← Home

@hyperframes/studio

Browser-based composition editor UI for Hyperframes. Provides a visual timeline, code editor, and live preview for building video compositions.

100
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

vancejsmiguel.sierrajrusso1020

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:dist/assets/index-WxXW8fW3.js AI (source-diff): Minified React/Vite bundle, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CUt5jJXy.js AI (source-diff): Minified bundle (mediabunny lib), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-6Gsr598X.js AI (source-diff): Bundled mediabunny dependency, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-D3CdlGSD.js AI (source-diff): Bundled React/app entrypoint via Vite build, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-20PAVS4k.js AI (source-diff): Vite/esbuild bundled build output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-hiqLDAtz.js AI (source-diff): Vite-bundled app entry with React runtime, standard minification. ai
source-diff obfuscated-file:dist/assets/index-BCAdHPz_.js AI (source-diff): Bundled build output (mediabunny library), minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-DGXBYOME.js AI (source-diff): Bundled build artifact, license header intact, no malicious code. ai
source-diff obfuscated-file:dist/assets/index-CN9cFSSH.js AI (source-diff): Bundled build artifact (React/mediabunny), standard minification. ai
source-diff obfuscated-file:dist/assets/index-DXWeH-EY.js AI (source-diff): Vite bundle incl. React runtime, standard build output. ai
source-diff obfuscated-file:dist/assets/index-hueu10iU.js AI (source-diff): Bundled third-party media codec library, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-DsT9OH2w.js AI (source-diff): Bundled Vite app entry with React, standard minified output. ai
source-diff obfuscated-file:dist/assets/index-BRQ9g6Oo.js AI (source-diff): Bundled third-party media lib (mediabunny), minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-CjX8Ljc8.js AI (source-diff): Bundled third-party media library (mediabunny), license header intact. ai
source-diff obfuscated-file:dist/assets/index-B2Utv-2b.js AI (source-diff): Standard bundled React/vendor chunk from build tooling. ai
source-diff obfuscated-file:dist/assets/index-DlLW9GH4.js AI (source-diff): Standard React/Vite bundle output. ai
source-diff obfuscated-file:dist/assets/index-DiPzdh64.js AI (source-diff): Bundled third-party lib (mediabunny) with license header, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-D-3sGz65.js AI (source-diff): Minified Vite/React bundle output, build artifact not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CfiyaR7G.js AI (source-diff): Minified Vite bundle (mediabunny library), not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-Cfye9xzo.js AI (source-diff): Vite/esbuild bundled output, not obfuscation; no malicious payload. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-Daj5djxa.js AI (source-diff): Vite/esbuild bundled output, not obfuscation; no malicious payload. ai
source-diff obfuscated-file:dist/assets/index-HveJ0MuV.js AI (source-diff): Vite/esbuild bundled output, not obfuscation; no malicious payload. ai
source-diff obfuscated-file:dist/assets/index-_IV-vm9l.js AI (source-diff): Bundled minified build output (mediabunny lib), not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-B7S86vK1.js AI (source-diff): Vite/esbuild bundle output including React runtime, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BMBWKCJX.js AI (source-diff): Bundled media-processing library output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-9HfU4WBf.js AI (source-diff): Bundled build output including React/vendor libs. ai
source-diff obfuscated-file:dist/assets/index-mZiDOLTB.js AI (source-diff): Bundled third-party lib (mediabunny) with license header, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-D0468l1X.js AI (source-diff): Vite/esbuild bundled output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BqeN8dYQ.js AI (source-diff): Bundled media library output, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-B12MRH9w.js AI (source-diff): Bundled build output with license headers, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-Z4bA3Fi0.js AI (source-diff): Bundled React/app code from Vite build, standard minification. ai
source-diff obfuscated-file:dist/assets/index-wWkKTkIq.js AI (source-diff): Bundled third-party media lib (mediabunny), minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-_bjyggFK.js AI (source-diff): Bundled third-party lib (mediabunny) output via vite build. ai
source-diff obfuscated-file:dist/assets/index-DfeE1_Rl.js AI (source-diff): Standard Vite/React bundle output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-Ct-X2wlf.js AI (source-diff): Bundled third-party lib (mediabunny), minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-SYSbQyK4.js AI (source-diff): Vite bundle output including React runtime, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-CVHV-S-B.js AI (source-diff): Minified Vite/React bundle output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-P52mbTRb.js AI (source-diff): Minified bundled media library (mediabunny), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BZBjzYc8.js AI (source-diff): Bundled build output with visible library license headers. ai
source-diff obfuscated-file:dist/assets/index-CFm5HEIz.js AI (source-diff): Bundled build output (mediabunny library), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-ClVRei_K.js AI (source-diff): Bundled third-party lib (mediabunny) output. ai
source-diff obfuscated-file:dist/assets/index-DeqMZHQ4.js AI (source-diff): Standard Vite build bundle including React runtime. ai
source-diff obfuscated-file:dist/assets/index-DRrNf6k_.js AI (source-diff): Vite/tsup bundled app entry with React runtime; standard minified build output. ai
source-diff obfuscated-file:dist/assets/index-BCG-TnJO.js AI (source-diff): Vite-bundled third-party lib (mediabunny) minified output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-D4F6SvIQ.js AI (source-diff): Bundled build output referencing mediabunny/react, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-3Li9WN_Z.js AI (source-diff): Vite/esbuild bundled output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-B9YvRJz1.js AI (source-diff): Minified bundle (React/mediabunny libs), standard build artifact. ai
source-diff obfuscated-file:dist/assets/index-CQHiecE7.js AI (source-diff): Minified bundle with license headers, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BPya4QRs.js AI (source-diff): Bundled third-party lib (mediabunny) output. ai
source-diff obfuscated-file:dist/assets/index-BZqvc9Ns.js AI (source-diff): Standard Vite bundle entry, contains React internals. ai
source-diff obfuscated-file:dist/assets/index-DueKwqDv.js AI (source-diff): Bundled React/Vite build output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CoIF_vfx.js AI (source-diff): Bundled third-party media lib code, standard minification. ai
source-diff obfuscated-file:dist/assets/index-kbACg3_I.js AI (source-diff): Bundled vite entry chunk with React/JSX headers, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-D0yNztV_.js AI (source-diff): Bundled/minified vite output (media library), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-Ykq7ihge.js AI (source-diff): Bundled third-party lib (mediabunny) with license header intact, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BLRTwY5l.js AI (source-diff): Vite/esbuild bundle containing React and app code, not obfuscated. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-BBrKzTGd.js AI (source-diff): Bundled build output, not obfuscation; loads own project's runtime CDN asset. ai
source-diff obfuscated-file:dist/assets/index-l2BH41kD.js AI (source-diff): Vite/React bundled build output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BzjItfjX.js AI (source-diff): Standard Vite bundle including React runtime; minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-C0vMHtMH.js AI (source-diff): Bundled mediabunny library with visible license headers; build output. ai
source-diff obfuscated-file:dist/assets/index-CSG9kRJg.js AI (source-diff): Bundled React/vendor code, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BgbVhDYd.js AI (source-diff): Bundled Vite build output including React runtime, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-tn9M43-U.js AI (source-diff): Bundled mediabunny library code, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BXDHBcOw.js AI (source-diff): Vite/tsup bundled build output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-SlMJloLR.js AI (source-diff): Bundled mediabunny/media lib code, not obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-67pq7USK.js AI (source-diff): Vite/esbuild bundled output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-ho_f4axK.js AI (source-diff): Vite/esbuild bundled output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-HBY-OdAh.js AI (source-diff): Standard Vite entry bundle with modulepreload shim and React runtime, minified only. ai
source-diff obfuscated-file:dist/assets/index-CF35g_E4.js AI (source-diff): Bundled third-party lib (mediabunny) with MPL license header, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BX3GR25I.js AI (source-diff): Bundled third-party media lib (mediabunny), minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-mz4av-V1.js AI (source-diff): Standard Vite bundle including React/jsx-runtime, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-e4xyxg7-.js AI (source-diff): Bundled Vite entry chunk with React/module-preload boilerplate, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-C48wGs63.js AI (source-diff): Bundled third-party lib (mediabunny) output, standard minification. ai
source-diff obfuscated-file:dist/assets/index-BSyZKYmH.js AI (source-diff): Bundled React/vendor code, minification banners visible, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-Dgeszckd.js AI (source-diff): Bundled mediabunny library code with license header, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CLlPjdPl.js AI (source-diff): Standard Vite bundle entry with React runtime, minified build output. ai
source-diff large-new-source-files AI (source-diff): New bundled dist assets from normal build growth, consistent with UI package. ai
source-diff obfuscated-file:dist/assets/index-Bz6Eqd_G.js AI (source-diff): Bundled mediabunny library code, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-pAaVqALC.js AI (source-diff): Bundled mediabunny dependency, standard minification. ai
source-diff obfuscated-file:dist/assets/index-jbPe1Dih.js AI (source-diff): Bundled React/vendor code, standard minification. ai
source-diff obfuscated-file:dist/assets/index-BeRh2hMe.js AI (source-diff): Bundled React/app code from Vite build, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BoASKOeE.js AI (source-diff): Bundled third-party media codec lib (mediabunny), minified build output. ai
source-diff obfuscated-file:dist/assets/index-gk_X4nXD.js AI (source-diff): Bundled mediabunny library output, standard minification. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DNLS_l47.js AI (source-diff): Vite/esbuild bundled output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-B4h4u7eW.js AI (source-diff): Bundled vendor/react output, standard minification. ai
source-diff obfuscated-file:dist/assets/index-ysftPins.js AI (source-diff): Standard Vite bundle entry with React/module-preload boilerplate. ai
source-diff obfuscated-file:dist/assets/index-DsBhGFPe.js AI (source-diff): Bundled third-party lib (mediabunny) output, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-CTXExGxO.js AI (source-diff): Bundled vite output (mediabunny lib), not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-B7VWFKy1.js AI (source-diff): Bundled vite output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-iuaaor_Q.js AI (source-diff): Vite bundle with standard module-preload polyfill and React runtime code. ai
source-diff obfuscated-file:dist/assets/index-IDqTMz4S.js AI (source-diff): Bundled Vite/React build output with license headers intact. ai
source-diff obfuscated-file:dist/assets/index-DYRWmfMX.js AI (source-diff): Standard Vite bundle entry with React runtime, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BkwsVKGA.js AI (source-diff): Bundled third-party media lib (mediabunny) with license header, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BG050Nfr.js AI (source-diff): Bundled build output with visible license headers, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-C3MVn8bx.js AI (source-diff): Bundled Vite output (React/module preload boilerplate), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-C4cVeLOS.js AI (source-diff): Bundled third-party lib (mediabunny) with license header, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-hqkzfAEp.js AI (source-diff): Standard Vite-bundled React app output. ai
source-diff obfuscated-file:dist/assets/index-C5NAfiPa.js AI (source-diff): Bundled mediabunny library code, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-D_JGXmfx.js AI (source-diff): Bundled React/vendor code, standard build output. ai
source-diff obfuscated-file:dist/assets/index-CTiqZ7XQ.js AI (source-diff): Standard Vite/React bundle output, license headers visible, no obfuscation signature. ai
source-diff obfuscated-file:dist/assets/index-CQ3n6Y9q.js AI (source-diff): Bundled build output containing mediabunny library, license headers intact. ai
source-diff obfuscated-file:dist/assets/index-BNaPd3v2.js AI (source-diff): Vite/esbuild bundled output with visible React license headers. ai
source-diff obfuscated-file:dist/assets/index-BIIWBkq6.js AI (source-diff): Bundled Vite build output with React banner, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CUtjhezZ.js AI (source-diff): Vite bundler output (module preload boilerplate, React JSX runtime), not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CnZuUYe6.js AI (source-diff): Bundled build output with vendor license headers, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-DsVS-Zmd.js AI (source-diff): Bundled mediabunny vendor code, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-DApfviyW.js AI (source-diff): Minified Vite/React bundle output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-C1qkW56w.js AI (source-diff): Minified Vite bundle output, not true obfuscation; matches stated player functionality. ai
source-diff obfuscated-file:dist/assets/index-_elwW-31.js AI (source-diff): Bundled third-party lib (mediabunny) output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CtVcyRD2.js AI (source-diff): Standard Vite bundle with React internals, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DZWPbGBw.js AI (source-diff): Bundled Vite/React build output with license headers, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-NIdeStFw.js AI (source-diff): Bundled mediabunny library output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CKd39gmy.js AI (source-diff): Bundled Vite/React build output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DvpQwnaB.js AI (source-diff): Bundled mediabunny library code with visible license header, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-Dp0h2I9v.js AI (source-diff): Standard bundled React/vendor code, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-C4cUbqql.js AI (source-diff): Standard Vite entry bundle with React/module-preload boilerplate. ai
source-diff obfuscated-file:dist/assets/index-D2SMcOdY.js AI (source-diff): Third-party mediabunny library bundle with visible license header, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BT9VHgSy.js AI (source-diff): Standard Vite bundle with React license headers; build artifact not malware. ai
source-diff obfuscated-file:dist/assets/index-nCLBVKzI.js AI (source-diff): Bundled third-party lib (mediabunny) output, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-woy2HyV8.js AI (source-diff): Standard Vite bundle with React runtime, minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-Ce3pBm_I.js AI (source-diff): Bundled React/vendor code with license headers, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-D-ET9M0b.js AI (source-diff): Bundled mediabunny library code, not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-koqvg-_0.js AI (source-diff): Bundled React/app output, standard Vite build. ai
source-diff obfuscated-file:dist/assets/index-CRCE5Dz_.js AI (source-diff): Bundled third-party lib (mediabunny) output. ai
source-diff obfuscated-file:dist/assets/index-CWpmpjkU.js AI (source-diff): Vite bundled build output; long minified lines only. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-CNgCuEoe.js AI (source-diff): Vite/esbuild bundled dist output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DA_l-VKo.js AI (source-diff): Standard Vite/React bundled output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DY1rEFHu.js AI (source-diff): Vite/React bundled minified output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DRpY3xHh.js AI (source-diff): Bundled Vite/esbuild output, not obfuscation; no malicious behavior present. ai
source-diff obfuscated-file:dist/assets/index-DtSCUvYQ.js AI (source-diff): Minified React bundle (license headers visible), standard build artifact. ai
source-diff obfuscated-file:dist/assets/index-CDy8BuGq.js AI (source-diff): Bundled third-party lib (mediabunny) with MPL license header, standard minification. ai
source-diff obfuscated-file:dist/assets/index-CmRIkCwI.js AI (source-diff): Vite/React bundle entrypoint, standard build output. ai
source-diff obfuscated-file:dist/assets/index-BkT9VKwz.js AI (source-diff): Bundled build output (React/vendor libs), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-gpSohHUn.js AI (source-diff): Bundled media library (mediabunny) output with license headers intact. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-5iD9BZnx.js AI (source-diff): Vite/webpack bundled build output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CVDXfFQ6.js AI (source-diff): Vite bundle including React; minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-CccCJ2B6.js AI (source-diff): Bundled media library (mediabunny) output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-Ztwg53-a.js AI (source-diff): Vite/esbuild bundled output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CbNg8Ghm.js AI (source-diff): Bundled build output (React/vite preload shim), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-D4g6rWoS.js AI (source-diff): Minified vite/react bundle output, not true obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-BGuumSiM.js AI (source-diff): Vite/esbuild bundled output, not true obfuscation. ai
publish-pattern new-deps-added AI (publish-pattern): Deps are package's own monorepo siblings plus gsap; benign. ai
source-diff obfuscated-file:dist/assets/index-BRZTrsSs.js AI (source-diff): Bundled third-party lib (mediabunny) output, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-B8XMgbWF.js AI (source-diff): Bundled build output (React/vite), not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-CWTSv_j9.js AI (source-diff): Minified React/Vite bundle, standard build artifact. ai
source-diff obfuscated-file:dist/assets/index-ClZvune4.js AI (source-diff): Minified bundle (mediabunny lib), standard build artifact. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-BGW5hpsb.js AI (source-diff): Standard Vite minified output for the hyperframes player; not obfuscated, no malicious patterns in sample. ai
source-diff obfuscated-file:dist/assets/index-CkrVt5DX.js AI (source-diff): MPL-licensed mediabunny library bundled via Vite; license header visible in sample. ai
source-diff obfuscated-file:dist/assets/index-BXG-pbr_.js AI (source-diff): Standard Vite-bundled React app output; sample shows React JSX runtime with license headers. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DgsMQSvV.js AI (source-diff): Standard Vite minified bundle output for hyperframes player; not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-C52IT_lp.js AI (source-diff): Vite-bundled mediabunny/MPL-2.0 library; minified but not obfuscated. ai
phantom-deps phantom-dep:bpm-detective AI (phantom-deps): Used in build/config context; phantom-dep is a false positive for this package. ai
source-diff obfuscated-file:dist/assets/index-DrwSRbsl.js AI (source-diff): Vite-bundled React app bundle; standard minification, no obfuscation indicators. ai
source-diff obfuscated-file:dist/assets/index-Cw-8psGW.js AI (source-diff): Standard Vite/React minified bundle; not obfuscated. Pattern is stable for this package's build output. ai
source-diff obfuscated-file:dist/assets/index-CgYcO2PV.js AI (source-diff): Standard Vite minified bundle containing React and UI deps; not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-kfy9U4bN.js AI (source-diff): Standard Vite minified bundle with MPL-2.0 license header; consistent with normal build output. ai
source-diff obfuscated-file:dist/assets/index-C9b6Siu5.js AI (source-diff): Standard Vite minified bundle; React JSX runtime license header visible, consistent with normal build output. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-BRjQ5a5_.js AI (source-diff): Standard Vite minified bundle of the hyperframes player; not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-B8Qzwcpc.js AI (source-diff): Vite-bundled app entry point including React; minification is expected for this package. ai
source-diff obfuscated-file:dist/assets/index-DujOjou6.js AI (source-diff): Standard Vite minified bundle output; React/license headers clearly visible in sample. ai
source-diff obfuscated-file:dist/assets/index-CAANLw9Q.js AI (source-diff): Standard Vite minified bundle output; license headers and readable React patterns visible in sample. ai
source-diff obfuscated-file:dist/assets/index-qQxjvtjI.js AI (source-diff): MPL-licensed mediabunny bundle per visible copyright header; normal minified output. ai
source-diff obfuscated-file:dist/assets/index-DvlSlmGV.js AI (source-diff): Standard Vite-minified React bundle; license headers visible in sample. Not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-BcJO6Ej5.js AI (source-diff): Standard Vite minified bundle with visible React license headers; expected artifact for this UI library. ai
source-diff obfuscated-file:dist/assets/index-BKuDHMYl.js AI (source-diff): Standard Vite minified bundle with React license headers; consistent with normal build artifacts. ai
source-diff obfuscated-file:dist/assets/index-uB_W2GDl.js AI (source-diff): Standard Vite build output; minified React bundle, not obfuscated malware. Stable pattern for this package. ai
source-diff obfuscated-file:dist/assets/index-D1iVE2NO.js AI (source-diff): Standard Vite minified output with recognizable React license headers; expected build artifact for this package. ai
source-diff obfuscated-file:dist/assets/index-BWFaypdT.js AI (source-diff): Standard Vite-minified bundle with MPL-licensed mediabunny code visible. Expected artifact for this UI package. ai
source-diff obfuscated-file:dist/assets/index-BA979yF1.js AI (source-diff): Standard Vite-minified bundle; React/library code visible in sample. Expected artifact for this UI package. ai
source-diff obfuscated-file:dist/assets/index-Di-KR9Jt.js AI (source-diff): Standard Vite minified bundle with React license headers; normal build artifact for this package. ai
source-diff obfuscated-file:dist/assets/index-D624_ioT.js AI (source-diff): Standard Vite minified SPA bundle with React license headers; not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-BOdaPmiv.js AI (source-diff): Standard Vite minified bundle with React license headers; normal build artifact. ai
source-diff obfuscated-file:dist/assets/index-BA19FAPN.js AI (source-diff): Standard Vite-minified React bundle; React license headers visible in sample. Not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DYqqzECY.js AI (source-diff): Standard Vite/rollup minified bundle with React license headers; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-T-ME1rqL.js AI (source-diff): Standard Vite/rollup minified bundle output; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-PGTbQJF5.js AI (source-diff): Standard Vite minified bundle with React JSX runtime and license headers; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-D790O3az.js AI (source-diff): Standard Vite minified bundle containing React and app code; not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-B9_ctmee.js AI (source-diff): Standard Vite minified bundle containing React runtime; not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-DG5-N9Mj.js AI (source-diff): Standard Vite bundle containing React and other deps; React license headers visible in sample. ai
source-diff obfuscated-file:dist/assets/index-5_KsQTAa.js AI (source-diff): Standard Vite minified bundle with React JSX runtime and license headers; not obfuscated. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-BOs_kypk.js AI (source-diff): Standard Vite minified build output for a player component; CSS and iframe logic visible in sample, not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-CXGVO3lH.js AI (source-diff): Standard Vite bundle containing React production min and modulepreload polyfill; normal build artifact for this package. ai
publish-pattern rapid-publish AI (publish-pattern): CI/CD monorepo with 219 versions in 82 days; rapid publish is expected automated release pattern. ai
source-diff obfuscated-file:dist/assets/index-BpS6tww3.js AI (source-diff): Standard Vite minified bundle with React license headers; normal build artifact for this package. ai
source-diff obfuscated-file:dist/assets/index-CKJCBFsG.js AI (source-diff): Standard Vite/React production bundle; React JSX runtime visible in sample. ai
source-diff obfuscated-file:dist/assets/index-FFuagZGD.js AI (source-diff): Standard Vite/React minified bundle; React license headers visible in sample. Expected build output for this package. ai
source-diff obfuscated-file:dist/assets/index-Bj3m6A02.js AI (source-diff): Standard Vite bundle with React production min and license headers; normal build artifact. ai
source-diff obfuscated-file:dist/assets/index-2SbRRd33.js AI (source-diff): Standard Vite minified bundle with React JSX runtime; not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-0esDKGRk.js AI (source-diff): Standard Vite minified bundle; readable logic and license headers confirm legitimate build output. ai
source-diff obfuscated-file:dist/assets/index-Bvy50smZ.js AI (source-diff): Standard Vite minified bundle including React; licensed code with clear attribution. ai
source-diff obfuscated-file:dist/assets/index-Dcn0cnE7.js AI (source-diff): Standard Vite bundle with React production build; license headers and recognizable library code confirm legitimate minification. ai
source-diff obfuscated-file:dist/assets/index-DqUpjQUw.js AI (source-diff): Standard Vite minified bundle with React runtime; modulepreload polyfill and JSX runtime are clearly benign. ai
source-diff obfuscated-file:dist/assets/index-DfhSlTti.js AI (source-diff): Standard Vite/React production bundle; minification is expected for this UI component library. ai
source-diff obfuscated-file:dist/assets/index-aCeL3Cf-.js AI (source-diff): Minified React production bundle with Facebook license header; normal build artifact for this package. ai
source-diff obfuscated-file:dist/assets/index-B2QGnquo.js AI (source-diff): Standard Vite minified bundle (React, licensed deps); readable source, no malicious patterns. ai
source-diff obfuscated-file:dist/assets/index-D8oim9P5.js AI (source-diff): Standard Vite minified bundle with React license headers; consistent with normal build output. ai
source-diff obfuscated-file:dist/assets/index-C-pv1DOD.js AI (source-diff): Standard Vite/React production bundle; sample shows React JSX runtime and licensed library code. ai
source-diff obfuscated-file:dist/assets/index-CMBmEncK.js AI (source-diff): Standard Vite minified bundle; sample shows React production build with license headers. ai
source-diff obfuscated-file:dist/assets/index-BP8No8kB.js AI (source-diff): Standard Vite-bundled React output with @license headers; minification is expected for this UI library. ai
source-diff obfuscated-file:dist/assets/index-D1edGAWj.js AI (source-diff): Standard Vite/React production bundle; React JSX runtime visible in sample confirms legitimate build output. ai
source-diff obfuscated-file:dist/assets/index-DZE2PbOv.js AI (source-diff): Standard Vite/React minified bundle output; React license headers visible in sample confirm legitimate build artifact. ai
source-diff obfuscated-file:dist/assets/index-DpbZouXZ.js AI (source-diff): Standard Vite minified bundle; React JSX runtime visible in sample. Not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-ClOiW0pu.js AI (source-diff): Standard Vite minified build output with React license headers; not obfuscated malware. Stable pattern for this package. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DjsVzYFP.js AI (source-diff): Standard Vite minified bundle with CSS-in-JS; consistent with hyperframes-player build output. ai
source-diff obfuscated-file:dist/assets/index-Dcw3BoVw.js AI (source-diff): Standard Vite minified bundle; React license header visible in sample. Expected for this UI package. ai
source-diff obfuscated-file:dist/assets/index-JZr8f8y8.js AI (source-diff): Standard Vite bundle with React production build; license headers visible, normal minification pattern. ai
source-diff obfuscated-file:dist/assets/index-BSe0Kibk.js AI (source-diff): Standard Vite/React production bundle with @license headers; minified not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-BA9LlfxA.js AI (source-diff): Standard Vite minified bundle; React license headers visible in sample. Not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-B0VCLOXQ.js AI (source-diff): Standard Vite/React production bundle; minified output is expected for this UI component library. ai
source-diff obfuscated-file:dist/assets/index-B1XH-ptc.js AI (source-diff): Standard Vite minified bundle with React license headers; normal build artifact. ai
source-diff obfuscated-file:dist/assets/index-CZNoIjSE.js AI (source-diff): Standard Vite/React minified bundle; React JSX runtime license header visible. Stable false positive. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-ItPxPpgM.js AI (source-diff): Standard Vite minified bundle with readable CSS/HTML structure; consistent with normal build output. ai
source-diff obfuscated-file:dist/assets/index-BkBbJZGa.js AI (source-diff): Standard Vite minified bundle; React license headers visible in sample confirm legitimate build output. ai
source-diff obfuscated-file:dist/assets/index-Dc2HfqON.js AI (source-diff): Standard Vite minified bundle with React license headers; expected build artifact for this package. ai
source-diff obfuscated-file:dist/assets/index-C-kAqQVb.js AI (source-diff): Standard Vite/React minified bundle output; React license headers visible in sample confirm legitimate build artifact. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-WXAuftNy.js AI (source-diff): Standard Vite minified bundle; readable logic visible in sample, no malicious indicators. ai
source-diff obfuscated-file:dist/assets/index-H0HcrQX6.js AI (source-diff): Standard Vite minified bundle with React license headers; consistent with normal build output. ai
source-diff obfuscated-file:dist/assets/index-yjhGJAes.js AI (source-diff): Standard Vite minified bundle with React license headers; normal build artifact. ai
source-diff obfuscated-file:dist/assets/index-CveQve6o.js AI (source-diff): Standard Vite minified bundle with React JSX runtime and license headers. Not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-Bs6NmE0o.js AI (source-diff): Standard Vite-bundled React app output; sample shows React JSX runtime and modulepreload polyfill. ai
source-diff obfuscated-file:dist/assets/index-D6EwK2hA.js AI (source-diff): Standard Vite/React minified bundle; React JSX runtime visible in sample confirms legitimate build artifact. ai
source-diff obfuscated-file:dist/assets/index-RzXlAX2g.js AI (source-diff): Standard Vite minified bundle containing React production build; recognizable React internals in sample. ai
source-diff obfuscated-file:dist/assets/index-DxwbBcYY.js AI (source-diff): Standard Vite/React minified build output; readable license headers and library code confirm no obfuscation. ai
source-diff obfuscated-file:dist/assets/index-4xujzzbu.js AI (source-diff): Standard Vite/rollup minified bundle with React runtime; not obfuscated. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-CEnWY28J.js AI (source-diff): Standard Vite minified output with readable CSS and JS patterns. Not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-960mgQMI.js AI (source-diff): Standard Vite minified bundle; React license header visible in sample. Not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-gfyAaaaA.js AI (source-diff): Standard Vite minified bundle with visible React license headers; not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-DUqUmaoH.js AI (source-diff): Standard Vite/React production bundle; minified but not obfuscated — React license headers visible in sample. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DOFETgjy.js AI (source-diff): Standard Vite build output with readable CSS and JS patterns; not obfuscated. ai
source-diff obfuscated-file:dist/assets/index-DKII_C6N.js AI (source-diff): Standard Vite bundle with React production build; Facebook license header visible in sample, no malicious indicators. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DvTKPzaI.js AI (source-diff): Standard Vite/rollup minified output for a web component player; samples show CSS and normal JS patterns. ai
source-diff obfuscated-file:dist/assets/index-B4Cr7MVx.js AI (source-diff): Standard Vite minified bundle including React runtime; MPL/MIT license headers visible in sample. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-BP6jGdt0.js AI (source-diff): Standard Vite minified bundle of the hyperframes player; readable source logic visible in sample. ai
source-diff obfuscated-file:dist/assets/index-Yvtxngdi.js AI (source-diff): Standard Vite bundle with React license headers; minification is expected for this build tool package. ai
source-diff obfuscated-file:dist/assets/index-BdDNthf4.js AI (source-diff): Vite bundle containing React runtime (Meta license header visible); normal build artifact. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-DOZ3POPj.js AI (source-diff): Standard Vite minified bundle of @hyperframes/player; content matches declared dep, not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-CqiisJmo.js AI (source-diff): Standard Vite minified build output with visible React license header; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-CoI5h1xv.js AI (source-diff): Standard Vite minified build output; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-D4-n3yWG.js AI (source-diff): Standard Vite/React production bundle; minification is expected for this UI component package. ai
source-diff obfuscated-file:dist/assets/index-BV9ymBm4.js AI (source-diff): Standard Vite/React production bundle; React license header and recognizable React internals visible in sample. ai
source-diff obfuscated-file:dist/assets/index-CGWN-iUB.js AI (source-diff): Standard Vite minified bundle; sample shows React/JSX runtime and modulepreload polyfill. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-D0Yi3xMP.js AI (source-diff): Standard Vite minified bundle; sample shows legitimate iframe/playback adapter code, not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-18P_dZeo.js AI (source-diff): Standard Vite/React production bundle; minified output is expected for this UI component package. ai
source-diff obfuscated-file:dist/assets/index-DpPtpTye.js AI (source-diff): Standard Vite bundle with React production build; React license header visible, consistent with normal build output. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-Cd8vYWxP.js AI (source-diff): Standard Vite minified build output; CSS and component code visible in sample, not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DsFKgqkT.js AI (source-diff): Standard Vite minified bundle with React license headers; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-fBd_vNld.js AI (source-diff): Standard Vite minified bundle output; React/player code clearly visible in sample. ai
source-diff obfuscated-file:dist/assets/index-D2Zs8pHU.js AI (source-diff): Standard Vite bundle with React production build; sample shows normal module preload polyfill and React internals. ai
source-diff obfuscated-file:dist/assets/index-Do0kAMcy.js AI (source-diff): Standard Vite minified bundle output; React JSX runtime visible in sample. ai
source-diff obfuscated-file:dist/assets/index-DYjmgXgg.js AI (source-diff): Standard Vite/React minified bundle output; React license header visible in sample. Not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DmiO2Ufp.js AI (source-diff): Standard Vite minified bundle (React + app code); not obfuscation. Stable pattern for this package. ai
semgrep semgrep:new-function-constructor AI (semgrep): Used for JS syntax validation in a code editor component; try/catch pattern confirms intent is parsing, not execution of untrusted code. ai
source-diff obfuscated-file:dist/assets/index-C55KfVpx.js AI (source-diff): Standard Vite/React production bundle; React JSX runtime visible in sample. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-CWb0VPYD.js AI (source-diff): Standard Vite minified bundle of the package's own player code; not obfuscation. ai
source-diff obfuscated-file:dist/assets/index-Dzq4sUj7.js AI (source-diff): Standard Vite/React production bundle; minification is expected for this package's dist output. ai
source-diff obfuscated-file:dist/assets/index-hYc4aP7M.js AI (source-diff): Standard Vite minified bundle with React runtime; clearly legitimate build artifact. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-CzwFysqv.js AI (source-diff): Standard Vite minified bundle output; readable logic visible in sample, no malicious patterns. ai
provenance missing-githead AI (provenance): Expected when migrating to GitHub Actions CI publish with SLSA provenance. ai
provenance publisher-changed AI (provenance): Changed to GitHub Actions with SLSA attestation; legitimate CI migration. ai
source-diff obfuscated-file:dist/assets/index-BLIJTYAJ.js AI (source-diff): Standard Vite/React production bundle output; not obfuscated. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-C6QOH12J.js AI (source-diff): Minified web component bundle with readable CSS; standard build output. ai
source-diff obfuscated-file:dist/assets/index-CaRE7VOD.js AI (source-diff): Standard Vite/React minified bundle output; not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/index-DSLrl2tB.js AI (source-diff): MPL-2.0 licensed media library (mediabunny) minified bundle; expected for this package. ai
source-diff obfuscated-file:dist/assets/index-CAscydDF.js AI (source-diff): Standard Vite/React production bundle; sample shows React license header and modulepreload polyfill. ai
source-diff obfuscated-file:dist/assets/index-D0VntLIQ.js AI (source-diff): Standard Vite/React production bundle with Facebook license header; minification is expected for this build tool. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-vibA20NC.js AI (source-diff): Standard Vite minified build output; CSS and player component code visible in sample, not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-CB8_cuLZ.js AI (source-diff): Readable CSS and web component code in sample; minified by bundler, not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-DAQNCMgC.js AI (source-diff): Standard Vite minified build output; React license header visible in sample, not malicious obfuscation. ai
source-diff obfuscated-file:dist/assets/hyperframes-player-Zx0MOyMy.js AI (source-diff): Standard Vite minified build output; readable CSS/JS structure with license headers, not obfuscated malware. ai
source-diff obfuscated-file:dist/assets/index-FSgUtn41.js AI (source-diff): Standard Vite minified bundle including React; license header and readable structure confirm legitimate build artifact. ai
semgrep semgrep:api-obfuscation-reflect AI (semgrep): Reflect.get used for dynamic method dispatch in a playback helper; no obfuscation intent. ai
semgrep semgrep:shady-links-raw-ip AI (semgrep): Raw IP is 127.0.0.1 in a test fixture URL; not a live exfiltration endpoint. ai
phantom-deps phantom-dep:@hyperframes/core AI (phantom-deps): Same-org dep; phantom-dep heuristic false positive for this monorepo package. ai
phantom-deps phantom-dep:codemirror AI (phantom-deps): codemirror is a declared runtime dep referenced in config; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:motion AI (phantom-deps): motion is a declared runtime dep referenced in config; phantom-dep heuristic false positive for this package. ai

Versions (showing 100 of 246)

Version Deps Published
0.7.42 22 / 13
0.7.41 22 / 13
0.7.40 22 / 13
0.7.39 22 / 13
0.7.38 22 / 13
0.7.37 22 / 13
0.7.36 22 / 13
0.7.35 22 / 13
0.7.34 22 / 13
0.7.33 22 / 13
0.7.32 22 / 13
0.7.31 22 / 13
0.7.30 22 / 13
0.7.29 22 / 13
0.7.28 22 / 13
0.7.27 22 / 13
0.7.26 22 / 13
0.7.25 22 / 13
0.7.24 22 / 13
0.7.23 22 / 13
0.7.22 22 / 13
0.7.21 22 / 13
0.7.20 22 / 13
0.7.19 22 / 13
0.7.18 21 / 13
0.7.17 21 / 13
0.7.16 21 / 13
0.7.15 21 / 13
0.7.14 19 / 13
0.7.13 19 / 13
0.7.12 19 / 13
0.7.11 19 / 13
0.7.10 19 / 13
0.7.9 19 / 13
0.7.8 19 / 13
0.7.7 19 / 13
0.7.6 19 / 13
0.7.5 19 / 13
0.7.4 19 / 13
0.7.3 19 / 13
0.7.2 19 / 13
0.7.1 19 / 13
0.7.0 19 / 13
0.6.121 19 / 13
0.6.120 19 / 13
0.6.119 19 / 12
0.6.118 19 / 12
0.6.117 19 / 12
0.6.116 19 / 12
0.6.115 19 / 12
0.6.114 19 / 12
0.6.113 19 / 12
0.6.112 19 / 12
0.6.111 19 / 12
0.6.110 16 / 12
0.6.109 16 / 12
0.6.108 16 / 12
0.6.107 16 / 12
0.6.106 16 / 12
0.6.105 16 / 12
0.6.104 16 / 12
0.6.103 16 / 12
0.6.102 16 / 12
0.6.101 16 / 12
0.6.100 16 / 12
0.6.99 15 / 12
0.6.98 15 / 12
0.6.97 14 / 12
0.6.96 14 / 12
0.6.95 14 / 12
0.6.94 14 / 12
0.6.93 14 / 12
0.6.92 14 / 12
0.6.91 14 / 12
0.6.90 14 / 12
0.6.89 14 / 12
0.6.88 14 / 12
0.6.87 14 / 12
0.6.86 14 / 12
0.6.85 14 / 12
0.6.84 14 / 12
0.6.83 14 / 12
0.6.82 14 / 12
0.6.81 14 / 12
0.6.80 14 / 12
0.6.79 14 / 12
0.6.78 14 / 12
0.6.77 14 / 12
0.6.76 14 / 12
0.6.75 14 / 12
0.6.74 14 / 12
0.6.73 14 / 12
0.6.72 14 / 12
0.6.71 14 / 12
0.6.70 14 / 12
0.6.69 14 / 12
0.6.68 14 / 12
0.6.67 14 / 12
0.6.66 14 / 12
0.6.65 14 / 12
Showing 100 of 246 Next page →

v0.7.42

3 findings
HIGH New obfuscated file: dist/assets/index-3Li9WN_Z.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-D4F6SvIQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.41

3 findings
HIGH New obfuscated file: dist/assets/index-BCG-TnJO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DRrNf6k_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.40

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BBrKzTGd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B2Utv-2b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CjX8Ljc8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.39

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BBrKzTGd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B9YvRJz1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CQHiecE7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.38

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BBrKzTGd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BLRTwY5l.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-Ykq7ihge.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.37

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-Ct-X2wlf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-SYSbQyK4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.36

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-_bjyggFK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DfeE1_Rl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.35

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B12MRH9w.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BqeN8dYQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.34

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DiPzdh64.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DlLW9GH4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.33

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BZBjzYc8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CFm5HEIz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.32

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BRQ9g6Oo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DsT9OH2w.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.31

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-ClVRei_K.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DeqMZHQ4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.30

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-D0yNztV_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-kbACg3_I.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.29

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BX3GR25I.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-mz4av-V1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.28

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-Bz6Eqd_G.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CLlPjdPl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.27

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CoIF_vfx.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DueKwqDv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.26

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BPya4QRs.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BZqvc9Ns.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.25

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CF35g_E4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-HBY-OdAh.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.24

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CnZuUYe6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DsVS-Zmd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.23

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGuumSiM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B8XMgbWF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BRZTrsSs.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.22

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DNLS_l47.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B4h4u7eW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-gk_X4nXD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.21

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DNLS_l47.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-jbPe1Dih.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-pAaVqALC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.20

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DNLS_l47.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CUt5jJXy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-WxXW8fW3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.19

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DNLS_l47.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-DXWeH-EY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-hueu10iU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.18

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGW5hpsb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-D0468l1X.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-mZiDOLTB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.17

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGW5hpsb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BCAdHPz_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-hiqLDAtz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.16

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGW5hpsb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-C4cUbqql.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-D2SMcOdY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.15

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGW5hpsb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B7VWFKy1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CTXExGxO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.14

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-BGW5hpsb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BXG-pbr_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CkrVt5DX.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.111

3 findings
HIGH New obfuscated file: dist/assets/index-_IV-vm9l.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-B7S86vK1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.110

3 findings
HIGH New obfuscated file: dist/assets/index-CfiyaR7G.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-D-3sGz65.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.109

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-67pq7USK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-ho_f4axK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-SlMJloLR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.108

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-67pq7USK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BgbVhDYd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-tn9M43-U.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.107

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CVHV-S-B.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-P52mbTRb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.106

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CRCE5Dz_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-koqvg-_0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.105

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CKd39gmy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-NIdeStFw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.104

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-_elwW-31.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CtVcyRD2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.103

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-nCLBVKzI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-woy2HyV8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.102

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BzjItfjX.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-C0vMHtMH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.101

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CQ3n6Y9q.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-CTiqZ7XQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.100

4 findings
HIGH New obfuscated file: dist/assets/hyperframes-player-DgsMQSvV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-BkT9VKwz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/assets/index-gpSohHUn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.