@knime/jsonforms
Internal JSON Forms integration for frontend KNIME projects
51
Versions
GPL 3 and Additional Permissions according to Sec. 7 (SEE the file LICENSE)
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
knime
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-qJh2i8jg.js | AI (source-diff): Bundled UI library code, no concrete dropper/exfil behavior found. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-7V_qOAVZ.js | AI (source-diff): Bundled Vue/prosemirror build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-qJh2i8jg.js | AI (source-diff): Bundled Vue build output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DCfTRvaS.js | AI (source-diff): Bundled Vite chunk, not a real dropper. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-DSgXrz98.js | AI (source-diff): Bundled Vite chunk, not a real network+exec dropper. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BCGZoNkS.js | AI (source-diff): Minified bundle output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DCfTRvaS.js | AI (source-diff): Minified bundle output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-03c_9SNl.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-IdVXeih4.js | AI (source-diff): Bundled Vue component chunk, standard build output not a dropper. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-03c_9SNl.js | AI (source-diff): Bundled Vue component chunk, standard build output not a dropper. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-l85nraeu.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-Bb4-Hp2m.js | AI (source-diff): Same bundled chunk misflagged; no actual malicious network/exec behavior. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-D8tqh9Bd.js | AI (source-diff): Bundled date-fns/vue chunk; pattern match on minified code, no real network+exec malware. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-LU76hMfA.js | AI (source-diff): Minified Vue build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-Bb4-Hp2m.js | AI (source-diff): Minified Vue/lodash build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-j1Rzqzdj.js | AI (source-diff): Vite/Vue bundled output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-B9w5YlrD.js | AI (source-diff): False positive from bundled Vue component code, no real network exfil/exec pattern. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-B9w5YlrD.js | AI (source-diff): Vite/Vue bundled output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl--7Q_WwmO.js | AI (source-diff): Vite/Rollup bundled Vue component, long lines from bundling not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BQ0OaRp7.js | AI (source-diff): Bundled date-fns utility code, not a dropper; no fetched/executed payload evident. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D1GNHDfC.js | AI (source-diff): Bundled Vue SFC output, no obfuscation signature. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D1GNHDfC.js | AI (source-diff): Bundled Vue component; false positive on network+exec pattern match. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-3pf9Mad5.js | AI (source-diff): Same bundled file as above; no malicious network/exec behavior found. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-3pf9Mad5.js | AI (source-diff): Bundled Vue component output, minified variable names only. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BSDuXS-r.js | AI (source-diff): Bundled Vue component (Vite/Rollup output), not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DlStha9G.js | AI (source-diff): Bundled Vue component code, minified; no actual dropper behavior in sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-BRgHua3C.js | AI (source-diff): Minified Vite bundle output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-D3qfOznl.js | AI (source-diff): Minified Vite bundle output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DMshyM5o.js | AI (source-diff): Bundled Vue/date-fns chunk, not a dropper; no fetched code execution. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-BRgHua3C.js | AI (source-diff): Bundled Vue chunk, not a dropper. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DAdzHTim.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DAdzHTim.js | AI (source-diff): Bundled Vue component output, no malicious network/exec behavior. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-C7kma5fB.js | AI (source-diff): Bundled Vue component output, not a real dropper/loader. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-TbANBneT.js | AI (source-diff): Minified bundler output (long lines), not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-DBzWaC1M.js | AI (source-diff): Bundled Vue component chunk, no fetched/executed payload found. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-jODEm1Ob.js | AI (source-diff): Bundled lodash/date-fns utility code, no malicious network/exec behavior. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-jODEm1Ob.js | AI (source-diff): Vite bundler output, minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Dmo1oCBw.js | AI (source-diff): Vite bundler output, minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Bt1uDp0C.js | AI (source-diff): Bundled Vite output, not true obfuscation; long line is minification. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D4vcU0IR.js | AI (source-diff): Bundled Vue component code, no real dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D4vcU0IR.js | AI (source-diff): Bundled build artifact, minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BZb02fjo.js | AI (source-diff): Bundled Vue/date-fns code, not a dropper; no real network+exec malicious behavior. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-iaqOEHpE.js | AI (source-diff): Standard Vite/Rollup bundled output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BuKsDBUW.js | AI (source-diff): Bundled build artifact, standard chunk naming from Vite. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-Bl9xa5Jk.js | AI (source-diff): Bundled Vue component chunk, not a loader/dropper. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-5o904Fvx.js | AI (source-diff): Vite/Rollup bundled output, long lines are minification not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BuKsDBUW.js | AI (source-diff): Bundled Vue component, no malicious network/exec behavior. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Bc77QOha.js | AI (source-diff): Bundled vendor code (prosemirror/lodash-like utils), no real net+exec malware behavior shown. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Bc77QOha.js | AI (source-diff): Bundled Vue component build output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-B8axT3L6.js | AI (source-diff): Bundled Vue/rich-text build output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-BFx3A36I.js | AI (source-diff): False positive on minified bundler output, no real exfil payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DVqyBt2N.js | AI (source-diff): Bundled Vue/ProseMirror build output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-BFx3A36I.js | AI (source-diff): Bundled Vue build output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BwXsSmUx.js | AI (source-diff): False positive on bundled Vue framework code, no real network+exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-FgGsWYtG.js | AI (source-diff): Vite/Vue bundled output, minified not obfuscated; no malicious behavior found. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BwXsSmUx.js | AI (source-diff): Vite/Vue bundled output, minified not obfuscated; no malicious behavior found. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-iRo7Tjed.js | AI (source-diff): Bundled lib code triggers pattern, no dropper behavior present. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-iRo7Tjed.js | AI (source-diff): Bundled Vue component chunk, minified build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BFrjTWzo.js | AI (source-diff): Bundled Vue/prosemirror rich-text editor output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-C_cPLZAX.js | AI (source-diff): Bundled Vue/UI library code, no genuine dropper behavior found. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-C_cPLZAX.js | AI (source-diff): Bundled Vue component chunk, minified build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-b2SZcRMO.js | AI (source-diff): Bundled Vue/prosemirror rich-text editor output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-CYI3TitX.js | AI (source-diff): Bundled Vue component output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-CYI3TitX.js | AI (source-diff): Standard bundled UI library code, no malicious network/exec behavior found. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Mcxf362n.js | AI (source-diff): Bundled Vue component output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BsjK2bfg.js | AI (source-diff): Bundled Vue/date-fns library code, not a loader/dropper; standard vite build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DdcAlrOe.js | AI (source-diff): Bundled minified Vue component output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-B0LoqW_R.js | AI (source-diff): Bundled Vue/date-fns chunk; no malicious network/exec behavior in sample. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_9a6ceb77_lang-BW-mZTJ9.js | AI (source-diff): Bundled Vue chunk; benign dynamic import pattern misflagged. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_9a6ceb77_lang-BW-mZTJ9.js | AI (source-diff): Bundled minified Vue component output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Ducup0yA.js | AI (source-diff): Vite/Rollup bundled Vue chunk, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Ducup0yA.js | AI (source-diff): False positive on minified bundle, no actual dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Dekvygdy.js | AI (source-diff): Vite/Rollup bundled Vue chunk, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DYizf_Fj.js | AI (source-diff): Bundled date-fns/vue chunk, not a dropper; no malicious network/exec payload in sample. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-CwE6CdU-.js | AI (source-diff): Minified bundler output, no true obfuscation signature. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-CwE6CdU-.js | AI (source-diff): Bundled Vue component code, not a dropper; standard build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BYuWpXlC.js | AI (source-diff): Minified bundler output, no true obfuscation signature. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DA3ktTUE.js | AI (source-diff): Bundled Vue component code, not a dropper; standard build output. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-hSkp77fS.js | AI (source-diff): Bundled date-fns/timezone helper chunk, not a loader/dropper. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D6vbe1qN.js | AI (source-diff): Bundled Vue component chunk, no real network/exec payload. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D6vbe1qN.js | AI (source-diff): Minified Vite bundle output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-dmZ7cuIT.js | AI (source-diff): Minified Vite bundle output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-Csc9A2Dh.js | AI (source-diff): Vite/rollup bundled build output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CVs0wKA7.js | AI (source-diff): date-fns/lodash-es bundled utility code, no actual network calls. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DEROZVnl.js | AI (source-diff): Bundled Vue component output, minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CKp1n16K.js | AI (source-diff): Bundled date-fns/vue chunk; no exfil/exec payload, just minified build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CvU0zQFe.js | AI (source-diff): Vite-bundled Vue component, long lines from minification not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-4F1fSADx.js | AI (source-diff): Bundled lodash/vue helper chunk, minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-4F1fSADx.js | AI (source-diff): Same bundled chunk as above; no malicious network/exec behavior found. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-Cxr_haDx.js | AI (source-diff): Bundled date-fns/timezone utility code, not a dropper. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DrD2G9mI.js | AI (source-diff): Bundled lodash-es/Vue chunk, minified build output. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DrD2G9mI.js | AI (source-diff): Bundled chunk, false-positive net-exec pattern match. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DDOPOiZ_.js | AI (source-diff): Vite/Rollup bundled Vue component, minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BLOKJUkY.js | AI (source-diff): Bundled Vue component output, not a dropper; standard vite build artifact. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-ByZ6Idr0.js | AI (source-diff): Minified bundled Vue chunk, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-ByZ6Idr0.js | AI (source-diff): Bundled Vue component output, not a dropper. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DVjT-s68.js | AI (source-diff): Minified bundled Vue chunk, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-B30lQ3sx.js | AI (source-diff): Bundled Vue component chunk, no malicious payload in sample. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-ikOmp5Zc.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-Dq3HWX2w.js | AI (source-diff): Bundled library code, no malicious behavior found. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-Dq3HWX2w.js | AI (source-diff): Minified bundler output (vue/lodash-es), not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-BjOtZEcH.js | AI (source-diff): Vite-bundled Vue component, minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-BjOtZEcH.js | AI (source-diff): False positive on bundled Vue chunk; no real network+eval malware pattern. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-D4ItwmZa.js | AI (source-diff): Vite-bundled Vue component, minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DPEuwJa6.js | AI (source-diff): Minified bundled component, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-BBYFOm6u.js | AI (source-diff): Bundled Vue chunk, not a dropper. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-BBYFOm6u.js | AI (source-diff): Minified bundled component, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-2y-84JDO.js | AI (source-diff): Bundled Vue/date-fns chunk, not a dropper; standard Vite build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Bj95gSZh.js | AI (source-diff): Vite-bundled Vue component (prosemirror-based rich text editor), not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-CWUbrv-w.js | AI (source-diff): False positive on bundled Vue/lodash code; no fetched-binary or exfil behavior found. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-CWUbrv-w.js | AI (source-diff): Vite-bundled Vue component chunk, minified build output not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-C9YO3ppq.js | AI (source-diff): Bundled component chunk, no hostile behavior in sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-C9YO3ppq.js | AI (source-diff): Minified Vite bundle output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-C4gRydkM.js | AI (source-diff): Minified Vite bundle output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DVElW9rD.js | AI (source-diff): Bundled Vue/date-fns chunk, no malicious network/exec payload found in sample. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-JjnvZRsX.js | AI (source-diff): Bundled Vue/prosemirror rich-text editor output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-tCMg8Sm4.js | AI (source-diff): False positive on bundled Vue/lodash internals; no actual dropper behavior present. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-tCMg8Sm4.js | AI (source-diff): Bundled Vue component chunk, minified build output not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-BPHo9PW3.js | AI (source-diff): False positive on bundled vendor code, no real net+exec behavior. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BgiAUQYy.js | AI (source-diff): Vite-bundled Vue component output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-BPHo9PW3.js | AI (source-diff): Bundled build artifact, minified but not obfuscated. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-B1Ey6pj2.js | AI (source-diff): Same bundled file as above, false positive on build output. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-C1z-tWPY.js | AI (source-diff): Bundled Vue/lodash build output, not a dropper; no malicious network+eval behavior in sample. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DKlFtbdd.js | AI (source-diff): Minified Vite bundle, long import lines mistaken for obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-B1Ey6pj2.js | AI (source-diff): Bundled component chunk; standard minification, no obfuscation signature. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-B5XTvulp.js | AI (source-diff): Bundled Vue/lodash build output, not a network+exec dropper. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-Ssy7Zaqp.js | AI (source-diff): Bundled build output; no fetched/executed payload observed. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-Ssy7Zaqp.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DPX_lxfc.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-BYoCo820.js | AI (source-diff): Minified Vite bundle chunk, no true obfuscation signature. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-5E_obOH5.js | AI (source-diff): Bundled date-fns/vue chunk, not a dropper; standard build output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CdhHDOWn.js | AI (source-diff): Minified Vite bundle chunk, no true obfuscation signature. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-BYoCo820.js | AI (source-diff): Bundled Vue component chunk, not a dropper; standard build output. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-H1rQVLn0.js | AI (source-diff): Bundled Vue component output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-C7d6IZGm.js | AI (source-diff): Bundled Vue component output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-H1rQVLn0.js | AI (source-diff): Bundled library code, no fetched binary or exfil behavior observed. | ai | |
| phantom-deps | phantom-dep:@knime/components | AI (phantom-deps): Same-org scope package, config/build reference. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-D7lL4y23.js | AI (source-diff): False positive on bundled Vue import machinery, no actual network+exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-C4Rivk0R.js | AI (source-diff): Vite/Rollup bundle output, not true obfuscation; consistent with prior builds. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-D7lL4y23.js | AI (source-diff): Bundled Vue component output, minified not obfuscated. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-y-ngQmpI.js | AI (source-diff): Bundled date-fns/Vue utility code, no actual dropper behavior in sample. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-LXk5i7aP.js | AI (source-diff): Bundled Vue/lodash utility chunk, not a loader/dropper. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BIjtuTf7.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-CYe4TfJy.js | AI (source-diff): Minified bundler output, not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-CYe4TfJy.js | AI (source-diff): Bundled Vue component chunk, not a loader/dropper. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-0kM0h5n9.js | AI (source-diff): Bundled build output, false positive on minified helper code. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-MjRTLFs5.js | AI (source-diff): Bundled Vue/date-fns chunk; minified imports, no real net+exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-tgwEqxrR.js | AI (source-diff): Bundled build output (Vite), not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-0kM0h5n9.js | AI (source-diff): Bundled build output (Vite/lodash-es), not true obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-F5YI_AcK.js | AI (source-diff): False positive on minified bundle; no actual network+exec malware pattern. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-F5YI_AcK.js | AI (source-diff): Vite-bundled Vue component output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Bq7YLonH.js | AI (source-diff): Vite-bundled Vue component output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BVFJFQ9N.js | AI (source-diff): Bundled vite/vue chunk (date-fns utils), not a dropper; false positive on minified bundle. | ai | |
| dependencies | unvetted-dep:@knime/kds-rich-text-editor | AI (dependencies): Same-org KNIME scoped dependency, part of design system. | ai | |
| license | uncommon-license:GPL 3 | AI (license): Legitimate GPL license used consistently across KNIME packages. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-YEul6CJZ.js | AI (source-diff): Minified bundler output, no true obfuscation signature present. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-BPaZ_pEv.js | AI (source-diff): Bundled Vue component chunk, not a dropper; standard Vite build output. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DHWwwUrR.js | AI (source-diff): Minified bundler output (lodash/date-fns helpers), not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DHWwwUrR.js | AI (source-diff): Bundled utility chunk, no malicious network/exec behavior. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DMFM6w4o.js | AI (source-diff): Vite-bundled Vue/date-fns output; no actual network calls or dynamic execution in the sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-CbL60lGx.js | AI (source-diff): Minified Vite bundle output, not obfuscated malware; consistent with this package's build tooling. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-CbL60lGx.js | AI (source-diff): Standard Vite-bundled Vue ESM output; no actual network+exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Bxb6AARS.js | AI (source-diff): Minified Vite bundle output, not obfuscated malware; consistent with this package's build tooling. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CAPemwMO.js | AI (source-diff): Standard Vite-bundled Vue ESM output; no actual network+exec payload, just bundled date/time utilities. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CSTA4KtX.js | AI (source-diff): Standard Vite-minified Vue bundle; content is normal ES module code, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Wvr-HAK1.js | AI (source-diff): Standard Vite-minified Vue bundle; content is normal ES module code, not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Wvr-HAK1.js | AI (source-diff): Network/exec pattern fires on bundled rich-text-editor code; no actual dropper behavior visible in samples. | ai | |
| phantom-deps | phantom-dep:@knime/kds-rich-text-editor | AI (phantom-deps): Same-org dep used transitively via bundled dist; phantom-dep false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-ChVZO70R.js | AI (source-diff): Standard Vite build output for Vue components; minified but not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-BZ2fsJ3d.js | AI (source-diff): Standard Vite build output; samples show normal Vue/ESM imports and lodash patterns. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_a203e154_lang-BZ2fsJ3d.js | AI (source-diff): Network/exec pattern is a false positive in bundled Vue component code from a known KNIME package. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D4jxAp8C.js | AI (source-diff): Minified Vite bundle; Vue component code with lodash, no actual network/exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CvB3Xx6t.js | AI (source-diff): Standard Vite minified output for a Vue UI component; long lines are bundled imports, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-D4jxAp8C.js | AI (source-diff): Standard Vite minified output for a Vue component; long lines are bundled imports, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-oSScT2Z1.js | AI (source-diff): Minified Vite bundle; Vue imports and date-fns utilities, no actual network/exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Df4k74nF.js | AI (source-diff): Standard Vite minified output for a Vue rich-text component; not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-58jgxWu9.js | AI (source-diff): Vite-bundled Vue component chunk; long lines are minified imports, not malicious network+exec patterns. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-58jgxWu9.js | AI (source-diff): Standard Vite minified output; long lines are bundled lodash/Vue imports, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CuTc1DHe.js | AI (source-diff): Vite-bundled Vue/date-fns ESM chunk; no actual network fetch or dynamic eval in the sample. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-D9QD2_uO.js | AI (source-diff): Minified Vite build output; long lines are expected for bundled Vue components, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DiQR7rXG.js | AI (source-diff): Minified Vite build output; same false-positive pattern as RichTextControl. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DBMwKtLh.js | AI (source-diff): Standard Vite-bundled Vue component; 'network+exec' pattern is Vue reactivity APIs in minified output, not malware. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DiQR7rXG.js | AI (source-diff): Standard Vite-bundled Vue component; same false-positive pattern as localTimeUtils. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DxbPKu-F.js | AI (source-diff): Minified Vite bundle of Vue components; long lines are normal bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-CEtlgh5F.js | AI (source-diff): Minified Vite bundle; long lines are standard bundler output for this package. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DXn8oGe5.js | AI (source-diff): Standard Vite-bundled Vue/date-fns output; no actual network calls or dynamic eval in samples. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-CEtlgh5F.js | AI (source-diff): Standard Vite-bundled Vue component output; minified lines trigger rule but no malicious patterns present. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-D4H9LmQx.js | AI (source-diff): Standard Vite-bundled Vue component; no actual network+exec payload, just bundled imports. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DUrp-3o2.js | AI (source-diff): Minified Vite build output; long lines are normal for bundled Vue components. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BLz_U7Ly.js | AI (source-diff): Minified Vite build output; long lines are normal for bundled Vue components. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DUrp-3o2.js | AI (source-diff): Standard Vite chunk with lodash/Vue internals; no malicious network or exec pattern. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-D9REFhLS.js | AI (source-diff): Standard Vite minified output for a Vue rich-text component; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-_VwaFWB3.js | AI (source-diff): Standard Vite minified output; long lines are bundled Vue+lodash code, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-3uql0tij.js | AI (source-diff): Minified Vite bundle of Vue date/time utilities; no actual malicious network+exec pattern. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-_VwaFWB3.js | AI (source-diff): Minified Vite bundle of Vue component; false positive on bundled code patterns. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-D8YXvgUG.js | AI (source-diff): Sample is standard Vue/date-fns bundle output; no real network calls or dynamic exec present. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-B0NArLJ2.js | AI (source-diff): Vite-bundled ESM chunk with Vue/date-fns imports; no real network calls or dynamic exec — stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DMw9mAY-.js | AI (source-diff): Minified Vite build output; long lines are expected for bundled Vue component libraries. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DMw9mAY-.js | AI (source-diff): Standard Vite-bundled Vue component; network/exec pattern is browser UI APIs, not dropper behavior. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CdJwDe5o.js | AI (source-diff): Standard Vite-bundled Vue component; network/exec pattern is browser UI APIs, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DEapPFRg.js | AI (source-diff): Minified Vite build output; long lines are expected for bundled Vue component libraries. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-CnDElBeU.js | AI (source-diff): Same Vite chunk as obfuscated-file finding; no actual network or exec payload. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-CnDElBeU.js | AI (source-diff): Vite-generated scoped style chunk; sample shows lodash/Vue utilities, no malicious content. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BzdzJZor.js | AI (source-diff): date-fns/Vue bundle; 'network' and 'exec' signals are false positives from dynamic imports and typeof checks. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-B9I33cIU.js | AI (source-diff): Vite build artifact for rich-text editor component; no malicious patterns in sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-Bs29kRa4.js | AI (source-diff): Standard Vite minified output for a UI component; long lines are expected in bundled dist files. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-LoFBv9wb.js | AI (source-diff): Standard Vite minified output for a UI component; long lines are expected in bundled dist files. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-Bs29kRa4.js | AI (source-diff): Minified Vite bundle with Vue imports; no actual network fetch or eval — analyzer false positive on bundled code. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BHjaCQGk.js | AI (source-diff): Minified Vite bundle with Vue imports; no actual network fetch or eval — analyzer false positive on bundled code. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-B4sXG50p.js | AI (source-diff): Standard Vite-bundled Vue component; imports are from vue/lodash/date-fns, no actual network+exec payload. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-qxb7TlZF.js | AI (source-diff): Minified Vite build output for a rich-text Vue component; long lines are expected bundle format. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-QqVBwk2Y.js | AI (source-diff): Minified Vite build output; long lines are expected bundle format for this package. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-QqVBwk2Y.js | AI (source-diff): Standard Vite-bundled Vue component; no actual dropper/loader pattern present. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BDEWXlve.js | AI (source-diff): Same Vite bundle pattern; code is clearly Vue component library output, not malware. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BKrpWptT.js | AI (source-diff): Vite-bundled Vue component output; network/exec pattern is Vue reactivity + standard JS, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BDEWXlve.js | AI (source-diff): Minified Vite bundle; code structure matches legitimate Vue component library, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DP_G9eeL.js | AI (source-diff): Minified Vite bundle with readable Vue component structure; long lines are expected for bundled output. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-Dlr5vvag.js | AI (source-diff): Standard Vite minified ESM bundle; long lines from bundled lodash/date-fns utilities. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CWoV802y.js | AI (source-diff): Vite bundle with date-fns and Vue imports; no actual network calls or dynamic code execution. | ai | |
| source-diff | obfuscated-file:dist/index-Dyq6GaKc.js | AI (source-diff): Standard Vite minified ESM bundle; no obfuscation, just minified Vue component code. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-kheYEifs.js | AI (source-diff): Standard Vite minified ESM bundle for a rich text control component. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-Dlr5vvag.js | AI (source-diff): Same Vite bundle pattern; false positive from bundled utility code. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-9vUUhE9J.js | AI (source-diff): Minified Vite build output for a frontend library; long lines are expected bundled code. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BuFOMGSo.js | AI (source-diff): Standard Vite-bundled ESM output; Vue/lodash imports misidentified as network+exec pattern. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-CrCHZCp7.js | AI (source-diff): Minified Vite build output; long lines are expected for bundled Vue components. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-CrCHZCp7.js | AI (source-diff): Standard Vite-bundled ESM output; Vue component bundle misidentified as network+exec pattern. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-C1gAECu3.js | AI (source-diff): Standard Vite minified output; long lines are normal for bundled Vue components, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-Jq9ukHjM.js | AI (source-diff): Vite-bundled Vue component chunk; no actual network fetch or eval — minified imports from sibling chunks only. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DUiVfobT.js | AI (source-diff): Standard Vite minified output; long lines are normal for bundled Vue components, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DUiVfobT.js | AI (source-diff): Vite-bundled Vue component chunk; no actual network fetch or eval — standard minified Vue/lodash bundle. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DML-OwvR.js | AI (source-diff): Network/exec pattern is from bundled Vue/browser runtime code, not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DH6GqUeF.js | AI (source-diff): Vite-bundled Vue component output; minified but not obfuscated, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-DML-OwvR.js | AI (source-diff): Vite-bundled Vue component output; minified but not obfuscated, no malicious patterns. | ai | |
| source-diff | net-exec-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BseRdW9f.js | AI (source-diff): Network/exec pattern is from bundled Vue runtime and lodash-es; no actual dropper behavior in sample. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DvYkBpzH.js | AI (source-diff): Standard Vite-minified Vue bundle; long lines are normal build output for this package. | ai | |
| source-diff | obfuscated-file:dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_17a4a240_lang-BseRdW9f.js | AI (source-diff): Standard Vite-minified Vue bundle; long lines are normal build output for this package. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CvHKGQTr.js | AI (source-diff): Vite-minified ESM bundle; readable code, no obfuscation indicators. Stable pattern for this package. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-C5cOzVPC.js | AI (source-diff): Vite-bundled Vue/date-fns output; no actual network calls or dynamic exec in the sample — stable false positive for this package. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-nsJBcFCj.js | AI (source-diff): Standard Vite-bundled Vue component output; no actual network fetch or eval present in samples. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-mOEGN5Ue.js | AI (source-diff): Standard Vite-bundled Vue/date-fns output; no actual network fetch or eval present in samples. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-nsJBcFCj.js | AI (source-diff): Minified Vite build artifact; long lines are normal bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DgGRklWy.js | AI (source-diff): Minified Vite build artifact for a Vue component; long lines are normal bundler output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BlRVDpai.js | AI (source-diff): Bundle imports Vue reactivity and date-fns utilities; no actual network fetch or dynamic code execution present in sample. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-Do0etb2v.js | AI (source-diff): Bundle imports Vue/lodash utilities; no actual network fetch or dynamic code execution present in sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-Do0etb2v.js | AI (source-diff): Standard Vite-minified Vue component bundle; long lines are minification artifacts, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Bk7bf81X.js | AI (source-diff): Standard Vite-minified Vue component bundle; long lines are minification artifacts, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-wdKO5CDb.js | AI (source-diff): Standard Vite-bundled ESM dist file; no actual network/exec payload, just minified Vue+utility code. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-BQCvcmqS.js | AI (source-diff): Minified Vite build output for a UI component library; long lines are expected bundled code, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-BQCvcmqS.js | AI (source-diff): Standard Vite-bundled ESM dist file; no actual network/exec payload, just minified Vue+utility code. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BoNZN7wg.js | AI (source-diff): Minified Vite build output for a UI component library; long lines are expected bundled code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-BFzX4elt.js | AI (source-diff): Minified Vite build output for a Vue component; not obfuscated malware. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_9a6ceb77_lang-lisURb-9.js | AI (source-diff): Standard Vite-bundled Vue component; no actual network calls or dynamic exec in sample. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-Bjbd8EGK.js | AI (source-diff): Standard Vite-bundled Vue component; no actual network calls or dynamic exec in sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_9a6ceb77_lang-lisURb-9.js | AI (source-diff): Minified Vite build output for a Vue component; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-ASFeIuVd.js | AI (source-diff): Standard Vite minified output; long lines are expected in bundled dist files. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CLbVTo3I.js | AI (source-diff): Standard Vite minified output; long lines are expected in bundled dist files. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-ASFeIuVd.js | AI (source-diff): Minified Vite bundle; same false-positive pattern as localTimeUtils. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-DndZYfl_.js | AI (source-diff): Minified Vite bundle; dynamic component resolution in Vue is not dropper behavior. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-CewLhW6l.js | AI (source-diff): Minified Vite build output for a rich text editor component; long lines are expected bundler output. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-DuZjjKcZ.js | AI (source-diff): Minified Vite bundle; long lines are standard for this package's build output. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_2310b6b8_lang-DuZjjKcZ.js | AI (source-diff): Same pattern: standard Vite bundle with Vue dynamic component resolution, not network+exec malware. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CjAdGq92.js | AI (source-diff): Vite-bundled Vue component; resolveDynamicComponent is a Vue API, not malware dropper pattern. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-B5X5KcA6.js | AI (source-diff): Sample shows standard Vite-bundled Vue/date-fns code; no actual network calls or dynamic exec present. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-f4_oWidN.js | AI (source-diff): Vite-bundled ESM chunk; Vue runtime imports misidentified as network+exec; stable pattern for this package. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-DMWRo8Rw.js | AI (source-diff): Vite-bundled ESM chunk; Vue runtime imports misidentified as network+exec; stable pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-f4_oWidN.js | AI (source-diff): Standard Vite minified bundle; long lines are minified Vue component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DkV_1bmO.js | AI (source-diff): Standard Vite minified bundle; long lines are minified Vue component code, not obfuscation. | ai | |
| npm-metadata | url-dep:v-calendar | AI (npm-metadata): KNIME-owned Bitbucket fork used only in devDependencies; no runtime impact on consumers. | ai | |
| source-diff | net-exec-file:dist/DateTimeInput-DTyyMh2m.js | AI (source-diff): Standard Vite-bundled Vue component; no actual network+exec payload, just minified ESM imports. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DuNRJy9L.js | AI (source-diff): Standard Vite-bundled Vue component; no actual network+exec payload, just minified ESM imports. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-Cd0CGkK3.js | AI (source-diff): Minified Vite build output for a Vue component library; long lines are expected bundler output, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_625edfbe_lang-DuNRJy9L.js | AI (source-diff): Minified Vite build output for a Vue component library; long lines are expected bundler output, not obfuscation. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-BcdHc4dG.js | AI (source-diff): Standard Vite-bundled Vue ESM output; no actual network fetch or eval patterns in the sample. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-EKCgcK7i.js | AI (source-diff): Minified Vite build artifact; long lines are normal for bundled Vue component output. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-D-3Bt71E.js | AI (source-diff): Minified Vite build artifact; long lines are normal for bundled Vue component output. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-EKCgcK7i.js | AI (source-diff): Standard Vite-bundled Vue ESM output; no actual network fetch or eval patterns in the sample. | ai | |
| source-diff | net-exec-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-CSDuFZoP.js | AI (source-diff): Same pattern: bundled Vue/lodash code, no real network+exec payload. | ai | |
| source-diff | net-exec-file:dist/localTimeUtils-CutK8k0h.js | AI (source-diff): Standard Vite-bundled Vue component; no actual fetch/eval — analyzer fires on minified ESM imports. | ai | |
| source-diff | obfuscated-file:dist/SectionHeading.vue_vue_type_style_index_0_scoped_c541eb08_lang-CSDuFZoP.js | AI (source-diff): Minified Vite build output; not obfuscation. | ai | |
| source-diff | large-new-source-files | AI (source-diff): KNIME component library; large number of split Vite chunks is expected for this package. | ai | |
| source-diff | obfuscated-file:dist/RichTextControl-DboN_qGd.js | AI (source-diff): Minified Vite build output; long lines are normal for bundled Vue components. | ai | |
| phantom-deps | phantom-dep:@knime/rich-text-editor | AI (phantom-deps): Same-org dep used indirectly; stable false positive. | ai | |
| phantom-deps | phantom-dep:@knime/kds-components | AI (phantom-deps): Same-org dep; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:uuid | AI (phantom-deps): Declared runtime dep; used transitively or in config files, not a security concern. | ai | |
| phantom-deps | phantom-dep:@floating-ui/vue | AI (phantom-deps): Declared runtime dep; used transitively or in config files, not a security concern. | ai | |
| phantom-deps | phantom-dep:@jsonforms/vue-vanilla | AI (phantom-deps): Declared runtime dep; used transitively or in config files, not a security concern. | ai | |
| phantom-deps | phantom-dep:focus-trap-vue | AI (phantom-deps): Declared runtime dep; used transitively or in config files, not a security concern. | ai | |
| phantom-deps | phantom-dep:@knime/styles | AI (phantom-deps): Same-org dep; declared and used within KNIME ecosystem. | ai | |
| phantom-deps | phantom-dep:tabbable | AI (phantom-deps): Declared runtime dep; used transitively or in config files, not a security concern. | ai | |
| phantom-deps | phantom-dep:@knime/utils | AI (phantom-deps): Same-org dep; declared and used within KNIME ecosystem. | ai | |
| phantom-deps | phantom-dep:date-fns | AI (phantom-deps): Declared runtime dep; used transitively or in config files, not a security concern. | ai |
Versions (showing 51 of 211)
| Version | Deps | Published |
|---|---|---|
| 3.0.0 | 7 / 18 | |
| 2.1.1 | 11 / 14 | |
| 2.1.0 | 11 / 14 | |
| 2.0.7 | 11 / 14 | |
| 2.0.6 | 11 / 14 | |
| 2.0.5 | 11 / 14 | |
| 2.0.4 | 11 / 14 | |
| 2.0.3 | 11 / 14 | |
| 2.0.2 | 11 / 14 | |
| 2.0.1 | 11 / 14 | |
| 2.0.0 | 11 / 14 | |
| 1.23.2 | 11 / 14 | |
| 1.23.1 | 11 / 14 | |
| 1.23.0 | 11 / 14 | |
| 1.22.0 | 11 / 14 | |
| 1.21.24 | 12 / 14 | |
| 1.21.23 | 12 / 14 | |
| 1.21.22 | 12 / 14 | |
| 1.21.21 | 12 / 14 | |
| 1.21.20 | 12 / 14 | |
| 1.21.19 | 12 / 14 | |
| 1.21.17 | 12 / 14 | |
| 1.21.16 | 12 / 14 | |
| 1.21.15 | 12 / 14 | |
| 1.21.14 | 12 / 14 | |
| 1.21.13 | 14 / 15 | |
| 1.21.12 | 14 / 16 | |
| 1.21.10 | 14 / 16 | |
| 1.21.9 | 14 / 16 | |
| 1.21.8 | 14 / 16 | |
| 1.21.7 | 14 / 16 | |
| 1.21.6 | 14 / 16 | |
| 1.21.5 | 14 / 16 | |
| 1.21.4 | 14 / 16 | |
| 1.21.3 | 14 / 16 | |
| 1.21.2 | 14 / 16 | |
| 1.21.1 | 14 / 16 | |
| 1.21.0 | 14 / 16 | |
| 1.20.2 | 14 / 16 | |
| 1.20.1 | 14 / 16 | |
| 1.20.0 | 14 / 16 | |
| 1.19.6 | 14 / 16 | |
| 1.19.5 | 14 / 16 | |
| 1.19.4 | 14 / 16 | |
| 1.19.3 | 14 / 16 | |
| 1.19.2 | 14 / 16 | |
| 1.19.1 | 14 / 16 | |
| 1.19.0 | 14 / 16 | |
| 1.18.14 | 14 / 16 | |
| 1.18.13 | 14 / 16 | |
| 1.18.12 | 14 / 16 |
v3.0.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.1
4 findings
HIGH
New obfuscated file: dist/RichTextControl-C4Rivk0R.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-D7lL4y23.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New file with network + code execution: dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-D7lL4y23.js
source-diff
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.1.0
4 findings
HIGH
New obfuscated file: dist/RichTextControl-C7d6IZGm.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-H1rQVLn0.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New file with network + code execution: dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-H1rQVLn0.js
source-diff
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v2.0.7
4 findings
HIGH
New obfuscated file: dist/RichTextControl-B8axT3L6.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Bc77QOha.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New file with network + code execution: dist/SimpleButtonControl.vue_vue_type_style_index_0_scoped_c79c6b71_lang-Bc77QOha.js
source-diff
Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.