skills/917dhj/deeppapernote/deeppapernote/Socket

deeppapernote

Fail

Audited by Socket on Jul 3, 2026

3 alerts found:

Obfuscated FileSecurityx2

Obfuscated Filesite/node_modules/dom-serializer/node_modules/entities/lib/esm/generated/decode-data-html.js

HIGH

Obfuscated FileHIGH

site/node_modules/dom-serializer/node_modules/entities/lib/esm/generated/decode-data-html.js

This module only converts a large embedded Unicode-escaped constant into a Uint16Array and exports it. There is no dynamic execution, I/O, networking, credential access, or other behavior indicative of malware. The main concern is unusual/possibly obfuscated static data content, but it does not by itself imply malicious activity.

Confidence: 90%

Securitysite/node_modules/zod/src/v4/core/doc.ts

MEDIUM

SecurityMEDIUM

site/node_modules/zod/src/v4/core/doc.ts

Securitysite/node_modules/zod/v4/core/doc.js

MEDIUM

SecurityMEDIUM

site/node_modules/zod/v4/core/doc.js

Audit Metadata

Analyzed At

Jul 3, 2026, 08:19 AM

Package URL

pkg:socket/skills-sh/917Dhj%2FDeepPaperNote%2Fdeeppapernote%2F@623547661eef6723fa165198e21cacd1f29bff09