.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.33ee8854.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.2be07328.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2026-01-13, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2026-01-13, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.426.3

16 findings
HIGH New obfuscated file: dist/file-manager.entry.82b1aa51.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.0c15968e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.46abfa5a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.fd22accd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.b5b72b90.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.6023768c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.b1eccbd7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.5760f4f9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.b99fedd2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.f5fdc157.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.33ee8854.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.2be07328.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2026-01-12, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2026-01-12, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.426.1

16 findings
HIGH New obfuscated file: dist/file-manager.entry.e575e242.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.e285cfde.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.13c15dc6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.98513fcc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.f4ad5579.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.57fac274.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.61b56b7c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.bbad0c80.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.6cf23332.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.ad009246.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.7c52f34a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.0512319c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2026-01-09, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2026-01-09, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.423.1

19 findings
HIGH New obfuscated file: dist/file-manager.entry.f2972d48.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.35f78530.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.82b46423.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.4cbb4aa0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.8863c726.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.fc62952d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.1d951521.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.dd7ee3b7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.06302fac.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.0d7d2df3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.3df6ee26.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.609f4f9b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_8.entry.9b9ccc75.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer_8.entry.9b9ccc75.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.166db8a8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2026-01-06, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2026-01-06, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.421.0

19 findings
HIGH New obfuscated file: dist/file-manager.entry.2d9dca6a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.70e31e9b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.f6501e5c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.7ae893c2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.34940f99.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.adc5e540.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.1d6409fc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.344ae83f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.48969b06.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.041a566d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.cd7f0d9c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.f6921eeb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_8.entry.f5bbeb84.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer_8.entry.f5bbeb84.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.6aec56bb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2025-12-12, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2025-12-12, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.420.1

19 findings
HIGH New obfuscated file: dist/file-manager.entry.1032d401.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.4f89ea4e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.2f49c97b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.c140f3b0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.0fecc3a0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.80b6a396.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.c5e6ebd4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.dad0169c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.1107c87a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.62d4b77c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.721f723e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.cd0d79a6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_8.entry.c6f9dc93.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer_8.entry.c6f9dc93.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.56bbdec4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2025-12-09, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2025-12-09, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.420.0

19 findings
HIGH New obfuscated file: dist/file-manager.entry.357472d6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.bd356e40.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.4cc2591c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.2d533091.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.767557ed.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.ed03282f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.d69f7501.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.5826651d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.8ed65282.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.cf7bb1c2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.cc656210.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.7a052998.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_8.entry.dff26b98.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer_8.entry.dff26b98.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.b28bf1dd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2025-12-09, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2025-12-09, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.

v0.418.0

19 findings
HIGH New obfuscated file: dist/file-manager.entry.b5194449.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index-D3UoejeY.7db8c51e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/index.8833f6c5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-app-layout_5.entry.b13b73bc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-avatar.entry.615ea2d5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-banner.entry.ddba7c4d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-button.entry.7afa6786.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-checkbox.entry.e59d1a00.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-chip.entry.873d0e13.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-console-layout.entry.479b28dc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-date-picker_2.entry.fc516789.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-dialog.entry.f83e64a7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-uploader.entry.b7c4d344.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/swirl-file-viewer_8.entry.673e24af.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/swirl-file-viewer_8.entry.673e24af.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/swirl-form-control.entry.62f8538b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/swirl-components-react.umd.cjs source-diff

Modified file contains 1 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

INFO Publisher changed: getflipapp → psiekmann (on 2025-12-08, known maintainer) provenance

This version was published by a different npm account (psiekmann) than the most recent previously approved version (getflipapp) on 2025-12-08, but psiekmann is listed as a maintainer on prior approved versions (matched on name). This looks like a manual publish by a known maintainer rather than a publisher change. Recorded as INFO for audit trail.