optimizely-sdk - Package Alerts

This module accesses the network.

Found 1 instance in 1 package

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

This module accesses the network.

Found 296 instances in 296 packages

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 514 instances in 514 packages

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 380 instances in 380 packages

There are packages with similar names that are downloaded much more often.

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 503 instances in 503 packages

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Initial human review suggests the presence of a vulnerability in this package. It is pending further analysis and confirmation.

Found 57 instances in 57 packages