← Home

@rudderhq/server

npm Repository Homepage
25
Versions
SEE LICENSE IN LICENSE
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

zeeland

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff net-exec-file:ui-dist/assets/index-DBxLZXK7.js AI (source-diff): Bundled front-end code; network+eval patterns are library internals (modulepreload, workers). ai
source-diff net-exec-file:ui-dist/assets/cynefin-VYW2F7L2-C9hu0XqZ.js AI (source-diff): Bundled UI diagram library chunk, standard bundler pattern. ai
dependencies unvetted-dep:@modelcontextprotocol/client AI (dependencies): Official Anthropic MCP client package, expected dep for an agent server. ai
source-diff obfuscated-file:ui-dist/assets/index-DBxLZXK7.js AI (source-diff): Vite-bundled UI asset (mermaid/codemirror libs), not obfuscated malware. ai
source-diff net-exec-file:ui-dist/assets/cynefin-VYW2F7L2-BxBj6aea.js AI (source-diff): vscode-languageserver bundle inside mermaid UI chunk, not a dropper. ai
source-diff obfuscated-file:ui-dist/assets/index-B1rLBtZ1.js AI (source-diff): Vite-bundled UI dependency chunk (mermaid/cytoscape ecosystem), not injected obfuscation. ai
source-diff net-exec-file:ui-dist/assets/index-B1rLBtZ1.js AI (source-diff): Bundled UI library code; no exfil/malicious behavior in sample. ai
semgrep semgrep:base64-decode AI (semgrep): Vite chunk-loader boilerplate, not payload hiding. ai
semgrep semgrep:new-function-constructor AI (semgrep): Inside pdf.js bundle; standard parser usage, not attacker-controlled. ai
source-diff net-exec-file:ui-dist/assets/cytoscape.esm-DTSO7Bv0.js AI (source-diff): cytoscape.js library bundle, standard graph-viz dependency. ai
source-diff obfuscated-file:ui-dist/assets/index-BL10wT_h.js AI (source-diff): Vite-bundled UI dist (mermaid/cytoscape libs), not true obfuscation. ai
source-diff net-exec-file:ui-dist/assets/index-BL10wT_h.js AI (source-diff): Bundled admin UI app code, not a dropper; matches package's own build output. ai
source-diff net-exec-file:ui-dist/assets/index-CyiAbR5b.js AI (source-diff): Standard webpack/vite runtime chunk-loading pattern in bundled SPA, not a dropper. ai
source-diff obfuscated-file:ui-dist/assets/index-CyiAbR5b.js AI (source-diff): Bundled mermaid/cytoscape UI dist output, not true obfuscation. ai
source-diff obfuscated-file:ui-dist/assets/index-BEuDWets.js AI (source-diff): Bundled Vite/mermaid UI asset, not obfuscation-as-attack. ai
source-diff net-exec-file:ui-dist/assets/index-BEuDWets.js AI (source-diff): Bundled front-end UI code, network+eval patterns from bundler runtime not malicious. ai
source-diff net-exec-file:ui-dist/assets/index-ChYjpT_r.js AI (source-diff): Bundled mermaid/UI chunk; network+eval pattern is normal for diagram-rendering bundle. ai
source-diff obfuscated-file:ui-dist/assets/_baseUniq-BwSKeFBh.js AI (source-diff): Vendor bundle chunk (lodash/mermaid) from documented UI build, not obfuscation. ai
source-diff obfuscated-file:ui-dist/assets/_baseUniq-B_G9qqt8.js AI (source-diff): Bundled lodash/mermaid vendor chunk in UI dist, minified not obfuscated. ai
source-diff obfuscated-file:ui-dist/assets/index-D0heIVzX.js AI (source-diff): Vite-bundled mermaid.js/d3 UI dist asset, not obfuscation. ai
source-diff obfuscated-file:ui-dist/assets/index-CNJsvAmo.js AI (source-diff): Bundled mermaid/vite UI asset, minified not obfuscated. ai
source-diff net-exec-file:ui-dist/assets/index-CNJsvAmo.js AI (source-diff): Bundled frontend app naturally contains fetch+eval-like patterns from bundler runtime. ai
source-diff obfuscated-file:ui-dist/assets/index-DxWlZpvb.js AI (source-diff): Vite-bundled mermaid.js UI asset, minified not obfuscated. ai
source-diff obfuscated-file:ui-dist/assets/_baseUniq-CPTrhgCa.js AI (source-diff): Bundled lodash/mermaid UI asset, minified not obfuscated. ai
source-diff net-exec-file:ui-dist/assets/index-Cl8ezghO.js AI (source-diff): Bundled mermaid/UI code; network+eval patterns are normal for this rendering bundle. ai
source-diff obfuscated-file:ui-dist/assets/index-Cl8ezghO.js AI (source-diff): Vite-bundled mermaid/UI asset, not hand-written obfuscation. ai
source-diff large-new-source-files AI (source-diff): Expected growth from bundling mermaid UI diagram library into ui-dist ai
source-diff obfuscated-file:ui-dist/assets/_baseUniq-7APKp32S.js AI (source-diff): lodash/mermaid bundled UI asset, minified not obfuscated ai
source-diff obfuscated-file:ui-dist/assets/mermaid.core-BG--kYhA.js AI (source-diff): Vite-bundled mermaid.js UI asset, not obfuscation. ai
source-diff net-exec-file:ui-dist/assets/mermaid.core-BG--kYhA.js AI (source-diff): Bundled UI dist file; no actual network+exec dropper behavior. ai
source-diff obfuscated-file:ui-dist/assets/mermaid.core-D62yUl22.js AI (source-diff): Vite-bundled mermaid library chunk, minified not obfuscated. ai
source-diff net-exec-file:ui-dist/assets/mermaid.core-D62yUl22.js AI (source-diff): Bundled mermaid diagram lib; network/eval patterns are bundler artifacts, not real net-exec. ai
source-diff obfuscated-file:ui-dist/assets/index-BLDnKx7N.js AI (source-diff): Vite modulepreload bundle banner; standard minified UI build. ai
source-diff net-exec-file:ui-dist/assets/mermaid.core-lZPaf_Ix.js AI (source-diff): Bundled mermaid renderer; net+exec patterns are library internals, not a dropper. ai
source-diff obfuscated-file:ui-dist/assets/mermaid.core-lZPaf_Ix.js AI (source-diff): Vite-bundled mermaid UI asset; minified build output, not obfuscation. ai
source-diff obfuscated-file:ui-dist/assets/index-CHPArHPl.js AI (source-diff): Vite-bundled main UI entry, minified not obfuscated. ai
source-diff net-exec-file:ui-dist/assets/index-CHPArHPl.js AI (source-diff): Bundled SPA code with fetch+dynamic import, no concrete malicious target identified. ai
source-diff obfuscated-file:ui-dist/assets/pdf.worker.min-yatZIOMy.mjs AI (source-diff): Mozilla pdf.js worker bundle; license header confirms provenance, minified not obfuscated. ai
dependencies unvetted-dep:embedded-postgres AI (dependencies): Known, widely-used embedded postgres binary manager, fits local server tooling. ai
phantom-deps phantom-dep:embedded-postgres AI (phantom-deps): Used for local dev DB, likely referenced via config/spawn not static import. ai
source-diff net-exec-file:ui-dist/assets/pdf.worker.min-yatZIOMy.mjs AI (source-diff): pdf.js worker network+exec pattern is inherent to PDF rendering, not malicious. ai
typosquat typosquat.levenshtein:semver AI (typosquat): Scoped package @rudderhq/server vs unscoped semver — different purpose/namespace; stable false positive for this monorepo package. ai

Versions (showing 25 of 25)

Version Deps Published
0.6.0 38 / 14
0.5.1 35 / 14
0.5.0 34 / 14
0.4.5 38 / 14
0.4.4 38 / 14
0.4.2 38 / 14
0.4.1 38 / 14
0.4.0 38 / 14
0.3.5 37 / 14
0.3.4 37 / 14
0.3.2 37 / 14
0.3.1 37 / 14
0.3.0 37 / 14
0.2.10 37 / 14
0.2.9 37 / 14
0.2.8 37 / 14
0.2.7 37 / 14
0.2.6 37 / 14
0.2.5 37 / 14
0.2.4 37 / 14
0.2.3 37 / 14
0.2.2 37 / 14
0.2.1 37 / 14
0.2.0 37 / 14
0.1.0 37 / 14

v0.6.0

54 findings
HIGH New obfuscated file: ui-dist/assets/index-DBxLZXK7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/index-DBxLZXK7.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/cynefin-VYW2F7L2-C9hu0XqZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/cynefin-VYW2F7L2-C9hu0XqZ.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/mermaid.core-fVmaL47V.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-ZJ3FMSHR-AHfOdcaZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/swimlanes-5IMT3BWC-6kqJq5Xf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-DwbLsoLt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CMPtpj0A.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-JH36ORCC-lqqmMB3m.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-C2HjDa98.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sequenceDiagram-DBY2YBRQ-CCtHt9V4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-LMCZKHZV-BpZareVt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BPqbtW_X.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-NO4QXBWP-BRkw9-GE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-23GEKE2U-DcjqTK91.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dbg1ZwO2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/layout-Dwp1s_bo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-hCLSotmS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DOCVOD97.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DUbakRAC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-677ZJIJ3-Bkl9lp63.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/xychartDiagram-FW5EYKEG-CWKGlpF9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-Cu7OV4Oi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-jrhEFc-j.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CknAauOP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CZXgOYtk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/timeline-definition-FHXFAJF6-BuRz8KHZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/vennDiagram-L72KCM5P-BKzMZ_Rv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/quadrantDiagram-ABIIQ3AL-BlfNdETt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Cu1GuH0a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-ASZMPBYm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-G47NLZAW-DCvEm4D0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-IHSO6WYX-Cexcp6kR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/wardleyDiagram-EHGQE667-8uXlFtBV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-kz8ueXgo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/requirementDiagram-TGXJPOKE-DU-CapdF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sankeyDiagram-HTMAVEWB-Ftvh3MqA.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/stateDiagram-2N3HPSRC-2qCrydE7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-Q63AITRT-Bn7g2mSW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/journeyDiagram-5HDEW3XC-BI0w53rb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cynefinDiagram-TSTJHNR4-Uuhz4c-1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/LibraryLiveSurface-CKOthw54.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/mindmap-definition-LN4V7U3C-5dWD4dxm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-FXEZZL3T-CHy06Oev.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-FQU43EPY-DLtjkVSN.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/linear-DAV4STLZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/kanban-definition-HUTT4EX6-v_bLwx7B.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/map-Bs6QpaaQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-OA4YK3LP-BXmQLO-Q.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DB1YX9-p.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-WEI45ONY-JnMU3xrx.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/bundled-plugins/plugin-linear/dist/worker.js source-diff

Modified file contains 24 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.1

57 findings
HIGH New obfuscated file: ui-dist/assets/pdf.worker.min-yatZIOMy.mjs source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/pdf.worker.min-yatZIOMy.mjs source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/index-CssgLJwf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/index-CssgLJwf.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/pdf-CcZYcL52.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/pdf-CcZYcL52.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/cynefin-VYW2F7L2-f41lF5RD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/cynefin-VYW2F7L2-f41lF5RD.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/cytoscape.esm-DTSO7Bv0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/cytoscape.esm-DTSO7Bv0.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/mermaid.core-DsYT9DxL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-ZJ3FMSHR-DRg6yhG8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/swimlanes-5IMT3BWC-Bi2ZzUMi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/katex-C5jXJg4s.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DOVMMhyj.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dug5GX1J.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-JH36ORCC-CR0qu31s.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DoiNhQrY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sequenceDiagram-DBY2YBRQ-8uWY67Bb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-LMCZKHZV-Csd_18O2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CqmU1PxY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-NO4QXBWP-DcA7on8t.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-23GEKE2U-BW-aZfEk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BmTNDbzy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/layout-C0oWcIiC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-fkDP349f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-9bXlV2sq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CCDynlok.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-677ZJIJ3-e3ShzsXT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/xychartDiagram-FW5EYKEG-CUBDaCDm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-BXl6uBoM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DxXOCTVe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B58ems-F.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-GdN-7KLt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/timeline-definition-FHXFAJF6-CkWauU5D.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/vennDiagram-L72KCM5P-BrmBXmnk.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/quadrantDiagram-ABIIQ3AL-D44iYm0o.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-ZA8lPH2n.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dl6nXXNc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-G47NLZAW-Cp6S0siK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-IHSO6WYX-ygGufg32.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/wardleyDiagram-EHGQE667-kO5cojc6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-uKIvv9n9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/requirementDiagram-TGXJPOKE-DGJciRxB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sankeyDiagram-HTMAVEWB-NMXZW_Qb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/stateDiagram-2N3HPSRC-B37bcKMy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-Q63AITRT-DG10Bza-.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/journeyDiagram-5HDEW3XC-9vaIwdZ3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cynefinDiagram-TSTJHNR4-88wJ2LA8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/mindmap-definition-LN4V7U3C-vVHeRI83.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-FXEZZL3T-Bp6XQ1_r.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-FQU43EPY-C0iYYFUe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/linear-DNbmenmQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/kanban-definition-HUTT4EX6-DjsMaR6l.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/map-B1s9kpcR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/bundled-plugins/plugin-linear/dist/worker.js source-diff

Modified file contains 24 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.5.0

25 findings
HIGH New obfuscated file: ui-dist/assets/arc-Cpvh_rCf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-ZJ3FMSHR-sDD_mBAI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-677ZJIJ3-4O4wWti1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-LMCZKHZV-BkGODE4P.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-JH36ORCC-jQDZmrG3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cynefin-VYW2F7L2-BxBj6aea.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/cynefin-VYW2F7L2-BxBj6aea.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/cynefinDiagram-TSTJHNR4-BuUubF5I.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cytoscape.esm-DTSO7Bv0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/cytoscape.esm-DTSO7Bv0.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/dagre-VKFMJZFB-B8HipJ3a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-FQU43EPY-r7gkbKSt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-G47NLZAW-CxClRsxD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-NH7WQ7WH-C8HYTLlq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-OA4YK3LP-CjwqqLKz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-WEI45ONY-2IWfCqZb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-Q63AITRT-C_-u3Gmw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-23GEKE2U-BvGg0NCq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-NO4QXBWP-U3CZUUUR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-IHSO6WYX-CIWuEBIo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-D3P5q-7m.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B1rLBtZ1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/index-B1rLBtZ1.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-BAgtKYR1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.5

36 findings
HIGH New obfuscated file: ui-dist/assets/_baseUniq-aSj0wr7H.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/arc-C4Mg91_a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-DfqLRajq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-BbefXkmh.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-BVPjmrfV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-jsoDVyK9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-Cedmep7r.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-BWIKKX1f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-De8ij4wb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-DfqKc5zd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-CacJL_tU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-CQbuZmQW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-uMPy8GwP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-D10Ck-1y.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-DMAYpSbz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-1Ubio04r.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B-4En24L.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B4KMgdrI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BBL80GJ3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Be_UUduv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BL10wT_h.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/index-BL10wT_h.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-BSRzECfZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BXbeltXq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-C2Ne_Flh.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CjLYHamo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CkdLQ1A4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CMRK9PUO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DDvz8goz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DgfqS5r-.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dxe3o4t_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-ipqs2akW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-LKZoMmLm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-PHBUUO56-C08ZUJEU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH Long encoded string in modified file: dist/bundled-plugins/plugin-linear/dist/worker.js source-diff

Modified file contains 20 long encoded string(s) (200+ chars). These are commonly used to hide malicious payloads.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.4

35 findings
HIGH New obfuscated file: ui-dist/assets/_baseUniq-D4__pR0s.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/arc-CWa2IgOr.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-DVNwk45c.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-CAWi3Sz2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-0sZuUR3a.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-WrmuvTUy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-BYvXV9Dz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-DN-gq91G.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-B3NaGHlv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-DmZuc0OX.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-DICxZ72e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-l609IIsi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-BcmE-Svd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-BieEcMp5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-DcERZBBd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-448pEOQz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-8ozG5tR1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B_bQT7jD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B0a_XEaS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Bh-VMJC8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-C6oCKkii.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CGxtZDIh.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CHPArHPl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/index-CHPArHPl.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-CX33Ou12.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-D0ojcBRa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DhuV5NJi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-HmT8CkjT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-mrYuhp44.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-vaqjWzdS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-vyYYxOUU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Wu1jfuPG.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-XYoKl-J1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-PHBUUO56-CGujbFsC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.2

36 findings
HIGH New obfuscated file: ui-dist/assets/_baseUniq-CDbk2EfG.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/arc-PuIVeL2L.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-Dpbs3CcL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-U4sl9IrM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-B9ajWZO7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-B9zmJaNz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-DNxnA4ng.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-Btkn-jPO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-Cu8VMI3x.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-CTo-U8dL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-Bt03USCb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-BP5bHelq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-BZFE8lFv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-DuMKb_1b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-1sbiP2ir.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index--kF_V3iA.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-4Ko8WWCi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B858e1rL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BBDxEdvP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Be2tZxXv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Bi4QEyt8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Byo_Q_UD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-C-Hx82lR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CgRU4_Qv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CNvaLNWf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-D2aVfGVC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-D9acFwL3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DMizeOHD.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DMpqsr2d.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DSRNx4SJ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DzPG15y2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/index-DzPG15y2.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

HIGH New obfuscated file: ui-dist/assets/index-OS7CrVxf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-PHBUUO56-n4YW9t0A.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/journeyDiagram-4ABVD52K-DFfG_w9s.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.1

25 findings
HIGH New obfuscated file: ui-dist/assets/_baseUniq-Br4fg1iw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/arc-B8svvCeo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-C5dYOfG1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-B6XhVXfw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-D31WV7FX.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-BvkdnfgN.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-DcTva6B8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-sXDqPfE1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-BVBaBBbz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-cjQe9ndf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-CFGKze0m.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-D7oV-h10.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-Rdv3FkwM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-BejgDMgO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-FYmROErt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-4AkwW8qm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BArpEgpP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BeEzPu0t.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BipRYXd-.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BXKKdE9_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-c9oJP_Zz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CaLoiEJB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CEvBo8i0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New file with network + code execution: ui-dist/assets/index-CEvBo8i0.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.4.0

23 findings
HIGH New obfuscated file: ui-dist/assets/_baseUniq-k3x-egdv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/arc-DVwZMGLR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-BvKp7DHW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-CQ0KLoGd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-BY44eeD7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-DwgS7_iT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-CGMeHr1L.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-1AVTOsRS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-hfbRtuHq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-BypSVEur.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-DWMZC8pq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-C4ODl03j.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-K0UbcKpB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-CEtw8QBQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-D-YEM3eO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index--e_5aFtV.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index--wGHASfH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-8D4SrlCZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B9FglFcf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BVSwDm4x.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-byosaKUg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-C4vZZ0jB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.3

52 findings
HIGH New obfuscated file: ui-dist/assets/mermaid.core-D62yUl22.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/mermaid.core-D62yUl22.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-cL8JFIEI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-q54011Bx.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-1OzlQzpe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-ooDNqTGY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/treemap-KZPCXAKY-BsYSNMGI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-DuIWWGMt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B6b_8fXW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-wiio2lmT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sequenceDiagram-2WXFIKYE-BiTAJ846.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-CV7YoJJK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CqxwGwJW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-D0z_hQ8z.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-BBFS8xXu.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-CXi7fhUo.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-C8ha-Zzd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DrkCPNXt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BVCy4tDa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/layout-CYRKCLqw.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BYoMweWi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CK9V7Pdq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-C5gZJM7p.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/xychartDiagram-JWTSCODW-Z1_cCSD1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Caaa-jP6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CAL_ZbCE.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CWcHWfHt.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/vennDiagram-LZ73GAT5-BUY1-r8k.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/quadrantDiagram-337W2JSQ-R1NmPuLe.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DCfsTbUu.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DGfZY4So.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-yqtX3DpC.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-PMdIhvZS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CdtTGB-F.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/timeline-definition-YZTLITO2-EUuxDhoK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/requirementDiagram-Z7DCOOCP-DfbJ8HNI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dyp-1l8x.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/_baseUniq-C6fdh1T9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sankeyDiagram-WA2Y5GQK-DIGf9fXZ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/stateDiagram-RAJIS63D-CxXk4cFf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-DwBfDBKj.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/journeyDiagram-4ABVD52K-Ck0OQOTf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/mindmap-definition-YRQLILUH-Zuvm9fIf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-PHBUUO56-QT-XqVmf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-D0uZoS4Z.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-BEnEZFtP.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/linear-dqMgJ8Lm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/kanban-definition-K7BYSVSG-Cn7rn7b1.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-UXj69glS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-D3NhLFUf.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-Corv-4AW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.1

52 findings
HIGH New obfuscated file: ui-dist/assets/mermaid.core-BG--kYhA.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/mermaid.core-BG--kYhA.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-Dfi8PbGx.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-yyX54Dgl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DzKALBsQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B4seykMn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/treemap-KZPCXAKY-Bhyg_yHs.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-Bb6NLaVm.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dys_qAzR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-baeevrWz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sequenceDiagram-2WXFIKYE-RVCXfMRR.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-CltWqWC_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Ce0xbQ5p.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CBAKsDOH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-B8-MpUjy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-FnOXpXb_.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CWPEuLky.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CkEo4bIl.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Bd_GitJ7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/layout-DE8DhR5g.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B5Lq7qho.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BKWZYXO6.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-DleWvS8P.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/xychartDiagram-JWTSCODW-BYpdJxGK.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DF0X3XZi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Bp3rYm9R.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BO-P9C91.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/vennDiagram-LZ73GAT5-EnVupOQz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/quadrantDiagram-337W2JSQ-C0oqv-xU.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BO9KiNr0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DNFqhIup.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-D7J8NbEW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-DvyBGQTF.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-3CPMGfu4.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/timeline-definition-YZTLITO2-S0uy5mlJ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/requirementDiagram-Z7DCOOCP-okIS8feM.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-ChyWxMPa.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/_baseUniq-C_DXAETg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sankeyDiagram-WA2Y5GQK-WOnxUdkO.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/stateDiagram-RAJIS63D-CZFHvVtT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-Ba-Ynr8U.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/journeyDiagram-4ABVD52K-DAX0bTCG.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/mindmap-definition-YRQLILUH-DkjV0oE3.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-PHBUUO56-XMkPw0tW.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-DpqLnZ3A.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-BdpIVR-I.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/linear-B6lAW9Wb.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/kanban-definition-K7BYSVSG-DndcgBkd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BeyQP4jc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-Ds2u81Zi.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-BwBplO7L.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.2.0

52 findings
HIGH New obfuscated file: ui-dist/assets/mermaid.core-lZPaf_Ix.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New file with network + code execution: ui-dist/assets/mermaid.core-lZPaf_Ix.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/index-BLDnKx7N.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator. Artifact: bundled (vite) — bundler banner in the scanned head, but the file is larger than the scan window and its remainder is unclassified, so this is not a clean bill of health.

HIGH New obfuscated file: ui-dist/assets/architectureDiagram-2XIMDMQ5-vbevcV-8.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-B8QjK4Xd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-ClrueuiI.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/treemap-KZPCXAKY-FWWMNo03.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/cose-bilkent-S5V4N54A-CLH06Lnz.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CpxwEuIg.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-D1ZkASZY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sequenceDiagram-2WXFIKYE-Cmgr7vKy.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/c4Diagram-IC4MRINW-CbsNVA8e.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-eIjkqSkc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DUP0i_Iv.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ganttDiagram-A5KZAMGK-D4xd7J_z.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/flowDiagram-PKNHOUZH-BYqyaowc.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Bz0jEwWG.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BZGiyL9p.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-CIAMqUzr.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/layout-BDcM6t-f.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-_xX3B4n0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Dzd88G_H.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/blockDiagram-WCTKOSBZ-DvupMRN9.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/xychartDiagram-JWTSCODW-BJ6DrP1k.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-Bm86s0IY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-mIrYeZR2.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BX6QyxsL.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/vennDiagram-LZ73GAT5-CGs3T7cn.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/quadrantDiagram-337W2JSQ-BU1ZwGcS.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-SklGX83C.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DawkXomB.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-E7M64L7V-BOcSeWh0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/gitGraphDiagram-K3NZZRJ6-Co9xqKNH.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-BelfAyHh.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/timeline-definition-YZTLITO2-B9OfCgYQ.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/requirementDiagram-Z7DCOOCP-DBOqB50G.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-bVqVfFu5.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/_baseUniq-Bvy8WJh0.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/sankeyDiagram-WA2Y5GQK-CsXDIOlq.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/stateDiagram-RAJIS63D-Bd0uRbWd.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/erDiagram-INFDFZHY-QtL5Yt_b.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/journeyDiagram-4ABVD52K-Dv5wJGwT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/mindmap-definition-YRQLILUH-Cu4HfP8K.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/ishikawaDiagram-PHBUUO56-B1u2RAnY.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/dagre-KLK3FWXG-DxNQPDBj.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/graph-DEC7S98H.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/linear-B9Sm5Y96.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/kanban-definition-K7BYSVSG-CJOykCsT.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/index-DxchV0Z7.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-IFDJBPK2-DXyaFKVr.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: ui-dist/assets/diagram-P4PSJMXO-DhY_ls3C.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.