@scaleflex/uploader
Framework-agnostic file upload widget for Scaleflex VXP
51
Versions
SEE LICENSE IN LICENSE
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
dmitry.stremousvitaly.shaposhnikamr26philipkadmytrimusiiko
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/google-picker-view-BR4TteFB.cjs | AI (source-diff): Bundled build output for documented Google Picker integration, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BxvEVjEY.cjs | AI (source-diff): Standard vite bundle of lit/i18next, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BDRJchKJ.cjs | AI (source-diff): Bundled provider auth code consistent with stated uploader functionality. | ai | |
| source-diff | obfuscated-file:dist/index-DSGrq9uj.cjs | AI (source-diff): Minified bundle output, matches package's Hub API metadata feature. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DmTxYa02.cjs | AI (source-diff): Bundled OAuth/localStorage token handling for provider integration, benign. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-DLYBYKNX.cjs | AI (source-diff): Bundled Google Picker integration code, matches stated upload functionality. | ai | |
| source-diff | obfuscated-file:dist/index-Dzvnu87s.cjs | AI (source-diff): Bundled output, benign Hub API config code. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-OTAVEFN1.cjs | AI (source-diff): Bundled i18next/lit vendor code, standard minified output. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-B_iVXN6-.cjs | AI (source-diff): Minified vite bundle output, not true obfuscation; no malicious behavior found. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): All new deps are first-party @scaleflex DAM packages, consistent with package's ecosystem. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CS-bSMJ1.cjs | AI (source-diff): Minified bundle with localStorage token caching for provider auth, benign. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-btHFnoRa.cjs | AI (source-diff): Minified bundle implementing Google Picker OAuth flow, benign. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Crd2Vf4n.cjs | AI (source-diff): Main bundled library chunk (lit/i18next), standard build minification. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-qu50oBfK.cjs | AI (source-diff): Bundled build output for Google Picker feature, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BbTaglU4.cjs | AI (source-diff): Vite bundle output, legitimate metadata/i18n logic. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-yPyh4-QK.cjs | AI (source-diff): Bundled provider auth UI component, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BrVky3g6.cjs | AI (source-diff): Bundled Vite output, no malicious behavior in sample. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-K9WPBHGc.cjs | AI (source-diff): Minified core bundle (lit/i18next), not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CJgkig1t.cjs | AI (source-diff): Bundled output implementing package's own OAuth/localStorage token flow. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-B8qqMZTJ.cjs | AI (source-diff): Bundled build output for Google Picker integration, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-CsnwGqDu.cjs | AI (source-diff): Bundled minified lib code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-D8DHAiL2.cjs | AI (source-diff): Bundled minified lib code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CS9ar6sn.cjs | AI (source-diff): Bundled minified lib code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-BD1gGCKE.cjs | AI (source-diff): Bundled minified lib code, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BiH8_6h9.cjs | AI (source-diff): Bundled dist output, matches package's stated function. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-7tsEpLsK.cjs | AI (source-diff): Core bundled uploader widget, minified build output. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BSW06orm.cjs | AI (source-diff): Bundled provider auth code, localStorage/postMessage used for OAuth token relay. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-DRgR211k.cjs | AI (source-diff): Bundled Google Picker integration, standard OAuth flow. | ai | |
| source-diff | obfuscated-file:dist/index-7aLmheiA.cjs | AI (source-diff): Vite/esbuild bundle output, legitimate minification. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CWVLzIuD.cjs | AI (source-diff): Core bundled dist file including vendored lit/i18next; minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DErRapCE.cjs | AI (source-diff): Bundled provider code with localStorage token cache; no exfil destination. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-BJWLoXhc.cjs | AI (source-diff): Bundled build output for Google Picker integration, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-Wm5xY7b5.cjs | AI (source-diff): Bundled build output; localStorage/postMessage used for own OAuth flow. | ai | |
| source-diff | obfuscated-file:dist/index-BcWvbqKy.cjs | AI (source-diff): Bundled vite/esbuild output, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BR2Lv0fz.cjs | AI (source-diff): Bundled i18next/lit vendor code, minified not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-0Ie5Soan.cjs | AI (source-diff): Bundled Vite output implementing documented Google Picker feature. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-0vvluSyH.cjs | AI (source-diff): Main bundle output (lit/i18next), standard minification. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DcPAZVOD.cjs | AI (source-diff): Bundled build output for provider auth UI, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-COKw_iGE.cjs | AI (source-diff): Bundled build output, readable minified code. | ai | |
| source-diff | obfuscated-file:dist/index-BfbUbP1a.cjs | AI (source-diff): Vite/esbuild bundle output for lit-based UI, not true obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DjniyxCA.cjs | AI (source-diff): Minified i18n/lit bundle, standard build output. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-hIfBWZPW.cjs | AI (source-diff): Minified bundle; fetch/localStorage use is first-party auth/token flow, not exfil. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-BcEFoBC8.cjs | AI (source-diff): Vite-bundled CJS output; readable code implementing Google Picker OAuth flow, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-YQnvsDHv.cjs | AI (source-diff): Vite-bundled CJS output; readable uploader core logic, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-C-HqW5EP.cjs | AI (source-diff): Vite-bundled CJS output; readable OAuth provider browser component, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/index-CZTvls62.cjs | AI (source-diff): Vite-bundled CJS output; readable business logic for Scaleflex Hub API, not obfuscated. | ai | |
| source-diff | obfuscated-file:dist/google-picker-view-CeMEmilX.cjs | AI (source-diff): Minified CJS chunk implementing Google Drive Picker integration; legitimate uploader feature. | ai | |
| phantom-deps | phantom-dep:@lit-labs/virtualizer | AI (phantom-deps): Declared runtime dep used in build; phantom-dep heuristic fires because it's tree-shaken into the bundle. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-9KWikyGm.cjs | AI (source-diff): Main minified CJS chunk; standard Vite build output with Lit/i18next internals. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CGgyNbHI.cjs | AI (source-diff): Minified CJS chunk for cloud provider browser UI; legitimate uploader feature. | ai | |
| source-diff | obfuscated-file:dist/index-CaLT913B.cjs | AI (source-diff): Minified CJS bundle entry point; standard Vite build output for this package. | ai | |
| source-diff | obfuscated-file:dist/flow-DM3dNAKs.cjs | AI (source-diff): Vite/Rollup minified CJS chunk; no true obfuscation, contains @lit-labs/virtualizer layout code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BiZlx9UB.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable logic, no obfuscation indicators. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Cjfy01aB.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable logic, no obfuscation indicators. | ai | |
| source-diff | obfuscated-file:dist/index-Dw77RcQK.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable logic, no obfuscation indicators. | ai | |
| source-diff | obfuscated-file:dist/index-FDuwSW6U.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for this package; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CupCxtPD.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for this package; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DvI-IRV6.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output for this package; not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DLxpddZM.cjs | AI (source-diff): Standard Vite minified bundle; OAuth provider browser code with no exfiltration patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BxM929h1.cjs | AI (source-diff): Standard Vite minified bundle for the uploader core; no malicious patterns detected. | ai | |
| source-diff | obfuscated-file:dist/index-CQ_uyIKP.cjs | AI (source-diff): Standard Vite minified bundle output for this package; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BQJOSwGL.cjs | AI (source-diff): Vite build output; readable i18n/utility logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-NB0iMwz-.cjs | AI (source-diff): Vite build output; readable OAuth/localStorage provider logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-DMpYQoIW.cjs | AI (source-diff): Vite build output; minified but readable LitElement/fetch logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BzblopkP.cjs | AI (source-diff): Vite build output; samples show standard i18n/utility code, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DH_fzgwD.cjs | AI (source-diff): Vite build output; samples show legitimate OAuth/provider browser code. | ai | |
| source-diff | obfuscated-file:dist/index-DqUtqAyK.cjs | AI (source-diff): Vite build output with hashed filename; code is readable minified JS, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/index-D81-mtmI.cjs | AI (source-diff): Standard Vite minified bundle output; samples show normal uploader logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-bLbpWRH4.cjs | AI (source-diff): Standard Vite minified bundle output; samples show normal provider/auth logic. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-D50Q9Vkr.cjs | AI (source-diff): Standard Vite minified bundle output; samples show normal uploader utility logic. | ai | |
| source-diff | obfuscated-file:dist/index-DzHgBlCX.cjs | AI (source-diff): Vite build output; minified but readable business logic, no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BRG5gnm6.cjs | AI (source-diff): Vite build output; minified but readable i18n/utility logic, no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-D0njQ57g.cjs | AI (source-diff): Vite build output; minified but readable OAuth/provider logic, no malicious indicators. | ai | |
| source-diff | obfuscated-file:dist/index-DKbXrYEU.cjs | AI (source-diff): Vite-generated minified bundle; readable source logic visible in sample, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Ckj5IWme.cjs | AI (source-diff): Vite-generated minified bundle; readable source logic visible in sample, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CjjDd77N.cjs | AI (source-diff): Vite-generated minified bundle; readable source logic visible in sample, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-BEurNt0h.cjs | AI (source-diff): Standard Vite minified build output; code samples show legitimate uploader logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-Chv7fXtC.cjs | AI (source-diff): Standard Vite minified build output; code samples show OAuth/cloud-provider browser logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CMVtzIfu.cjs | AI (source-diff): Standard Vite minified build output; code samples show i18n/utility logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-CCMPD9GK.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Bt4W3aIb.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-B64WBJ_L.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-PTEEfMvB.cjs | AI (source-diff): Standard Vite minified build output for this package; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/index-ChS_dPB-.cjs | AI (source-diff): Standard Vite minified build output for this package; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-SXVno7eF.cjs | AI (source-diff): Standard Vite minified build output for this package; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DKdWBGCw.cjs | AI (source-diff): Standard Vite minified bundle; sample shows i18n/utility code consistent with the package's purpose. | ai | |
| source-diff | obfuscated-file:dist/index-DRJRCfdg.cjs | AI (source-diff): Standard Vite minified bundle output; samples show legitimate uploader logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BKE-rg3a.cjs | AI (source-diff): Standard Vite minified bundle; sample shows OAuth/localStorage token handling consistent with uploader widget. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CSk11BjH.cjs | AI (source-diff): Standard Vite minified bundle; content shows OAuth provider browser integration, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-BZHmPtQ8.cjs | AI (source-diff): Standard Vite minified bundle output; content is readable uploader logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BOM_qghp.cjs | AI (source-diff): Standard Vite minified bundle; content is i18n/utility logic for the uploader widget. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-7kef4B9h.cjs | AI (source-diff): Vite-minified core bundle; code is readable utility/i18n logic, no exfiltration. | ai | |
| source-diff | obfuscated-file:dist/index-uJh-ZXRa.cjs | AI (source-diff): Vite-minified bundle; code is readable and contains only legitimate uploader logic. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CN82fnqt.cjs | AI (source-diff): Vite-minified bundle for OAuth provider browser flow; no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BZSlX9vh.cjs | AI (source-diff): Standard Vite minified bundle; content shows LitElement/i18n utility code consistent with the package purpose. | ai | |
| source-diff | obfuscated-file:dist/index-JyV__5Il.cjs | AI (source-diff): Standard Vite minified bundle output; code is readable and consistent with uploader widget functionality. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-QbZiJb9W.cjs | AI (source-diff): Standard Vite minified bundle; content shows OAuth/cloud-provider browser integration logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BVw-cWGG.cjs | AI (source-diff): Standard Vite minified bundle; samples show i18n/utility code consistent with uploader package. | ai | |
| source-diff | obfuscated-file:dist/index-hhvzVZnw.cjs | AI (source-diff): Standard Vite minified bundle output; readable logic in samples confirms legitimate uploader code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BNSkqHJn.cjs | AI (source-diff): Standard Vite minified bundle; samples show LitElement OAuth provider component, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-Cdc1BhJr.cjs | AI (source-diff): Vite build output; minified but readable, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CvWgiyIT.cjs | AI (source-diff): Vite build output; minified but readable, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BNbpoi9w.cjs | AI (source-diff): Vite build output; minified but readable, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-Dx_u2sli.cjs | AI (source-diff): Standard Vite minified bundle output; content is readable business logic, not malicious code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-UHJHkPWW.cjs | AI (source-diff): Standard Vite minified bundle output; content is readable OAuth provider logic, not malicious code. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-dyaODsy3.cjs | AI (source-diff): Standard Vite minified bundle output; content is readable utility/i18n logic, not malicious code. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DxmDRrdm.cjs | AI (source-diff): Standard Vite minified bundle; samples show i18n/utility logic consistent with uploader package. | ai | |
| source-diff | obfuscated-file:dist/index-aJW6yoky.cjs | AI (source-diff): Standard Vite minified bundle output; code samples show legitimate uploader logic. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DSmgxDhj.cjs | AI (source-diff): Standard Vite minified bundle; samples show OAuth/cloud-provider browser integration code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BRAjVeED.cjs | AI (source-diff): Vite minified build output; samples show OAuth/localStorage token handling for cloud provider integration. | ai | |
| source-diff | obfuscated-file:dist/index-DTKhbyGo.cjs | AI (source-diff): Vite minified build output; samples show legitimate uploader/metadata logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BOks4oa5.cjs | AI (source-diff): Vite minified build output; samples show i18n/utility logic consistent with the uploader widget. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CRurnJWX.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show legitimate uploader utility code. | ai | |
| source-diff | obfuscated-file:dist/index-jj83x_9r.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show legitimate application code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DJInUElc.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; samples show legitimate OAuth/provider browser code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-6-B8MpX8.cjs | AI (source-diff): Vite-minified bundle; sample shows OAuth provider browser integration consistent with uploader widget. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-C_eDP35p.cjs | AI (source-diff): Vite-minified bundle; sample shows i18n/utility helpers consistent with package purpose. | ai | |
| source-diff | obfuscated-file:dist/index-d3ddCgHi.cjs | AI (source-diff): Vite-minified bundle; readable logic in sample matches package purpose (metadata fetch, Lit components). | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DeoNLlUF.cjs | AI (source-diff): Standard Vite/Rollup minified bundle; content is i18n/utility code consistent with the package's purpose. | ai | |
| source-diff | obfuscated-file:dist/index-BFdI2Vy7.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; content is readable uploader logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DTl3Llk5.cjs | AI (source-diff): Standard Vite/Rollup minified bundle; content shows OAuth/localStorage token handling for cloud provider integration. | ai | |
| source-diff | obfuscated-file:dist/index-8ecRYGV0.cjs | AI (source-diff): Standard Vite minified build output; code samples show legitimate uploader logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CbQBeIXg.cjs | AI (source-diff): Standard Vite minified build output; code samples show OAuth/provider browser logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DUV8PlRB.cjs | AI (source-diff): Standard Vite minified build output; code samples show i18n/utility logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DJbfGjIm.cjs | AI (source-diff): Standard Vite minified build output; samples show i18n/Lit component logic consistent with package purpose. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DnTZtya1.cjs | AI (source-diff): Standard Vite minified build output; samples show OAuth/localStorage token handling consistent with package purpose. | ai | |
| source-diff | obfuscated-file:dist/index-C044Lmf6.cjs | AI (source-diff): Standard Vite minified build output for this uploader package; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CZ-DJc6K.cjs | AI (source-diff): Standard Vite/Rollup minified bundle; sample shows OAuth/localStorage token handling consistent with uploader widget. | ai | |
| source-diff | obfuscated-file:dist/index-BY2aP3TY.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; readable business logic visible in sample, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-C59ikb9g.cjs | AI (source-diff): Standard Vite/Rollup minified bundle; sample shows i18n/utility code consistent with uploader widget. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-qpZWkfnp.cjs | AI (source-diff): Standard Vite minified bundle; code shows OAuth provider browser integration, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-B3I-DKmA.cjs | AI (source-diff): Standard Vite minified bundle; code shows file upload state management logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-Cfx0ch81.cjs | AI (source-diff): Standard Vite minified bundle output; code samples show legitimate uploader logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-iwitoRN1.cjs | AI (source-diff): Standard Vite minified build output; samples show normal uploader logic, no malicious code. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-9Tw_J6tX.cjs | AI (source-diff): Standard Vite minified build output; samples show i18n/utility helpers, no malicious code. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DkQ80HFv.cjs | AI (source-diff): Standard Vite minified build output; samples show OAuth/cloud-provider browser logic, no malicious code. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DJY_2MqA.cjs | AI (source-diff): Vite-minified bundle; content is i18n/utility code consistent with package purpose. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BEfLYXIS.cjs | AI (source-diff): Vite-minified bundle; content is OAuth/localStorage provider logic consistent with package purpose. | ai | |
| source-diff | obfuscated-file:dist/index-7jTf4POF.cjs | AI (source-diff): Vite-minified bundle; content is readable business logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BrdR9BBC.cjs | AI (source-diff): Standard Vite/Rollup minified build output; samples show file upload state management, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-DRc9qUhl.cjs | AI (source-diff): Standard Vite/Rollup minified build output; samples show legitimate uploader logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-C0DwIUVX.cjs | AI (source-diff): Standard Vite/Rollup minified build output; samples show OAuth/cloud-provider browser logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-C9I4yhZ9.cjs | AI (source-diff): Standard Vite minified CJS bundle; OAuth/provider browser logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-Dln1ptPu.cjs | AI (source-diff): Standard Vite minified CJS bundle; readable business logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BkD48or1.cjs | AI (source-diff): Standard Vite minified CJS bundle; i18n/utility logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-XMhqia5v.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable business logic, not obfuscated malware. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-D7D-7LVt.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable upload state management logic. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-yKD2vwDL.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable OAuth/file-picker logic. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CYvKyggQ.cjs | AI (source-diff): Standard Vite/Rollup minified build output; sample shows OAuth provider browser integration logic, no malicious patterns. | ai | |
| phantom-deps | phantom-dep:i18next-http-backend | AI (phantom-deps): Used as i18next plugin loaded via config rather than direct import; stable false positive for this package. | ai | |
| source-diff | obfuscated-file:dist/index-FcRKG7Z8.cjs | AI (source-diff): Standard Vite/Rollup minified build output for this UI widget package; no malicious patterns in samples. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DNEmx_1F.cjs | AI (source-diff): Standard Vite/Rollup minified build output; sample shows i18n/utility code consistent with uploader widget, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BtiWQKFS.cjs | AI (source-diff): Standard Vite minified CJS build output; code samples show OAuth provider browser integration. | ai | |
| source-diff | obfuscated-file:dist/index-BpTfwkwD.cjs | AI (source-diff): Standard Vite minified CJS build output; code samples show legitimate upload widget logic. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-B7DPp8JT.cjs | AI (source-diff): Standard Vite minified CJS build output; code samples show file upload state management logic. | ai | |
| source-diff | obfuscated-file:dist/index-DLXATk4W.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable and benign in samples. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-BtW8NKRh.cjs | AI (source-diff): Standard Vite/Rollup minified bundle; upload/state-management logic visible in sample, no malware indicators. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DX1V8p7k.cjs | AI (source-diff): Standard Vite/Rollup minified bundle; OAuth/file-picker logic visible in sample, no malware indicators. | ai | |
| source-diff | obfuscated-file:dist/index-Bl7X23OY.cjs | AI (source-diff): Standard Vite/Rollup minified build output; samples show legitimate uploader logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-BooCl9Xv.cjs | AI (source-diff): Standard Vite/Rollup minified build output; samples show OAuth/file-picker logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CuemxuWJ.cjs | AI (source-diff): Standard Vite/Rollup minified build output; samples show file upload state management, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-gHt8SmZF.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable OAuth/file-picker logic. | ai | |
| source-diff | obfuscated-file:dist/index-CHWxSjUc.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable business logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-FRMs7J5q.cjs | AI (source-diff): Standard Vite/Rollup minified bundle output; code is readable upload state management logic. | ai | |
| source-diff | obfuscated-file:dist/index-Dsevyf8w.cjs | AI (source-diff): Standard Vite minified bundle output; samples show legitimate uploader logic, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-K-FR84FY.cjs | AI (source-diff): Standard Vite minified bundle; samples show OAuth/cloud-provider browser integration code. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Bk9fU_8P.cjs | AI (source-diff): Standard Vite minified bundle; samples show file upload state management logic. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-CM6iGuKO.cjs | AI (source-diff): Vite/Rollup minified bundle; samples show standard OAuth provider browser integration. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Br61ugq7.cjs | AI (source-diff): Vite/Rollup minified bundle; samples show i18next/LitElement uploader logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/index-B-dbj3YY.cjs | AI (source-diff): Vite/Rollup minified bundle output; code is readable and benign in samples. | ai | |
| source-diff | obfuscated-file:dist/index-DHCML5-W.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; samples show readable business logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-C8ZjovD6.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; samples show i18n/utility logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-c3CwLX_n.cjs | AI (source-diff): Standard Vite/Rollup minified CJS bundle; samples show OAuth/localStorage provider logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-DXyLpoIJ.cjs | AI (source-diff): Standard Vite minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DbjyF_Ou.cjs | AI (source-diff): Standard Vite minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-CpKFlkgS.cjs | AI (source-diff): Vite build output with hashed filename; sample shows plain minified component code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DajdSDoL.cjs | AI (source-diff): Vite build output with hashed filename; sample shows plain LitElement code, not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-D1QE07Cn.cjs | AI (source-diff): Standard Vite minified bundle output; readable file-upload logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-YA7MCWl4.cjs | AI (source-diff): Standard Vite minified bundle output; readable logic, no malicious patterns. | ai | |
| source-diff | obfuscated-file:dist/provider-browser-DlnjPqY9.cjs | AI (source-diff): Standard Vite minified build output; content is readable OAuth/cloud-provider browser logic. | ai | |
| source-diff | obfuscated-file:dist/sfx-uploader-Bg6CR-ID.cjs | AI (source-diff): Standard Vite minified build output; content is readable uploader core logic. | ai | |
| phantom-deps | phantom-dep:tus-js-client | AI (phantom-deps): tus-js-client is a declared runtime dependency; bundled by Vite so not directly imported at module level. | ai | |
| source-diff | obfuscated-file:dist/index-ZNX436Kx.cjs | AI (source-diff): Standard Vite minified build output; content is readable upload widget logic, not obfuscated malware. | ai |
Versions (showing 51 of 68)
| Version | Deps | Published |
|---|---|---|
| 1.10.0 | 9 / 2 | |
| 1.9.0 | 9 / 2 | |
| 1.8.8 | 5 / 11 | |
| 1.8.7 | 5 / 11 | |
| 1.8.6 | 5 / 11 | |
| 1.8.5 | 5 / 9 | |
| 1.8.4 | 5 / 9 | |
| 1.8.3 | 4 / 9 | |
| 1.8.2 | 4 / 9 | |
| 1.8.1 | 4 / 9 | |
| 1.8.0 | 4 / 9 | |
| 1.7.1 | 4 / 9 | |
| 1.7.0 | 4 / 9 | |
| 1.6.3 | 4 / 9 | |
| 1.6.2 | 4 / 9 | |
| 1.6.1 | 4 / 9 | |
| 1.6.0 | 4 / 9 | |
| 1.5.1 | 4 / 9 | |
| 1.5.0 | 4 / 9 | |
| 1.4.1 | 4 / 9 | |
| 1.4.0 | 4 / 9 | |
| 1.3.22 | 4 / 9 | |
| 1.3.21 | 4 / 9 | |
| 1.3.20 | 4 / 9 | |
| 1.3.19 | 4 / 9 | |
| 1.3.18 | 4 / 9 | |
| 1.3.17 | 4 / 9 | |
| 1.3.16 | 4 / 9 | |
| 1.3.15 | 4 / 9 | |
| 1.3.14 | 4 / 9 | |
| 1.3.13 | 4 / 9 | |
| 1.3.12 | 4 / 9 | |
| 1.3.11 | 4 / 9 | |
| 1.3.10 | 4 / 9 | |
| 1.3.9 | 4 / 9 | |
| 1.3.8 | 4 / 9 | |
| 1.3.7 | 4 / 9 | |
| 1.3.6 | 4 / 9 | |
| 1.3.5 | 4 / 9 | |
| 1.3.4 | 4 / 9 | |
| 1.3.3 | 4 / 9 | |
| 1.3.2 | 4 / 9 | |
| 1.3.1 | 4 / 9 | |
| 1.2.5 | 4 / 9 | |
| 1.2.4 | 4 / 9 | |
| 1.2.3 | 4 / 9 | |
| 1.2.2 | 4 / 9 | |
| 1.0.10 | 2 / 9 | |
| 1.0.7 | 2 / 9 | |
| 1.0.6 | 2 / 9 | |
| 1.0.5 | 2 / 9 |
v1.10.0
5 findings
HIGH
Missing gitHead — previous versions had it
provenance
This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: dmitry.stremous.
HIGH
New obfuscated file: dist/google-picker-view-btHFnoRa.cjs
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/provider-browser-CS-bSMJ1.cjs
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/sfx-uploader-B_iVXN6-.cjs
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v1.9.0
5 findings
HIGH
Missing gitHead — previous versions had it
provenance
This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: dmitry.stremous.
HIGH
New obfuscated file: dist/google-picker-view-btHFnoRa.cjs
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/provider-browser-CS-bSMJ1.cjs
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
HIGH
New obfuscated file: dist/sfx-uploader-B_iVXN6-.cjs
source-diff
Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.