@juspay/shooter
Bidirectional communication server for Claude Code and iOS — push notifications, remote terminal, session viewing
36
Versions
MIT
License
Yes
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
balaganesh_juspayitadminmurdoregeorgejamessahil_sinhadhineshrksswaroopvarma2359
Keywords
claude-codeclaudeopencodeai-codingagenticpush-notificationsapnsfcmweb-pushremote-terminalptywebsocketmobilesveltekitcloudflare-tunneldevtoolsnotificationstelemetry
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.G6hV-qqk.js | AI (source-diff): Vite bundler banner confirms build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/Bec5KlYV.js | AI (source-diff): Vite-bundled client chunk, not true obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Expected growth from SvelteKit build output, not injected code. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.DfL9kMC4.js | AI (source-diff): Vite bundler output, consistent with SvelteKit build artifacts. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CFPgQOa8.js | AI (source-diff): Vite bundler output, consistent with SvelteKit build artifacts. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/11.BxY1PUjC.js | AI (source-diff): Vite/SvelteKit bundled client output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.BGPYD1s1.js | AI (source-diff): Vite/SvelteKit bundled client output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.Qn7Ktiht.js | AI (source-diff): Vite/SvelteKit bundled client output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.Bc2qALkX.js | AI (source-diff): Vite/SvelteKit bundled client output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.f46Ko1hu.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/B9WQy_3X.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/nWG9RHyB.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.Bs362gyb.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.DV8cJ1lX.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.B3SEB_li.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.Dhf4ZWW0.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.CdC092Za.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.Cf7_3uqT.js | AI (source-diff): Vite/Svelte bundled build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.Cgc5iTlM.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.CKTUHtnx.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.CLtsjLeG.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.C4-N3geF.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.B0PrrcUG.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/gxvWeAns.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.BXKvUopV.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.Df0leW0d.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.6V-37_Rl.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable component logic visible in sample, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.BEbzRcwm.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable component logic visible in sample, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.BG0nmgRD.js | AI (source-diff): Standard SvelteKit/Vite bundled output with hashed filenames; not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.tW_P9jY7.js | AI (source-diff): Standard SvelteKit/Vite bundled output with hashed filenames; not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.BU_sJ5_M.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/DlSs5Yra.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.B-sEFuLK.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.C1vJI771.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.BIQq9Yuz.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.BSsUBbIT.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.C9vlOBU0.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.CiUyTQg5.js | AI (source-diff): Standard Vite/SvelteKit minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/11.CKmZjP_a.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.Cbm7nQKK.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.oaPwxh1O.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.BFYS2g9C.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.BgLpGnzb.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.zlrdNFtH.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.CF7RGXpe.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.0MMe3oxR.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.DcRhsjYp.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/11.BV_G7yLI.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/11.C18nMGmp.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.D1wl2wPX.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.DIVKuZc9.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.CBX9A3ka.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.Wfz3TcJd.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.D1Mm0DUX.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.DVE6LnOC.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.MfBRh32I.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.DtZAEPXb.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.1tiK5o4L.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.B4pLxBkI.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.CVsskPw5.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/11.CdmPyt4k.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.558mUFIl.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.BRFdS_ay.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CiQHPW0j.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/CbINytmr.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.DhJ2K3GQ.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.Chn2ZM2V.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.DyQTorXE.js | AI (source-diff): SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.B1LwwEF-.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.BPa5fh75.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.DSM1znqa.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/DOHhmtDH.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CSJG7N9H.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.KwzWaMHj.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.CG0mrgBU.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.B7UJd8GQ.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not true obfuscation. | ai | |
| install-behavior | install-behavior:native-compile | AI (install-behavior): Rebuilds node-pty and better-sqlite3 — documented native deps; no network fetch or exfil. | ai | |
| install-behavior | install-behavior:privilege-escalation | AI (install-behavior): node-gyp rebuild is not privilege escalation; false positive for this native-binding postinstall. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.C_B2eMms.js | AI (source-diff): Standard SvelteKit/Vite bundled output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.CnSSjKHX.js | AI (source-diff): Standard SvelteKit/Vite bundled output; not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.CsX0V4R9.js | AI (source-diff): Same SvelteKit build artifact pattern; readable component logic confirms minification only. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.MlMcxYLT.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable imports and SVG strings confirm bundled, not obfuscated. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.CG4eKRH0.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.DUlpocIc.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.BusCVJWk.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.BjKgvSie.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.DHilxD1o.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/ByzqAuXw.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CNaTe-zm.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.BRT6HOXB.js | AI (source-diff): Standard SvelteKit/Vite minified build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/10.ChiIrIDl.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.Bv_TwEnq.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscated malware. | ai | |
| semgrep | semgrep:shady-links-raw-ip | AI (semgrep): 127.0.0.1 localhost IPC call to local notification API; not exfiltration. | ai | |
| semgrep | semgrep:hex-decode | AI (semgrep): Hex decode used for scrypt password verification with timingSafeEqual; standard crypto pattern. | ai | |
| semgrep | semgrep:etc-passwd-access | AI (semgrep): Reference is in a comment explaining path traversal prevention logic, not actual /etc/passwd access. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.iMIqsE7n.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/11.DO3vyXEv.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.DfVtwT6x.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/D8sAtVC-.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.rri2K7zq.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.g02G0hlL.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.BkFDeNg9.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.DFkQ9bmS.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.sGijgjBd.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.COrzaySY.js | AI (source-diff): Standard SvelteKit/Vite minified build output; expected artifact for this package. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.DVFe_SN2.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/C2yx8lo8.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.CbIw97FV.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.DGStHrkF.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.CEiUUm74.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.CS_KYbQ7.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.Deb3vtJl.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.Bfisx3a0.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.BiyoREYq.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.yF5DyySX.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.DzMPM9CG.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.Bj2gzFb0.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.YxEM6HVV.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.DetO0mOw.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.CYSmE4eH.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.Bqul0XyM.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.B_E4j3MX.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.CTqUQKSN.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.BvjUfHnH.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.5K7Od8ba.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.Bs1DrW0_.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.1fMlGdqv.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.zJvbFXsj.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.nFNxeHLO.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.Vq2hU4jC.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable component logic visible in samples. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.C9533L9p.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.BJ2KZBR0.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.BW3qRNSj.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.BBF3ti4G.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.LI1n0A_s.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/BX6TUKUr.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.DW-JPzyt.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/C9URPhwn.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.BRJS3bSR.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9._gEbLeEN.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.DtjRdVVT.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.cNNZm7gF.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.DSMOdSb2.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.bF7rX0-f.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.CKjSEOom.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/CrVuYlkB.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CWzZbNpA.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.CgvPBG9m.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.CUnGGKik.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.Co1ngwGh.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.pRflZhvu.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.5I21KR7K.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable UI component logic visible in samples. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CU7KVZja.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/BIaXC2t9.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.IgEqce53.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.BPL-HzUX.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.DIkXVP4q.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.C25c5hMg.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.Cm269yzt.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.Bi3XYMSu.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable HTML/CSS content visible in samples. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.VV-tRemY.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/DZvnhU_8.js | AI (source-diff): Standard SvelteKit/Vite minified chunk output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/DYuMZGL5.js | AI (source-diff): Standard SvelteKit/Vite minified chunk output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/Cg3dlX05.js | AI (source-diff): Standard SvelteKit/Vite minified chunk output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/BFXEYMV8.js | AI (source-diff): Standard SvelteKit/Vite minified chunk output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.Dp9YhfEg.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.BSleOtKF.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.YJZruh1H.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.CmdrNdfj.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.BX9znBYU.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.CDJA8Na9.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.Cfj35gpY.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.BSVqdrrD.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.C-mKfSQ6.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.DqlYBRxO.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.BsPQpbNC.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.DgZG6DiA.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.CVaviSxa.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.BSGzQPKE.js | AI (source-diff): Standard SvelteKit minified build output; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/BDcFu3l7.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/B-aj0tWo.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.ueUUTVo4.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.CjYdYDhF.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.CWs7RaU8.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/780RSrro.js | AI (source-diff): Standard SvelteKit minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.Y_8EIs9h.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/Dfn9ME_a.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.C23A4_LP.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.BoJIHqox.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.DijtBcpt.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.DDMVIiVk.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.BN2SM61w.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.rBWJMWFr.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.dWYUfDXP.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.D2YR8tTD.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable UI code visible in samples. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.BPMfwzd2.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.Z3zMnuSx.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/B-K5Sh65.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/B5NAKyil.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/CQjSATpv.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/CZHsSL_X.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/DVkn4r72.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.ByTzlA2D.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.C6bLGWQR.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.DEAcwl7l.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.3yohCM25.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.CyRB2euU.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.jzwOIQUM.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.DLyiS7a7.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.BDETv_rs.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.Cuv-AoHz.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.C_uZdnK8.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.CdLPNo5-.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.B_pbOZoD.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.CYU2wJvk.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.BAtXcLWF.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/0.B76xpgU3.js | AI (source-diff): Standard SvelteKit/Vite minified build output; readable UI component logic visible in sample. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.CT86dtkE.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.BpFIHCgE.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.JmYAqwbO.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/3MMtouT7.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/4.BcK1571T.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/5.DRvLQ5NR.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.BnaLvG49.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.C9odxWmO.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2._DiTJ6NZ.js | AI (source-diff): Standard SvelteKit/Vite minified bundle output, not obfuscation. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/3.DC3WghxB.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/chunks/BEa4nlMF.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/entry/app.CP7226A7.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/9.gV8oJWv_.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/8.D4AzZWcq.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/7.DfniCleW.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/6.C4aXlZQd.js | AI (source-diff): Standard SvelteKit/Vite minified build output. | ai | |
| source-diff | obfuscated-file:build/client/_app/immutable/nodes/2.CzexDbwp.js | AI (source-diff): Standard SvelteKit/Vite minified build output; not malicious obfuscation. | ai | |
| install-scripts | install-script:preinstall | AI (install-scripts): npx only-allow pnpm is a standard package manager enforcement pattern, not malicious. | ai | |
| phantom-deps | phantom-dep:@juspay/svelte-ui-components | AI (phantom-deps): Same-org Svelte component library used in Svelte templates; phantom-dep heuristic misses template imports. | ai | |
| phantom-deps | phantom-dep:jsonwebtoken | AI (phantom-deps): JWT library likely used indirectly via config/server; stable false positive for this package. | ai | |
| install-scripts | install-script:postinstall | AI (install-scripts): Rebuilds node-pty and better-sqlite3 native bindings — standard pattern for terminal/SQLite packages. | ai | |
| phantom-deps | phantom-dep:tsx | AI (phantom-deps): tsx is used in the start script (tsx server.ts); phantom-dep heuristic misses script-only usage. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Image paste endpoint decodes base64 with explicit round-trip validation; benign use case. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Loads own package.json via path.join — not arbitrary user input; stable false positive for this package. | ai | |
| semgrep | semgrep:env-spread | AI (semgrep): Spreading process.env when spawning child processes is expected for a terminal/server tool passing environment to subprocesses. | ai | |
| semgrep | semgrep:child-process-import | AI (semgrep): Terminal emulator tool legitimately needs child_process to spawn shells and run commands. | ai |
Versions (showing 36 of 36)
| Version | Deps | Published |
|---|---|---|
| 1.27.0 | 19 / 33 | |
| 1.26.0 | 18 / 32 | |
| 1.25.0 | 18 / 32 | |
| 1.24.2 | 18 / 32 | |
| 1.24.1 | 18 / 32 | |
| 1.24.0 | 18 / 32 | |
| 1.23.0 | 18 / 32 | |
| 1.22.0 | 16 / 32 | |
| 1.21.0 | 16 / 32 | |
| 1.20.0 | 16 / 32 | |
| 1.19.0 | 16 / 32 | |
| 1.18.0 | 16 / 32 | |
| 1.17.0 | 16 / 32 | |
| 1.16.0 | 16 / 32 | |
| 1.15.0 | 16 / 32 | |
| 1.14.0 | 16 / 32 | |
| 1.13.0 | 16 / 32 | |
| 1.12.0 | 16 / 32 | |
| 1.11.0 | 16 / 32 | |
| 1.10.0 | 16 / 32 | |
| 1.9.3 | 16 / 32 | |
| 1.9.2 | 16 / 32 | |
| 1.9.1 | 16 / 32 | |
| 1.9.0 | 17 / 32 | |
| 1.8.0 | 17 / 32 | |
| 1.7.1 | 17 / 32 | |
| 1.7.0 | 17 / 32 | |
| 1.6.2 | 17 / 32 | |
| 1.6.1 | 17 / 32 | |
| 1.6.0 | 17 / 32 | |
| 1.5.0 | 17 / 30 | |
| 1.4.0 | 17 / 30 | |
| 1.3.0 | 17 / 30 | |
| 1.2.0 | 17 / 30 | |
| 1.1.0 | 17 / 30 | |
| 1.0.0 | 17 / 24 |
v1.27.0
13 findings
HIGH
New obfuscated file: build/client/_app/immutable/nodes/10.CVg_XsyF.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/11.D6Os_L5M.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/2.B5mN4DfF.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/3.C2cdb9W5.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/4.BVA1wEp0.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/5.CsRrW9dG.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/6.Do-kotLj.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/7.BssqTnKU.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/8.BUJrecMu.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/9.ClzClg9M.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/entry/app.G6hV-qqk.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — minified bundler output, not obfuscation on its own.
HIGH
New obfuscated file: build/client/_app/immutable/chunks/Bec5KlYV.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.26.0
5 findings
HIGH
Install script compiles native code with a raw toolchain
install-behavior
Detected raw native compilation in install lifecycle script(s): 'postinstall'.
HIGH
Install script escalates privileges
install-behavior
Detected privilege escalation in install lifecycle script(s): 'postinstall'.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/0.tW_P9jY7.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/10.BG0nmgRD.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.6.1
11 findings
HIGH
Install script compiles native code with a raw toolchain
install-behavior
Detected raw native compilation in install lifecycle script(s): 'postinstall'.
HIGH
Install script escalates privileges
install-behavior
Detected privilege escalation in install lifecycle script(s): 'postinstall'.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/0.DR-BBF5r.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/2.B08usYzr.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/3.CsY6J5HS.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/6.CbQQ3FtZ.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/7.CCKgiNNk.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/8.C7AaheUD.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: build/client/_app/immutable/nodes/9.DfL9kMC4.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.
HIGH
New obfuscated file: build/client/_app/immutable/entry/app.CFPgQOa8.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — minified bundler output, not obfuscation on its own.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.6.0
3 findings
HIGH
Install script compiles native code with a raw toolchain
install-behavior
Detected raw native compilation in install lifecycle script(s): 'postinstall'.
HIGH
Install script escalates privileges
install-behavior
Detected privilege escalation in install lifecycle script(s): 'postinstall'.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.