@mastra/deployer-cloud — Greenflagged

A cloud-optimized deployer for Mastra applications with built-in telemetry, logging, and storage integration.

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

smthomasabhiaiyertaofeeq-deruehinderocalcsamrase-wardpeettylerbarnesnikaiyer

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	obfuscated-file:dist/studio/assets/mastra-C6UVJT3B-Bn2X4uNg.js	AI (source-diff): Vite-minified studio UI asset (React bundle); minification is expected for this package's bundled frontend.	ai	2026/06/06
source-diff	obfuscated-file:dist/studio/assets/core-C7US7Gwx.js	AI (source-diff): Vite-minified studio UI asset (Shiki/WASM); minification is expected for this package's bundled frontend.	ai	2026/06/06
source-diff	net-exec-file:dist/studio/assets/mastra-C6UVJT3B-Bn2X4uNg.js	AI (source-diff): Network calls and dynamic module loading are standard Vite lazy-import patterns in a React studio UI, not dropper behavior.	ai	2026/06/06
source-diff	obfuscated-file:dist/studio/assets/mastra-4G5CNDS4-Cw3EgEyL.js	AI (source-diff): Vite-bundled main studio bundle (React + app code); minification is expected for studio UI assets.	ai	2026/06/05
source-diff	obfuscated-file:dist/studio/assets/core-VstjICtb.js	AI (source-diff): Vite-bundled Shiki/Oniguruma WASM loader; minification is expected for studio UI assets.	ai	2026/06/05
source-diff	net-exec-file:dist/studio/assets/mastra-4G5CNDS4-Cw3EgEyL.js	AI (source-diff): Network calls and dynamic imports are standard React SPA patterns in a bundled studio UI; no dropper behavior evident.	ai	2026/06/05
source-diff	obfuscated-file:dist/studio/assets/mastra-ZKR6U5YM-DG6OyiVB.js	AI (source-diff): Main Vite bundle with React/studio UI; minification is expected for studio UI assets.	ai	2026/06/05
source-diff	obfuscated-file:dist/studio/assets/core-D19F5dPo.js	AI (source-diff): Vite-bundled Shiki/WASM core; minification is expected for studio UI assets.	ai	2026/06/05
source-diff	net-exec-file:dist/studio/assets/mastra-ZKR6U5YM-DG6OyiVB.js	AI (source-diff): Network+eval pattern is standard Vite dynamic import machinery in a browser UI bundle, not dropper malware.	ai	2026/06/05
source-diff	obfuscated-file:dist/studio/assets/mastra-VDYWILSO-B9UayzCJ.js	AI (source-diff): Main Vite bundle with React and studio UI code; standard minified build output.	ai	2026/06/04
source-diff	obfuscated-file:dist/studio/assets/engine-compile-BkERmzkH.js	AI (source-diff): Vite-bundled regex engine (oniguruma/shiki); standard minified build output.	ai	2026/06/04
source-diff	obfuscated-file:dist/studio/assets/core-DMrkGW4y.js	AI (source-diff): Vite-bundled Shiki core with WASM loader; standard minified build output.	ai	2026/06/04
source-diff	obfuscated-file:dist/studio/assets/bash-atvbtKCR.js	AI (source-diff): Vite-bundled Shiki shell grammar asset; minified JSON/regex data, not malicious obfuscation.	ai	2026/06/04
source-diff	net-exec-file:dist/studio/assets/mastra-VDYWILSO-B9UayzCJ.js	AI (source-diff): Network calls and dynamic module loading are expected in a bundled React studio UI; no dropper pattern present.	ai	2026/06/04
source-diff	obfuscated-file:dist/studio/assets/index-CuX2_ynl.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-BXsYtI_L.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-BpIFu90H.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	net-exec-file:dist/studio/assets/mastra-ZTYQGPC5-YS_CgMe5.js	AI (source-diff): Frontend SPA bundle; network+eval patterns are browser-side UI code, not a server dropper.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/mastra-ZTYQGPC5-YS_CgMe5.js	AI (source-diff): Main Vite SPA bundle for Mastra studio UI; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-WqEQbxwn.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-wlbdtnyw.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-jxYW895o.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-DtgnVmyG.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-DQDeBuFn.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-Dp5bT45W.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-Do3MCOqp.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-DNVDGRH6.js	AI (source-diff): Vite-bundled studio UI asset; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-D9zt6Lls.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-D69UQMjk.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-CyC514KE.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-5ecfvW2z.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-0gM2NF40.js	AI (source-diff): Vite-bundled CodeMirror language parser; minified by build tooling, not obfuscated malware.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-0ydn11gV.js	AI (source-diff): PHP language parser (Lezer) — standard minified UI asset.	ai	2026/05/31
source-diff	net-exec-file:dist/studio/assets/mastra-AFZJL7U6-B4h6h2gB.js	AI (source-diff): Web app bundle; network+eval patterns are normal for a browser-side studio UI, not dropper behavior.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-ZkHQDERQ.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-Z6aFoPVf.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-FDBEY6kQ.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-DzLmfm1G.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-DLI82x7R.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-CwBP10EK.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-CoywoYi4.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-CijjHZdS.js	AI (source-diff): Studio UI bundle chunk — standard minified asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-CFuk9xvk.js	AI (source-diff): Liquid template parser (Lezer) — standard minified UI asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-CcJCtBqK.js	AI (source-diff): CSS language parser (Lezer) — standard minified UI asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-BYrnsGh-.js	AI (source-diff): Vite dep-map for syntax highlighter chunks — standard minified UI asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-BR7jFckl.js	AI (source-diff): Go language parser (Lezer) — standard minified UI asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-bIaQ1BjM.js	AI (source-diff): Mustache/template language parser — standard minified UI asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-_sb47CMc.js	AI (source-diff): Lezer/CodeMirror grammar parser — standard minified UI asset for Mastra studio.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-BHV9HJx0.js	AI (source-diff): XML/HTML language parser (Lezer) — standard minified UI asset.	ai	2026/05/31
source-diff	obfuscated-file:dist/studio/assets/index-Cq-1GGqP.js	AI (source-diff): Vite-bundled Lezer grammar (CSS); minification expected.	ai	2026/05/30
source-diff	net-exec-file:dist/studio/assets/main-CbjjImiL.js	AI (source-diff): Frontend app bundle; network+eval patterns are from bundled UI framework, not dropper behavior.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/main-CbjjImiL.js	AI (source-diff): Main Vite bundle for studio UI; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-qajSBKss.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-O0wBkvx7.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-N_GK67CF.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-lR9r49aF.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-IJJMlwDq.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-Dx1nb-Qd.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-Dk8FtwwN.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-DJRGlaRq.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-DJ0xFqTy.js	AI (source-diff): Vite-bundled Lezer grammar (YAML/Markdown); minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-DGYKLFP0.js	AI (source-diff): Vite-bundled Lezer grammar (Java); minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-CxmKUBmC.js	AI (source-diff): Vite-bundled Lezer grammar (SQL); minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-CLd1jyjj.js	AI (source-diff): Vite-bundled Lezer grammar (Python/indentation); minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-CF0ott0E.js	AI (source-diff): Vite chunk mapping language grammar deps; minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-Bt7FWeVy.js	AI (source-diff): Vite-bundled Lezer grammar (C++ highlighting); minification expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-BEkMUKAe.js	AI (source-diff): Vite-bundled Lezer grammar for studio UI; minification is expected.	ai	2026/05/30
source-diff	obfuscated-file:dist/studio/assets/index-BkotJFL3.js	AI (source-diff): Vite-bundled studio UI asset (Lezer/CodeMirror grammar); minification is expected.	ai	2026/05/26
source-diff	net-exec-file:dist/studio/assets/main-DXkBZXu3.js	AI (source-diff): Frontend app bundle; network+eval patterns are from bundled UI framework, not dropper behavior.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/main-DXkBZXu3.js	AI (source-diff): Vite main bundle for studio UI; minification is expected for this package.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-ZileR4Q4.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-tLC25qCj.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-KSBi856v.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-Dtvw6-un.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-DPMYKpZT.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-DPGxO1uf.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-DlYsjFYf.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-DeKPbptu.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-DeavA6w-.js	AI (source-diff): Vite-bundled studio UI asset (Java grammar); minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-D2iv1C4J.js	AI (source-diff): Vite-bundled studio UI asset (Go grammar); minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-Crj06nsa.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-Ch17fjP6.js	AI (source-diff): Vite-bundled studio UI asset (Jinja/Handlebars grammar); minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-CGoN_KHQ.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-CCfyQQnf.js	AI (source-diff): Vite-bundled studio UI asset (Shiki language map); minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-Bl4NxfJN.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/26
source-diff	obfuscated-file:dist/studio/assets/index-BWEYa6Wd.js	AI (source-diff): Minified CodeMirror CSS parser in bundled studio UI.	ai	2026/05/15
source-diff	net-exec-file:dist/studio/assets/main-l_gW9ha-.js	AI (source-diff): Network+exec pattern in a bundled web UI main chunk is expected; no dropper behavior evident.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/main-l_gW9ha-.js	AI (source-diff): Main Vite bundle for studio UI; minified but not malicious.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-QbEQSBCz.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-L9uGVUzS.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-JR4jl4o8.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-FWLFiKw6.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-Fdm11Ab_.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-DOktXLS1.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-Djon9qXR.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-D51SkQfg.js	AI (source-diff): Minified bundled studio UI asset; standard Vite build output.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-CstG7jfi.js	AI (source-diff): Minified CodeMirror Go parser in bundled studio UI.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-CQiypF1C.js	AI (source-diff): Minified CodeMirror HTML parser in bundled studio UI.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-CE9VBs4g.js	AI (source-diff): Minified CodeMirror PHP parser in bundled studio UI.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-BggFNwvl.js	AI (source-diff): Minified CodeMirror language parser in bundled studio UI; not malicious.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-C5vFkLuK.js	AI (source-diff): Minified CodeMirror Liquid/Jinja parser in bundled studio UI.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-C5SMdEFe.js	AI (source-diff): Minified CodeMirror language parser in bundled studio UI.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-BRXd0NqA.js	AI (source-diff): Minified CodeMirror Rust language parser in bundled studio UI.	ai	2026/05/15
source-diff	obfuscated-file:dist/studio/assets/index-Cwu056KQ.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-B_fpzvFn.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BE_LtRD7.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BKRcqDSb.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BM8sRs0O.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BSc7xYEL.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BZtB-nam.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-CpsBRHlc.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-CrcN8E7A.js	AI (source-diff): Vite-bundled CodeMirror language parser; minification is expected for studio UI assets.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DCe74mr1.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DlNMnorP.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DmJXfsVe.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DO0BOWn2.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DXciwm7r.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-gxxBkB1c.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-ZLOw39u3.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/main-DmJSaA7O.js	AI (source-diff): Main Vite bundle for studio UI; minification is expected.	ai	2026/05/14
source-diff	net-exec-file:dist/studio/assets/main-DmJSaA7O.js	AI (source-diff): Bundled frontend app making API calls; net+exec pattern is expected in a studio UI bundle.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-N93jCVoW.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-Bm2xYDEl.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BpoMIw8g.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BV4Fmegt.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BVriOCM0.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-CAhOJ76h.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-CseSg5yk.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-D0pTkkLw.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-D3l9lLXE.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-Dg_THJJw.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DGPyX9ya.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-Dhg6kAS3.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-DSjNGVNI.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	net-exec-file:dist/studio/assets/main-P5XI6kHb.js	AI (source-diff): Frontend bundle asset, not a Node.js runtime script; network+eval pattern is benign in browser UI context.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/main-P5XI6kHb.js	AI (source-diff): Main Vite bundle for studio UI; minification is expected.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-v6qxr_LD.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-o5DxNa4w.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-nDt0W1Zw.js	AI (source-diff): Vite-bundled CodeMirror/UI assets; minification is expected for this studio package.	ai	2026/05/14
source-diff	obfuscated-file:dist/studio/assets/index-BgnKIsIs.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-DyR-ZHgs.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-DybDG8dE.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-Dp_SqeRt.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-CTgCMrcV.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-CezxKApF.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-CDjxPkI6.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-Bt0ZpYCg.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-BQM0B3Yu.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-BNbRFtES.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-BLcjScJQ.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-BKCXdwzN.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-B2Kjoexn.js	AI (source-diff): Vite-bundled studio UI asset (CodeMirror/Lezer grammar); minification is expected for this package.	ai	2026/05/13
source-diff	net-exec-file:dist/studio/assets/main-D5p0mb31.js	AI (source-diff): SPA bundle with fetch + dynamic imports is normal for a studio UI; no dropper pattern present.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/main-D5p0mb31.js	AI (source-diff): Main Vite bundle for studio SPA; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-qAMgL7a1.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-q5ls1Ctm.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/index-OfT_DHC3.js	AI (source-diff): Vite-bundled studio UI asset; minification expected.	ai	2026/05/13
source-diff	obfuscated-file:dist/studio/assets/abap-DsBKuouk.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/actionscript-3-D_z4Izcz.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/ada-727ZlQH0.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/andromeeda-C3khCPGq.js	AI (source-diff): Minified editor theme JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/angular-html-LfdN0zeE.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/angular-ts-CKsD7JZE.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/apache-Dn00JSTd.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/apex-COJ4H7py.js	AI (source-diff): Minified syntax-highlighting grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/blade-a8OxSdnT.js	AI (source-diff): Minified Blade template grammar JSON; not obfuscated malware.	ai	2026/05/11
source-diff	net-exec-file:dist/studio/assets/blade-a8OxSdnT.js	AI (source-diff): False positive; file is a bundled language grammar definition, not a dropper.	ai	2026/05/11
source-diff	large-new-source-files	AI (source-diff): Studio UI ships full language pack (Shiki grammars/themes); size increase is expected.	ai	2026/05/11
source-diff	source-size-tripled	AI (source-diff): Studio UI language pack addition explains the 483x size increase; not injected payload.	ai	2026/05/11
source-diff	obfuscated-file:dist/studio/assets/index-B_OqxYGM.js	AI (source-diff): Vite-bundled studio UI asset (Lezer parser tables); minification is expected.	ai	2026/05/05
source-diff	net-exec-file:dist/studio/assets/main-CP6EB5Ig.js	AI (source-diff): Web IDE bundle legitimately contains fetch + dynamic evaluation for plugin/editor functionality.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/main-CP6EB5Ig.js	AI (source-diff): Main Vite bundle for studio UI; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-J2K1uPqD.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-DU3FtUyc.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-DT-bmX_c.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-DHBy70un.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-DE1Uf-DZ.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-C4t9LjwW.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-C2OqAplM.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-bWOYDAHF.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected for this package.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-BUA1uxDU.js	AI (source-diff): Vite-bundled studio UI asset (Markdown parser); minification is expected.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-Btqfk5yp.js	AI (source-diff): Vite-bundled studio UI asset (Angular/Vue template parser); minification is expected.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-BRnbZ_zY.js	AI (source-diff): Vite-bundled studio UI asset (Liquid template parser); minification is expected.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-BcbyRcdO.js	AI (source-diff): Vite-bundled studio UI asset (PHP language parser); minification is expected.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-B818jJF8.js	AI (source-diff): Vite-bundled studio UI asset (Java language parser); minification is expected.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-aMP3lwxt.js	AI (source-diff): Vite-bundled studio UI asset (C++ language parser); minification is expected.	ai	2026/05/05
source-diff	obfuscated-file:dist/studio/assets/index-0ZhaJMzn.js	AI (source-diff): Vite-bundled studio UI asset (CodeMirror parser); minification is expected for this package.	ai	2026/05/05
provenance	publisher-changed	AI (provenance): Transition to GitHub Actions publisher is confirmed legitimate by SLSA provenance attestation from the official mastra-ai/mastra repo.	ai	2026/05/05
source-diff	net-exec-file:dist/studio/assets/main-DcWjrG5X.js	AI (source-diff): Frontend app bundle; network+eval pattern is from bundled UI framework, not a dropper.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/main-DcWjrG5X.js	AI (source-diff): Minified Vite main bundle for studio UI; stable pattern for this package.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-u6UBUdCT.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-tOhGp7El.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DZW0dWfX.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-dYQlj4H8.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DSPApULt.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DQjj8qJ5.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DoNqlGSR.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DJzSgOaw.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DfK5BMZc.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DB3pMYNa.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-CSdmUhTv.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Cpyw4oZo.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Cc_Uciz4.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Bhl9fxyK.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-B2tXr9cL.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-B2ZmPe9Q.js	AI (source-diff): Minified Vite/CodeMirror bundle; stable pattern for this package's studio UI assets.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-BFPbwhVc.js	AI (source-diff): Vite-bundled studio UI asset (CodeMirror language parser); minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-bthpR476.js	AI (source-diff): Vite-bundled studio UI asset (SQL language parser); minification is expected.	ai	2026/04/30
source-diff	net-exec-file:dist/studio/assets/main-Da5vWd85.js	AI (source-diff): Frontend app bundle; network+exec pattern is from bundled React/UI code, not a dropper.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/main-Da5vWd85.js	AI (source-diff): Vite-bundled studio main bundle; minification is expected for this package.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Vq29RmsE.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-m9rum56E.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-jCOd2fvg.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-INehCGZv.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-hyiexUSA.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-DzcWqhqX.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Czr-BRha.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-BWtEmhy2.js	AI (source-diff): Vite-bundled studio UI asset (Handlebars/Mustache parser); minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-CnUcrcRK.js	AI (source-diff): Vite-bundled studio UI asset; minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Cl6UcNDm.js	AI (source-diff): Vite-bundled studio UI asset (Go language parser); minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-ceufQExa.js	AI (source-diff): Vite-bundled studio UI asset (Vue template parser); minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-CepEt0G8.js	AI (source-diff): Vite-bundled studio UI asset (PHP language parser); minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-Cbed1unS.js	AI (source-diff): Vite-bundled studio UI asset (Rust language parser); minification is expected.	ai	2026/04/30
source-diff	obfuscated-file:dist/studio/assets/index-C0vFW9pj.js	AI (source-diff): Vite-bundled studio UI asset (Liquid template parser); minification is expected.	ai	2026/04/30
phantom-deps	phantom-dep:pino	AI (phantom-deps): pino is explicitly listed in package.json dependencies; phantom-dep is a false positive for this package.	ai	2026/04/29

Versions (showing 39 of 39)

Version	Deps	Published
1.41.0	6 / 13	2026-06-04
1.40.0	6 / 13	2026-06-03
1.39.0	6 / 13	2026-06-03
1.38.0	6 / 13	2026-06-02
1.37.1	6 / 13	2026-05-27
1.37.0	6 / 13	2026-05-27
1.36.0	6 / 13	2026-05-20
1.35.0	6 / 13	2026-05-15
1.34.0	6 / 13	2026-05-14
1.33.1	6 / 13	2026-05-13
1.33.0	6 / 13	2026-05-13
1.32.1	6 / 13	2026-05-05
1.32.0	6 / 13	2026-05-04
1.31.0	6 / 13	2026-05-01
1.30.0	6 / 13	2026-04-30
1.29.1	6 / 13	2026-04-29
1.29.0	6 / 13	2026-04-29
1.28.0	6 / 13	2026-04-24
1.27.0	6 / 13	2026-04-23
1.26.0	6 / 13	2026-04-22
1.25.0	6 / 13	2026-04-15
1.24.1	6 / 13	2026-04-09
1.24.0	6 / 13	2026-04-08
1.23.0	6 / 13	2026-04-07
1.22.0	6 / 13	2026-04-03
1.21.0	6 / 13	2026-04-02
1.20.0	6 / 13	2026-03-31
1.19.0	6 / 13	2026-03-31
1.18.0	6 / 13	2026-03-30
0.24.9	6 / 9	2025-12-19
0.24.8	6 / 9	2025-12-10
0.24.7	6 / 9	2025-12-09
0.24.6	6 / 9	2025-11-27
0.24.5	6 / 9	2025-11-21
0.24.4	6 / 9	2025-11-20
0.24.3	6 / 9	2025-11-20
0.24.2	6 / 9	2025-11-19
0.24.1	6 / 9	2025-11-14
0.24.0	6 / 9	2025-11-05

v1.41.0

4 findings

HIGH New obfuscated file: dist/studio/assets/core-C7US7Gwx.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/mastra-C6UVJT3B-Bn2X4uNg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/mastra-C6UVJT3B-Bn2X4uNg.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.40.0

6 findings

HIGH New obfuscated file: dist/studio/assets/bash-atvbtKCR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/core-VstjICtb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/engine-compile-BkERmzkH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/mastra-4G5CNDS4-Cw3EgEyL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/mastra-4G5CNDS4-Cw3EgEyL.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.39.0

6 findings

HIGH New obfuscated file: dist/studio/assets/bash-atvbtKCR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/core-DMrkGW4y.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/engine-compile-BkERmzkH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/mastra-VDYWILSO-B9UayzCJ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/mastra-VDYWILSO-B9UayzCJ.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.38.0

6 findings

HIGH New obfuscated file: dist/studio/assets/bash-atvbtKCR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/core-D19F5dPo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/engine-compile-BkERmzkH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/mastra-ZKR6U5YM-DG6OyiVB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/mastra-ZKR6U5YM-DG6OyiVB.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.37.1

19 findings

HIGH New obfuscated file: dist/studio/assets/index-_sb47CMc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-0ydn11gV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BHV9HJx0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-bIaQ1BjM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BR7jFckl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BYrnsGh-.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CcJCtBqK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CFuk9xvk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CijjHZdS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CoywoYi4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CwBP10EK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DLI82x7R.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DzLmfm1G.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-FDBEY6kQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Z6aFoPVf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-ZkHQDERQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/mastra-AFZJL7U6-B4h6h2gB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/mastra-AFZJL7U6-B4h6h2gB.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.37.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-0gM2NF40.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-5ecfvW2z.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BpIFu90H.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BXsYtI_L.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CuX2_ynl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CyC514KE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D69UQMjk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D9zt6Lls.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DNVDGRH6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Do3MCOqp.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dp5bT45W.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DQDeBuFn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DtgnVmyG.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-jxYW895o.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-wlbdtnyw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-WqEQbxwn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/mastra-ZTYQGPC5-YS_CgMe5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/mastra-ZTYQGPC5-YS_CgMe5.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.36.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-BEkMUKAe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Bt7FWeVy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CF0ott0E.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CLd1jyjj.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Cq-1GGqP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CxmKUBmC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DGYKLFP0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DJ0xFqTy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DJRGlaRq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dk8FtwwN.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dx1nb-Qd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-IJJMlwDq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-lR9r49aF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-N_GK67CF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-O0wBkvx7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-qajSBKss.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-CbjjImiL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-CbjjImiL.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.35.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-BkotJFL3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Bl4NxfJN.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CCfyQQnf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CGoN_KHQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Ch17fjP6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Crj06nsa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D2iv1C4J.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DeavA6w-.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DeKPbptu.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DlYsjFYf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DPGxO1uf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DPMYKpZT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dtvw6-un.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-KSBi856v.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-tLC25qCj.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-ZileR4Q4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-DXkBZXu3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-DXkBZXu3.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.34.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-BggFNwvl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BRXd0NqA.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BWEYa6Wd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-C5SMdEFe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-C5vFkLuK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CE9VBs4g.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CQiypF1C.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CstG7jfi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D51SkQfg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Djon9qXR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DOktXLS1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Fdm11Ab_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-FWLFiKw6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-JR4jl4o8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-L9uGVUzS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-QbEQSBCz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-l_gW9ha-.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-l_gW9ha-.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.33.1

19 findings

HIGH New obfuscated file: dist/studio/assets/index-B_fpzvFn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BE_LtRD7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BKRcqDSb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BM8sRs0O.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BSc7xYEL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BZtB-nam.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CpsBRHlc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CrcN8E7A.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Cwu056KQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DCe74mr1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DlNMnorP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DmJXfsVe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DO0BOWn2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DXciwm7r.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-gxxBkB1c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-ZLOw39u3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-DmJSaA7O.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-DmJSaA7O.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.33.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-B2Kjoexn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BgnKIsIs.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BKCXdwzN.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BLcjScJQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BNbRFtES.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BQM0B3Yu.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Bt0ZpYCg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CDjxPkI6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CezxKApF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CTgCMrcV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dp_SqeRt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DybDG8dE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DyR-ZHgs.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-OfT_DHC3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-q5ls1Ctm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-qAMgL7a1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-D5p0mb31.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-D5p0mb31.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.32.1

19 findings

HIGH New obfuscated file: dist/studio/assets/index-0ZhaJMzn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-aMP3lwxt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-B_OqxYGM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-B818jJF8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BcbyRcdO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BRnbZ_zY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Btqfk5yp.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BUA1uxDU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-bWOYDAHF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-C2OqAplM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-C4t9LjwW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DE1Uf-DZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DHBy70un.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DT-bmX_c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DU3FtUyc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-J2K1uPqD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-CP6EB5Ig.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-CP6EB5Ig.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.32.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-Bm2xYDEl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BpoMIw8g.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BV4Fmegt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BVriOCM0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CAhOJ76h.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CseSg5yk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D0pTkkLw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D3l9lLXE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dg_THJJw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DGPyX9ya.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Dhg6kAS3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DSjNGVNI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-N93jCVoW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-nDt0W1Zw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-o5DxNa4w.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-v6qxr_LD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-P5XI6kHb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-P5XI6kHb.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.31.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-7ieOcYNR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-8WbdDFad.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BbA95K4k.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BRChO8Yu.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BwD1O97j.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-C8DbVZr9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CAJhefpS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CE9g4tqB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-D0O42cyD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DzbjqZuh.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-i0aoSioD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-jLLY5crc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-JM8kh28x.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-lVi8ohSV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-xQ6MkQZY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-xwFYAMf_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-C3JY-giB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-C3JY-giB.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.30.0

19 findings

HIGH New obfuscated file: dist/studio/assets/index-B2tXr9cL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-B2ZmPe9Q.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Bhl9fxyK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Cc_Uciz4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Cpyw4oZo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CSdmUhTv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DB3pMYNa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DfK5BMZc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DJzSgOaw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DoNqlGSR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DQjj8qJ5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DSPApULt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-dYQlj4H8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DZW0dWfX.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-tOhGp7El.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-u6UBUdCT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-DcWjrG5X.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-DcWjrG5X.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.29.1

19 findings

HIGH New obfuscated file: dist/studio/assets/index-BFPbwhVc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-bthpR476.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-BWtEmhy2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-C0vFW9pj.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Cbed1unS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CepEt0G8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-ceufQExa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Cl6UcNDm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-CnUcrcRK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Czr-BRha.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-DzcWqhqX.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-hyiexUSA.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-INehCGZv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-jCOd2fvg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-m9rum56E.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/index-Vq29RmsE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/main-Da5vWd85.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/main-Da5vWd85.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.28.0

45 findings

HIGH New obfuscated file: dist/studio/assets/abap-DsBKuouk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/actionscript-3-D_z4Izcz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/ada-727ZlQH0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/andromeeda-C3khCPGq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/angular-html-LfdN0zeE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/angular-ts-CKsD7JZE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/apache-Dn00JSTd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/apex-COJ4H7py.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/apl-BBq3IX1j.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/applescript-Bu5BbsvL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/ara-7O62HKoU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/asciidoc-BPT9niGB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/asm-Dhn9LcZ4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/asn1-EdZsLKOL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/asterisk-B-8jnY81.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/astro-CqkE3fuf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/aurora-x-D-2ljcwZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/awk-eg146-Ew.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/ayu-dark-Cv9koXgw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/babel-CmeIX3PZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/ballerina-Du268qiB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/bat-fje9CFhw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/beancount-BwXTMy5W.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/bibtex-xW4inM5L.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/bicep-DHo0CJ0O.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/blade-a8OxSdnT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/studio/assets/blade-a8OxSdnT.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/studio/assets/bsl-Dgyn0ogV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/c-C3t2pwGQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/cadence-DNquZEk8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/catppuccin-frappe-CD_QflpE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/catppuccin-latte-DRW-0cLl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/catppuccin-macchiato-C-_shW-Y.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/catppuccin-mocha-LGGdnPYs.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/clarity-BHOwM8T6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/clike-B9uivgTg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/clojure-BMjYHr_A.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/clojure-DxSadP1t.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/cmake-DbXoA79R.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/cobol-CWcv1MsR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/cobol-PTqiYgYu.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/codeql-sacFqUAJ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/coffee-dyiR41kL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/studio/assets/coffeescript-S37ZYGWr.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.27.0

43 findings