.eslintrc.js

.vscode

launch.json

tasks.json

README.md

bin.js

build

0515ab82dae6923cab85.woff

1431d1cef06ad04f5458.woff2

169619821ea93019d1bb.woff2

182712ab85f1472cdb2f.woff

198a421f279162d59143.woff

1a05a4887ccb810cb4dd.woff

1f075502d0094a398e21.woff

227c93190fe7f82de3f8.woff2

249853776d22a271b2b5.woff

252057e589a0379208ed.woff

268f264f58eba5c07c88.woff

3230f9b040f3c630e0c3.woff2

32fc45a3d1e8ea11fabc.woff2

3425a701027d0699e369.woff2

3503ec5cc6330e21f695.woff

35b9d6be04b95f0f0530.woff2

392a45a84c081c4b412d.woff

3f2b9a42f643e62a49b7.woff

4777461b144e55145268.woff2

4df79f684fcbca8386bd.woff

50e795c1345353b0e996.woff2

5b5f2f31962967dfc22c.woff

62ced72e5832f02c2796.woff2

657896dad292ee9a0a0a.woff

666d7a2f9db53cf52e2d.woff

6fb9cffb1d3e72bf9293.woff2

71a33b6b50457b2c903a.woff2

804378952da8a10faae2.woff2

8472d69545c7409091b4.woff

861b791f9de857a6e7bc.woff2

8ecd7085cfe9bc2c22ac.woff

9165081d10e1ba601384.woff2

965aebef74db72eaf236.woff

9ac81fefbe6c319ea40b.woff2

a84892c56152037b3552.woff

af4d91666ea345601bea.woff

alert-preload-bundle.js

alert-preload-bundle.js.map

alert-renderer-bundle.js

alert-renderer-bundle.js.LICENSE.txt

alert-renderer-bundle.js.map

alert-renderer.css

alert-renderer.css.map

alert.html

b009a76ad6afe4ebd301.woff2

bd9854c751441ccc1a70.woff2

be4d02458ce53887dc37.woff2

c1cc6d6fc851b3a2f79d.woff

c1d66054fe23e181d92c.woff

c35e4c3958e209d17b31.woff2

c48fb6765a9fcb00b330.woff2

cad7d3d9cb265e334e58.woff2

confirm-preload-bundle.js

confirm-preload-bundle.js.map

confirm-renderer-bundle.js

confirm-renderer-bundle.js.LICENSE.txt

confirm-renderer-bundle.js.map

confirm-renderer.css

confirm-renderer.css.map

confirm.html

d010f1f324e111a22e53.woff2

d8642a3d1d4ef6179644.woff2

db2632771401f61463fe.woff2

dc7dcec8e3f654e0ed63.woff2

dfdff8fa12eac629d29f.woff

e0e8ba725ebd107367a8.woff

e757c42df6aaa3e11b62.woff

eaa367bbd0b333a7f80b.woff

ed67ad54b1a8f5d21150.woff2

f25d774ecfe0996f8eb5.woff2

f708607d2a7290fb8bfa.woff

f8a034d72aa6828199d4.woff

highlight.css

index.css

main-bundle.js

main-bundle.js.LICENSE.txt

main-bundle.js.map

playback-wi.html

playback-window-bidi-preload-bundle.js

playback-window-bidi-preload-bundle.js.LICENSE.txt

playback-window-bidi-preload-bundle.js.map

playback-window-bidi-renderer-bundle.js

playback-window-bidi-renderer-bundle.js.LICENSE.txt

playback-window-bidi-renderer-bundle.js.map

playback-window-bidi-renderer.css

playback-window-bidi-renderer.css.map

playback-window-preload-bundle.js

playback-window-preload-bundle.js.LICENSE.txt

playback-window-preload-bundle.js.map

playback-window-renderer-bundle.js

playback-window.html

project-editor-preload-bundle.js

project-editor-preload-bundle.js.map

Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team

selenium-ide

toddtarsi

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as a potential typosquat of a more popular package. This suggests that the package may be intentionally mimicking another package's name, description, or other metadata.

What is AI-detected potential typosquatting?

AI-detected possible typosquat

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

What are high entropy strings?

High entropy strings

Contains unicode homoglyphs which can be used in supply chain confusion attacks.

What are unicode homoglyphs?

Unicode homoglyphs

selenium-ide - npm Package File explorer