Live feedef6714f4-ac21-4d43-9fa6-e8fab2150165

Investigation

Scan id: ef6714f4-ac21-4d43-9fa6-e8fab2150165

Package: left-pad@1.3.0

Threat level
clean
Threat score
7/100
Scanned at
Scan duration
1.92s

Alerts

2 total
Unusually short identifier names
File has average identifier length of 2.92 characters across 13 identifiers. This suggests minification or obfuscation.
Location: perf/O(n).js
What this means / what to doFull docs
What it means

At least one file in the package contains content consistent with obfuscation techniques.

Why it matters

Obfuscation can be legitimate (bundled/minified distribution), but it’s also frequently used to hide malicious behavior and evade review.

What to do
  • Identify the file(s) and check whether they’re expected build artifacts.
  • Deobfuscate/unminify the content and re-run static analysis.
  • Prefer packages with auditable source and reproducible builds.
Unusually short identifier names
File has average identifier length of 2.92 characters across 12 identifiers. This suggests minification or obfuscation.
Location: perf/es6Repeat.js
What this means / what to doFull docs
What it means

At least one file in the package contains content consistent with obfuscation techniques.

Why it matters

Obfuscation can be legitimate (bundled/minified distribution), but it’s also frequently used to hide malicious behavior and evade review.

What to do
  • Identify the file(s) and check whether they’re expected build artifacts.
  • Deobfuscate/unminify the content and re-run static analysis.
  • Prefer packages with auditable source and reproducible builds.