eval

by NTKhang Developer — v1.8 — id #843

No description

views

likes

installs

analysis — static scan, nothing executed

0 grade C

Risky — serious capabilities found, review before installing

Security 75

Privacy 100

Quality 100

Maintenance 82

Community 28

high Dynamic code execution

Runs code that is built at runtime (eval, new Function, vm). This is the most common way malicious payloads are hidden in scripts.

L68let evalResult = await eval(`(async () => { ${code} })()`);

capabilities — what this file can do, regardless of intent

Network Filesystem Shell Env vars Dynamic code Session data Installs packages Process control

checks

Exports a command/module

Handles errors (try/catch or .catch)

Readable, not minified

Has explanatory comments

No deprecated dependencies

Reasonable size (< 200 KB)

raw source — loaded on demand

Loading source…