@nuxt/scripts
18
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
nuxtbot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | bulk-obfuscated-files:dist | AI (source-diff): Routine devtools-client build output (bundled JS/CSS), not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DLLLjYUR.js | AI (source-diff): Vite build output for devtools client UI; minified, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BHx4OUbM.js | AI (source-diff): Vite-bundled devtools client output, not obfuscation; regenerated per release. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DSsHxmoa.js | AI (source-diff): Vite-bundled error-404 component; benign minified dist. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DfHxEc1R.js | AI (source-diff): Vite-bundled devtools panel output; benign minified dist. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/HwG19HWB.js | AI (source-diff): Vite-bundled devtools module code; benign minified dist. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/D2og3hsL.js | AI (source-diff): Vite-bundled error-page component; benign minified dist. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CrquxyIP.js | AI (source-diff): Vite-bundled Vue component output; benign minified dist. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/Bf6N2ObH.js | AI (source-diff): Minified Vite devtools-client bundle (error-404 page); standard for @nuxt/scripts. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/TPgAGQc8.js | AI (source-diff): Minified Vite devtools-client bundle (first-party panel); standard for @nuxt/scripts. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DWvCkA0U.js | AI (source-diff): Minified Vite devtools-client bundle (Vue runtime); standard for @nuxt/scripts. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/dvDf1_6X.js | AI (source-diff): Minified Vite devtools-client bundle (registry panel); standard for @nuxt/scripts. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CSw0kWhI.js | AI (source-diff): Minified Vite devtools-client bundle (error-500 page); standard for @nuxt/scripts. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/C5Bq9Qgz.js | AI (source-diff): Minified Vite devtools-client bundle (UI components); standard for @nuxt/scripts. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/B-0LGYiZ.js | AI (source-diff): Standard Vite-bundled devtools client chunk; minification is expected for this UI asset. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DkOU4Aaf.js | AI (source-diff): Standard Vite-bundled devtools client chunk; minification is expected for this UI asset. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/d96VI30H.js | AI (source-diff): Standard Vite-bundled devtools client chunk; minification is expected for this UI asset. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CZLtBO2f.js | AI (source-diff): Standard Vite-bundled devtools client chunk; minification is expected for this UI asset. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CpodaK4k.js | AI (source-diff): Standard Vite-bundled devtools client chunk; minification is expected for this UI asset. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BHdEFiuu.js | AI (source-diff): Standard Vite-bundled devtools client chunk; minification is expected for this UI asset. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/D4HTNcLU.js | AI (source-diff): Standard Vite-bundled Vue runtime for Nuxt devtools client; not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DiaY4J4_.js | AI (source-diff): Minified Nuxt error-404 component; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/D-M51CV3.js | AI (source-diff): Minified Nuxt error page component; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/Cx46cS8a.js | AI (source-diff): Minified Nuxt devtools UI component bundle; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BbLmrp_o.js | AI (source-diff): Minified Nuxt devtools UI component bundle; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/1wb58MKb.js | AI (source-diff): Minified Nuxt devtools UI component bundle; legitimate build artifact. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/Djr8-0jV.js | AI (source-diff): Vite-bundled error-500 page component; benign HTML/CSS in sample. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DtB6K90V.js | AI (source-diff): Standard Vite-minified devtools client bundle; Vue runtime internals visible in sample. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DyyF3uw_.js | AI (source-diff): Vite-bundled devtools UI component; benign CSS/Vue template code in sample. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CZp-OuKP.js | AI (source-diff): Vite-bundled devtools UI component; benign Vue composition API code in sample. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/GzJXdFDa.js | AI (source-diff): Vite-bundled error-404 page component; benign HTML/CSS in sample. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/YlRaZkPa.js | AI (source-diff): Vite-bundled registry UI component; benign Vue template code in sample. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/B5UH0Ds3.js | AI (source-diff): Vite-bundled devtools client asset; minified Vue/Nuxt UI code, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DZC4fp-D.js | AI (source-diff): Vite-bundled devtools index panel; standard minified Vue code. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/D1-tSGjF.js | AI (source-diff): Vite-bundled devtools first-party panel; standard minified Vue code. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CK-VPzWc.js | AI (source-diff): Vite-bundled devtools registry panel; standard minified Vue code. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BNnOFEgA.js | AI (source-diff): Vite-bundled devtools error-404 component; standard minified Vue code. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BKha4otU.js | AI (source-diff): Vite-bundled devtools error-500 component; standard minified Vue code. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/fSf6EEYR.js | AI (source-diff): Standard Vite-bundled devtools client output; Vue/Nuxt internals, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/r9yOu_bc.js | AI (source-diff): Minified Vue/Nuxt UI component bundle for devtools; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DBnmHlYd.js | AI (source-diff): Minified Nuxt error-500 page component; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/Bo8cAJTo.js | AI (source-diff): Minified Vue registry component for devtools UI; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/B6vzhpP9.js | AI (source-diff): Minified Nuxt error-404 page component; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/348WW8S2.js | AI (source-diff): Minified Vue component for devtools UI panel; no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/UTyLw2F_.js | AI (source-diff): Standard Vite bundle entry point for Nuxt devtools client UI; minification is expected. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DTVoxnk-.js | AI (source-diff): Nuxt devtools UI chunk; readable Vue template/component code, standard minification. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/DD1eKorn.js | AI (source-diff): Nuxt devtools UI chunk with scroll-lock and modal logic; standard Vite minification. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CKrGhxlH.js | AI (source-diff): Nuxt devtools error-404 page component bundle; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/C3h_qg0j.js | AI (source-diff): Nuxt devtools error-500 page component bundle; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BjIIVRlr.js | AI (source-diff): Nuxt devtools client UI chunk; readable Vue component code, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CApasjik.js | AI (source-diff): Vite-bundled devtools UI component; imports from BNvWpYaC.js (Vue runtime chunk), benign. | ai | |
| phantom-deps | phantom-dep:oxc-parser | AI (phantom-deps): oxc-parser is listed in package.json dependencies and used via build config; heuristic false positive. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/zmRZ2I-R.js | AI (source-diff): Devtools first-party scripts panel bundle; standard Vite minified output. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/xOsbuyp3.js | AI (source-diff): Devtools registry panel UI bundle; standard Vite minified output. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CTPc9yIZ.js | AI (source-diff): Nuxt error-500 page component bundle; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/CbCcQNvm.js | AI (source-diff): Nuxt error-404 page component bundle; standard minified output. | ai | |
| source-diff | obfuscated-file:dist/devtools-client/_nuxt/BNvWpYaC.js | AI (source-diff): Standard Vite-bundled devtools client; minified Vue 3 runtime, not malicious obfuscation. | ai |
Versions (showing 18 of 18)
| Version | Deps | Published |
|---|---|---|
| 1.3.2 | 20 / 6 | |
| 1.3.1 | 20 / 6 | |
| 1.3.0 | 20 / 6 | |
| 1.2.1 | 20 / 6 | |
| 1.2.0 | 20 / 6 | |
| 1.1.1 | 20 / 5 | |
| 1.1.0 | 20 / 5 | |
| 1.0.6 | 21 / 1 | |
| 1.0.5 | 21 / 1 | |
| 1.0.4 | 21 / 1 | |
| 1.0.3 | 21 / 1 | |
| 1.0.2 | 21 / 1 | |
| 1.0.1 | 21 / 1 | |
| 1.0.0 | 21 / 1 | |
| 0.13.4 | 16 / 25 | |
| 0.13.3 | 21 / 1 | |
| 0.13.2 | 16 / 25 | |
| 0.13.1 | 16 / 25 |
v1.3.2
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.3.1
7 findings
HIGH
New obfuscated file: dist/devtools-client/_nuxt/-l_Ea-OJ.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/Bc00m62Q.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/BXHESzkh.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/CuXL8tZi.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/D5fxpUga.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/DLLLjYUR.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.3.0
7 findings
HIGH
New obfuscated file: dist/devtools-client/_nuxt/BHx4OUbM.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/CrquxyIP.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/D2og3hsL.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/DfHxEc1R.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/DSsHxmoa.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/devtools-client/_nuxt/HwG19HWB.js
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.