.babelrc

README.md

dist

index.js

package.json

public

01fd34b01abf8d0a1fdb3c10f95146cd.svg

025954f8cad47e40240e15487d1e396c.svg

105d10237b3dddb56304b2af06fab51c.svg

10879587954149cc5fd694c7785e9d3a.svg

15cba32d3c729060a92912d969d1cc2c.svg

1964539986cd6aea3baee0f32a61923e.svg

1c0b882b730b22fbd7d42b68bd0a970e.svg

1d66d40875fa58261ff4b850e8cba7cc.svg

22b31630cb8b4b2ad58da61bb133ab1f.svg

2d62d3d287fbc3c497dddab32168f325.svg

31f31a1074e7f19fde072c1158a8e6a0.svg

3659a716673b2dd214d961c5feb3caa6.svg

3bc689e0aff9db355266a7b3be92e9d0.svg

3eb1d80899f968c9398d1c08a5350b2d.svg

4c63cae958b5685dfd85cda1b06787fe.svg

50842dfca45fc95070e4fdd2259db45c.svg

536890911d2db783d87b77a39b74f396.svg

71edf29951e1e0d3b50d9562bc7a5049.svg

79ee5b45e590be841daeba9d60e7db6e.svg

839d642763fa2703bfa92fcdbaa0397c.svg

8639ab06d026e5d60849b007b6f432b6.svg

9209f692646c3a0d4fb372037a3d7237.svg

96ba4601cfdb560093692ac2d34260dd.svg

9c36754c195ca83d24a39e75ef3821c0.svg

9f41f6f39d1736d2782a934fea979c01.svg

a24af8321bcb23961c196b0b4fce89c7.svg

a3f2a45a2d94e515bc17ea9740631aa0.svg

a51521eadbd56edc63eb19bc5a41a598.svg

a7a14359ef6035eb03282f98500c02f3.svg

b4d7375b688647fc2e477f9d911f1e2e.svg

b947e1da1eac39e0ff7f9b7c1f944f52.svg

bundle.js

bundle.js.LICENSE.txt

c0ab9ce68d42392fb8fc13f7089c9518.svg

c69a80a1cc748b27d5ee83d3951bc956.svg

c6ac6e95ae6fe2f0391da8fa2e9c8554.svg

d538166f1033a89b5d2735aecea91c62.svg

d84737c082efeea55189a8196ac9236c.svg

039045c142633c1921ec.wasm

0abedd4b8763c75c13b0fe7b4161aa68.svg

0cab1f926ef71972522c.wasm

0d18d81ca415c6007655b836f84e4219.svg

0f0229bbc7bc4613c9ac.wasm

2ce2448df3f1a606dd2e.wasm

2d78cb9bc635f510d16d.wasm

35d6b608bc295d96f7fd45b93b27706c.svg

3b6850d77fbd4c20601c.wasm

3e8dbb8345f70b7b4c36bb1ad05dfe7e.svg

3ecdb4f77463d3dcf7b02831f69259ff.svg

4943869d9caa07d17b9649e07d5018b5.svg

4f93cea1353ce3cad9e6b42d893c65ab.svg

513b0c23baa8a3f70ef6.wasm

53f17281bc4dffa3a650442bfb07d321.svg

57a04c4d35bea7a0c588.wasm

64809c065b61627b6453cb9ec3de8952.svg

6c28b76864e234a44579.wasm

6d1a0ce4f1985e7ad0251fcc5d49a02c.svg

6ddf3e0b31d877cf6e59.wasm

71d4616bd0866b3ac9f3313124323618.svg

7ce9ead34e5ba2d91717990b433f7b8b.svg

868ddc2dbe0584e5b53f446a1a3aee78.svg

8a054644fd48056aac32.wasm

96d83f1c2c46bacff988.wasm

a44597a8849061663efa.wasm

Announcing our $40M Series B led by Abstract Ventures

pdf_editor_aleon35_react_plugin

al35

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

What are http dependencies?

HTTP dependency

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

What is an install script?

Install scripts

Package has an invalid manifest file and can cause installation problems if you try to use it.

What is an invalid manifest file?

Invalid manifest file

Source files contain invisible characters. This could indicate source obfuscation or a supply chain attack.

What are invisible characters?

Invisible chars

(Experimental) Package license has recently changed.

What is a license change?

License change

(Experimental) Contains an SPDX license exception.

What is a license exception?

License exception

This package is not allowed per your license policy. Review the package's license to ensure compliance.

What is a license policy violation?

License Policy Violation

Contains long string literals, which may be a sign of obfuscated or packed code.

What's wrong with long strings?

Long strings

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

What is a major refactor?

Major refactor

This package is malware. We have asked the package registry to remove it.

What is known malware?

Known malware

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

pdf_editor_aleon35_react_plugin - npm Package File explorer