Frontend Craft

• Analyzed: May 19, 2026, 11:54 AM
• Findings: 2
• Version: 2.1.1
• Reason codes:
  suspicious.dangerous_execsuspicious.obfuscated_code
• Engine: v2.4.24

Overview

Detected: suspicious.dangerous_exec, suspicious.obfuscated_code

Findings (2)

critical

suspicious.dangerous_exec

• Location: dist/index.js:187
• Finding: Shell command execution detected (child_process).

Evidence

`);e=e.replace($be,"").trimEnd();let r=Object.create(null),n=d0(0,e,Vbe,"").replace($be,"").trimEnd(),a;for(;a=Vbe.exec(e);){let s=d0(0,a[2],pFt,"");if(typeof r...

warn

suspicious.obfuscated_code

• Location: dist/index.js:152
• Finding: Potential obfuscated payload detected.

Evidence

`){let Ii="Implicit keys of flow sequence pairs need to be on a single line";Ne.errors.push(new t.YAMLSemanticError(ur,Ii));break}}}else Xe=null;Mt=null,$e=!1,U...