← Home

@react-native/debugger-frontend

Debugger frontend for React Native based on Chrome DevTools

51
Versions
BSD-3-Clause
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

react-native-botfb

Keywords

react-nativetools

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff large-new-source-files AI (source-diff): Expected: bundled DevTools frontend ships many minified panel files. ai
source-diff obfuscated-file:dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js AI (source-diff): Minified vendored DevTools code, stable build output. ai
provenance no-provenance AI (provenance): First-party FB publisher; absence of Sigstore not disqualifying. ai
source-diff net-exec-file:dist/third-party/front_end/third_party/react-devtools/react-devtools.js AI (source-diff): Vendored react-devtools bundle; runtime devtools code, not a dropper. ai
source-diff net-exec-file:dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js AI (source-diff): Bundled DevTools panel; no hostile destination, benign build output. ai
source-diff obfuscated-file:dist/third-party/front_end/third_party/json5/json5.js AI (source-diff): Minified third-party library bundled into DevTools; expected for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/panels/ai_assistance/ai_assistance-meta.js AI (source-diff): Minified DevTools build artifact; expected output for this debugger-frontend package. ai
source-diff obfuscated-file:dist/third-party/front_end/models/ai_assistance/ai_assistance.js AI (source-diff): Minified DevTools build artifact; expected output for this debugger-frontend package. ai
source-diff obfuscated-file:dist/third-party/front_end/panels/ai_assistance/ai_assistance.js AI (source-diff): Minified DevTools build artifact; expected output for this debugger-frontend package. ai
source-diff obfuscated-file:dist/third-party/front_end/third_party/legacy-javascript/legacy-javascript.js AI (source-diff): Minified DevTools polyfill data; expected for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/entrypoints/rehydrated_devtools_app/rehydrated_devtools_app.js AI (source-diff): Minified DevTools entrypoint bundle; expected for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/third_party/third-party-web/third-party-web.js AI (source-diff): Minified third-party-web dataset bundle; expected for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/ui/components/tooltips/tooltips.js AI (source-diff): Minified DevTools UI component; expected for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/panels/whats_new/whats_new.js AI (source-diff): Minified DevTools panel bundle; expected for this package. ai
publish-pattern dormant-publish AI (publish-pattern): React Native uses versioned release cadence; gaps between minor versions are expected. ai
source-diff obfuscated-file:dist/third-party/front_end/ui/legacy/utils/utils.js AI (source-diff): Minified DevTools UI bundle; expected artifact for this Chrome DevTools-derived package. ai
source-diff encoded-string-file:dist/third-party/front_end/third_party/codemirror.next/chunk/codemirror.js AI (source-diff): Long strings in CodeMirror bundle are standard grammar/parse table definitions; well-known third-party library bundled as expected. ai
source-diff obfuscated-file:dist/third-party/front_end/models/trace/root-causes/root-causes.js AI (source-diff): Minified Chrome DevTools trace model; standard bundled output for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/panels/freestyler/freestyler.js AI (source-diff): Minified Chrome DevTools AI panel component; standard bundled output for this debugger frontend package. ai
source-diff obfuscated-file:dist/third-party/front_end/ui/components/data_grid/data_grid.js AI (source-diff): Minified Chrome DevTools data grid component; standard bundled output for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/ui/components/split_view/split_view.js AI (source-diff): Minified Chrome DevTools split view component; standard bundled output for this debugger frontend package. ai
source-diff obfuscated-file:dist/third-party/front_end/models/timeline_model/timeline_model.js AI (source-diff): Minified Chrome DevTools timeline model; standard bundled output for this package. ai
source-diff obfuscated-file:dist/third-party/front_end/panels/protocol_monitor/components/components.js AI (source-diff): Minified Chrome DevTools UI component bundle; expected distribution format for this debugger frontend package. ai
source-diff obfuscated-file:dist/third-party/front_end/entrypoints/rn_inspector/rn_inspector.js AI (source-diff): This package ships pre-built Chrome DevTools-derived dist bundles; minified/bundled JS files are expected and consistent with its purpose as a debugger frontend. ai

Versions (showing 51 of 72)

View all versions
Version Deps Published
0.86.2 0 / 0
0.86.1 0 / 0
0.86.0 0 / 0
0.85.3 0 / 0
0.85.2 0 / 0
0.85.1 0 / 0
0.85.0 0 / 0
0.84.1 0 / 0
0.84.0 0 / 0
0.83.10 0 / 0
0.83.9 0 / 0
0.83.8 0 / 0
0.83.7 0 / 0
0.83.6 0 / 0
0.83.5 0 / 0
0.83.4 0 / 0
0.83.3 0 / 0
0.83.2 0 / 0
0.83.1 0 / 0
0.83.0 0 / 0
0.82.1 0 / 0
0.82.0 0 / 0
0.81.6 0 / 0
0.81.5 0 / 0
0.81.4 0 / 0
0.81.3 0 / 0
0.81.2 0 / 0
0.81.1 0 / 0
0.81.0 0 / 0
0.80.3 0 / 0
0.80.2 0 / 0
0.80.1 0 / 0
0.80.0 0 / 0
0.79.7 0 / 0
0.79.6 0 / 0
0.79.5 0 / 0
0.79.4 0 / 0
0.79.3 0 / 0
0.79.2 0 / 0
0.78.3 0 / 0
0.78.0 0 / 0
0.77.3 0 / 0
0.77.0 0 / 0
0.76.5 0 / 0
0.76.2 0 / 0
0.76.1 0 / 0
0.75.5 0 / 0
0.75.4 0 / 0
0.75.3 0 / 0
0.75.1 0 / 0
0.75.0 0 / 0

v0.86.2

2 findings
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

INFO Publisher changed: react-native-bot → GitHub Actions (on unknown date, now via trusted publisher with provenance) provenance

This version was published by a different npm account (GitHub Actions) than the most recent previously approved version (react-native-bot) on unknown date, but it carries Sigstore provenance attestation. This means the package moved to a trusted publisher (CI/CD with OIDC, e.g. GitHub Actions) — a supply-chain integrity improvement, not a compromise, since a stolen npm token cannot forge provenance bound to the source repository. Recorded as INFO for audit trail.

v0.86.1

1 finding
INFO No provenance attestation provenance

[Accepted risk] Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.78.0

27 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/overlays/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/trace/lantern/core/core.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/trace/lantern/graph/graph.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/trace/insights/insights.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/insights/insights.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/live-metrics/live-metrics.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/trace/lantern/metrics/metrics.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/overlays/overlays.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/react_native/react_native.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/trace/lantern/simulation/simulation.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/live-metrics/web-vitals-injected/web-vitals-injected.generated.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/web-vitals/web-vitals.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.77.0

16 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/react_native/react_native.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.76.5

16 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/react_native/react_native.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.76.2

16 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/react_native/react_native.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.76.1

16 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/react_native/react_native.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.75.5

15 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.75.4

15 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.75.3

15 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.75.1

15 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v0.75.0

15 findings
HIGH New obfuscated file: dist/third-party/front_end/panels/autofill/autofill.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/timeline/components/components.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/models/cpu_profile/cpu_profile.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/csp_evaluator/csp_evaluator.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/panels/explain/explain.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/linear_memory_inspector/linear_memory_inspector.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/panels/react_devtools/react_devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: dist/third-party/front_end/third_party/react-devtools/react-devtools.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: dist/third-party/front_end/entrypoints/rn_fusebox/rn_fusebox.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/components/suggestion_input/suggestion_input.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: dist/third-party/front_end/ui/visual_logging/visual_logging.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.