eval
Run JavaScript code
2
views
0
likes
2
installs
analysis — static scan, nothing executed
0
grade C
Risky — serious capabilities found, review before installing
Security
75
Privacy
100
Quality
100
Maintenance
90
Community
12
high
Dynamic code execution
Runs code that is built at runtime (eval, new Function, vm). This is the most common way malicious payloads are hidden in scripts.
L49
let result = await (async () => eval(code))();capabilities — what this file can do, regardless of intent
Network
Filesystem
Shell
Env vars
Dynamic code
Session data
Installs packages
Process control
checks
Exports a command/module
Handles errors (try/catch or .catch)
Readable, not minified
Has explanatory comments
No deprecated dependencies
Reasonable size (< 200 KB)
raw source — loaded on demand
Loading source…