Big update!Introducing GitHub Bot Commands. Learn more →
Socket
BlogLoveLog in
Book a demo

Invisible chars

Severity

High

Description

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

Suggestion

Remove invisible characters. If their use is justified, use their visible escaped counterparts.

Packages with this issue

codepage

pure-JS library to handle codepages

published 1.15.0 •

xlsx

SheetJS Spreadsheet data parser and writer

published 0.18.5 •

@shopify/polaris-viz

Shopify’s viz component library

published 7.3.1 •

xlsx-style

Excel (XLSB/XLSX/XLSM/XLS/XML) and ODS spreadsheet parser and writer (extended to enable read/write of cell formats with xlsx files)

published 0.8.13 •

cspell-util-bundle

This is a bundle of external libraries used by cspell bundled into a single `.js`

published 5.1.3 •

react-file-viewer

Extendable file viewer for web

published 1.2.1 •

vue-pdf-embed

PDF embed component for Vue 2 and Vue 3

published 1.1.4 •

xlsx-js-style

SheetJS Spreadsheet Community Edition plus Basic Cell Styles

published 1.2.0 •

unhomoglyph

Replace all homoglyphs with base characters.

published 1.0.6 •

tempa-xlsx

Excel (XLSB/XLSX/XLSM/XLS/XML) and ODS spreadsheet parser and writer (extended to enable read/write of cell formats with xlsx files)

published 0.8.20 •
23456Next
Socket

Product

About

NPM Packages

Subscribe to our newsletter

Get open source security insights delivered straight into your inbox. Be the first to learn about new features and product updates.

  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc